$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cae00bd0-1e39-3bf3-ad69-dc02d8dd214a.roa File: cae00bd0-1e39-3bf3-ad69-dc02d8dd214a.roa (raw, json) Hash identifier: YgWnW9N/G/cmq4DbZaUfvl+UW9/150qZVew7Za4dP08= Subject key identifier: CA:FF:BD:13:80:F1:60:21:A5:8B:41:E4:27:5F:E9:E2:45:97:CD:75 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849F2E52F73A42B1FD6DF380900 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cae00bd0-1e39-3bf3-ad69-dc02d8dd214a.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 130.137.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:2f:73:a4:2b:1f:d6:df:38:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=c296b968-ec01-4772-af44-a7fe71f3a23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:db:b6:06:70:4e:26:d9:6f:79:23:51:71:7e: e5:ef:2b:06:d1:50:b8:2a:52:dc:1d:13:fe:c1:5d: 3b:57:dc:10:ec:51:ae:2d:0e:a3:b2:7b:5f:26:ec: ca:ae:c2:6c:b3:eb:91:e6:84:35:0f:0c:1c:c4:e7: fa:e4:9c:0a:0a:10:71:62:2c:27:78:d9:18:eb:68: 7c:37:16:8a:d9:57:03:26:87:cb:6c:5e:bd:e1:f4: 12:d8:2c:d3:97:87:8c:52:36:a4:d4:4a:3d:45:be: 7e:e4:bd:02:fe:22:35:fe:30:b1:1c:c0:b1:81:2f: 1a:84:c1:f3:43:3d:df:98:48:3b:50:47:c0:c9:0e: 6e:87:7e:9b:77:e8:67:83:3c:a8:5e:d0:5b:3e:3e: 6f:20:d4:07:81:0a:0c:3a:14:c7:7e:53:bd:3d:d5: 1c:c8:39:53:41:39:cd:b1:6a:48:a8:5b:c8:a9:0a: dd:f4:af:4c:0b:1a:9b:1c:72:81:3d:db:dd:88:bb: 61:2b:09:b2:e4:33:2b:64:3f:4e:54:91:85:a6:ea: 5c:ff:ed:38:8f:b5:ab:b7:2c:45:bb:2a:47:ba:69: 3f:f3:28:6f:8b:22:84:98:63:9f:90:05:d2:28:43: 97:e0:65:08:03:2b:28:b6:bf:1b:26:5f:1a:77:58: 52:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FF:BD:13:80:F1:60:21:A5:8B:41:E4:27:5F:E9:E2:45:97:CD:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cae00bd0-1e39-3bf3-ad69-dc02d8dd214a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d3:23:fb:c8:40:eb:3a:40:a1:b3:20:07:65:01:1d:bc:c3: ee:76:28:be:05:03:01:73:70:dd:4c:7b:2c:32:2f:cf:46:57: 0a:d5:89:dc:e3:91:6e:71:d8:83:74:93:c1:d0:05:0e:4c:8a: 88:79:a4:72:30:17:de:d8:97:50:ef:de:b8:04:23:da:fd:6e: 80:98:55:d5:01:dc:a1:f9:8f:39:cb:db:d7:b9:c4:eb:e6:71: 46:1e:e9:5a:98:ea:bb:52:3f:a2:19:95:0a:44:1a:fa:9f:19: d9:f8:f7:d0:da:16:b7:4f:f7:42:b9:f0:46:98:47:d5:ee:c6: fe:25:2b:5d:79:83:6f:fa:d4:8b:b3:a6:20:79:01:a7:80:6b: 0d:dc:37:61:d5:be:92:68:f1:b2:90:92:bd:24:15:f7:90:df: 72:66:3e:f7:3c:6f:06:e2:d0:b3:b0:2f:ef:18:f6:e6:0b:e7: 1e:f8:55:ef:a1:62:e0:79:9f:d1:3a:b1:bf:cd:a4:02:3e:23: 80:95:ef:67:23:70:b9:31:8e:e4:2f:25:a1:f1:fd:43:d9:f3: 22:66:f4:11:21:6c:53:cb:f0:47:11:c9:70:9f:3d:6d:9e:65: 5b:f5:16:6a:c7:ac:0b:6f:23:9c:7b:86:70:dd:41:0c:f7:f3: a4:e3:63:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5S9zpCsf1t84CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk YzI5NmI5NjgtZWMwMS00NzcyLWFmNDQtYTdmZTcxZjNhMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19u2BnBOJtlveSNRcX7l7ysG0VC4KlLcHRP+ wV07V9wQ7FGuLQ6jsntfJuzKrsJss+uR5oQ1DwwcxOf65JwKChBxYiwneNkY62h8 NxaK2VcDJofLbF694fQS2CzTl4eMUjak1Eo9Rb5+5L0C/iI1/jCxHMCxgS8ahMHz Qz3fmEg7UEfAyQ5uh36bd+hngzyoXtBbPj5vINQHgQoMOhTHflO9PdUcyDlTQTnN sWpIqFvIqQrd9K9MCxqbHHKBPdvdiLthKwmy5DMrZD9OVJGFpupc/+04j7WrtyxF uypHumk/8yhviyKEmGOfkAXSKEOX4GUIAysotr8bJl8ad1hSoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr/vROA8WAhpYtB5Cdf6eJFl811MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2FlMDBiZDAtMWUzOS0z YmYzLWFkNjktZGMwMmQ4ZGQyMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbTI/vIQOs6QKGzIAdlAR28w+52KL4FAwFzcN1MeywyL89GVwrVidzj kW5x2IN0k8HQBQ5Mioh5pHIwF97Yl1Dv3rgEI9r9boCYVdUB3KH5jznL29e5xOvm cUYe6VqY6rtSP6IZlQpEGvqfGdn499DaFrdP90K58EaYR9Xuxv4lK115g2/61Iuz piB5AaeAaw3cN2HVvpJo8bKQkr0kFfeQ33JmPvc8bwbi0LOwL+8Y9uYL5x74Ve+h YuB5n9E6sb/NpAI+I4CV72cjcLkxjuQvJaHx/UPZ8yJm9BEhbFPL8EcRyXCfPW2e ZVv1FmrHrAtvI5x7hnDdQQz386TjY1Y= -----END CERTIFICATE-----Generated at Sat Jun 14 23:59:17 2025 by rpki-client