$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa File: b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa (raw, json) Hash identifier: QPw9y6kp7Ny4zMdaXu0zqqMlRLsni0C9TGbS2rkO9sk= Subject key identifier: B1:D5:1C:28:85:6D:84:44:40:92:1B:33:13:76:49:DE:4B:54:4F:24 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849D42FB355E0AB22D86456CBE0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 8987 IP address blocks: 130.137.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b3:55:e0:ab:22:d8:64:56:cb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=685406c8-80a2-46b0-a3e7-0d9f130dab42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a6:04:0a:e8:22:79:82:6d:7a:1a:4c:4b:07: a3:1c:3b:d5:23:3c:85:0e:f9:f2:44:94:eb:72:e1: 5c:b6:58:02:3f:21:e5:aa:81:de:9e:45:fc:fb:c0: 43:fb:ec:ff:ed:27:45:c6:fe:fe:cd:4d:2d:84:76: c1:42:3b:32:5e:cf:00:87:26:77:5c:84:54:8d:78: fd:05:b8:f9:03:40:29:13:6d:44:0d:f5:5a:77:04: 45:82:4e:29:70:e8:96:8e:f2:e6:a6:45:f4:b3:64: 7d:74:cb:6b:2c:71:ff:57:14:07:86:30:2c:22:ba: 1b:48:7a:b9:b7:ec:82:ce:f5:e8:5b:ad:53:ba:14: 9c:74:15:87:85:4b:4f:70:e7:2e:9a:83:9a:bc:f5: 36:fc:b9:9b:54:4f:6e:c4:7b:56:bc:81:8e:b8:8c: 9b:f2:05:4d:a8:88:cd:72:fc:8d:d8:e5:d3:89:b3: 7d:7e:03:52:dd:64:50:82:4b:ef:ad:9c:87:c2:46: f6:db:6d:28:be:54:55:5b:c0:da:53:33:a4:16:58: 38:e5:16:5c:19:07:ce:ec:ab:f3:a1:2b:27:8b:85: d6:37:04:69:6b:f6:26:d2:28:d3:ce:46:32:bd:99: 4b:53:68:75:8b:13:76:db:3d:01:8d:55:1e:97:96: 4f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D5:1C:28:85:6D:84:44:40:92:1B:33:13:76:49:DE:4B:54:4F:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a1:d4:6f:83:46:07:a8:fd:08:33:23:a8:8f:2f:12:5c:bd: 91:07:6c:93:2b:9d:be:92:dc:2a:aa:67:c2:0b:6d:87:e2:c5: 70:9f:b4:b9:b4:ff:44:4f:f7:f5:6a:d5:bc:dc:e5:c3:f3:04: 75:94:16:03:53:81:ea:5f:db:d2:c4:d2:a3:99:04:d4:63:a4: 18:0f:80:ec:f6:d6:0d:7a:eb:ea:9a:32:c1:e9:e0:be:0c:50: 8d:d7:3c:13:52:ca:b5:5b:81:67:68:2e:8d:04:6f:b0:dd:4a: a1:0e:04:e4:96:e7:da:23:ca:83:c7:5f:d0:d7:27:4e:63:a7: bf:f9:db:1c:9d:0b:ab:92:7c:64:b1:3e:26:5a:17:2b:95:5f: 2c:65:b7:0e:19:c4:79:93:3f:f4:15:81:88:1e:60:28:7d:a7: 00:5c:a7:b7:22:68:b9:28:a0:85:32:49:0f:cf:b2:37:7a:cc: c4:ce:8f:1b:9b:7d:46:1e:17:fd:cb:5e:54:bf:1e:9a:df:c8: 8d:e8:0a:15:0e:c8:44:da:32:97:b2:0d:46:e7:31:b4:51:92: 08:a5:2d:44:b3:bc:71:bd:b6:d2:f7:15:19:4f:ed:45:f3:1f: 57:3b:a4:dd:1f:2f:e0:88:c4:55:bb:b0:24:f3:5e:96:ec:26: ce:da:42:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7NV4Ksi2GRWy+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Njg1NDA2YzgtODBhMi00NmIwLWEzZTctMGQ5ZjEzMGRhYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaYECugieYJtehpMSwejHDvVIzyFDvnyRJTr cuFctlgCPyHlqoHenkX8+8BD++z/7SdFxv7+zU0thHbBQjsyXs8AhyZ3XIRUjXj9 Bbj5A0ApE21EDfVadwRFgk4pcOiWjvLmpkX0s2R9dMtrLHH/VxQHhjAsIrobSHq5 t+yCzvXoW61TuhScdBWHhUtPcOcumoOavPU2/LmbVE9uxHtWvIGOuIyb8gVNqIjN cvyN2OXTibN9fgNS3WRQgkvvrZyHwkb2220ovlRVW8DaUzOkFlg45RZcGQfO7Kvz oSsni4XWNwRpa/Ym0ijTzkYyvZlLU2h1ixN22z0BjVUel5ZP7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHVHCiFbYREQJIbMxN2Sd5LVE8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjg5NjM1MWMtY2EwYS0z MzQxLWEwZTktNzNmNmZjZWZhOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOh1G+DRgeo/QgzI6iPLxJcvZEHbJMrnb6S3CqqZ8ILbYfixXCftLm0 /0RP9/Vq1bzc5cPzBHWUFgNTgepf29LE0qOZBNRjpBgPgOz21g166+qaMsHp4L4M UI3XPBNSyrVbgWdoLo0Eb7DdSqEOBOSW59ojyoPHX9DXJ05jp7/52xydC6uSfGSx PiZaFyuVXyxltw4ZxHmTP/QVgYgeYCh9pwBcp7ciaLkooIUySQ/Psjd6zMTOjxub fUYeF/3LXlS/HprfyI3oChUOyETaMpeyDUbnMbRRkgilLUSzvHG9ttL3FRlP7UXz H1c7pN0fL+CIxFW7sCTzXpbsJs7aQpM= -----END CERTIFICATE-----Generated at Mon Jun 16 15:26:52 2025 by rpki-client