$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cb535352-8a5c-3f67-8a09-ca495d44415a.roa File: cb535352-8a5c-3f67-8a09-ca495d44415a.roa (raw, json) Hash identifier: QjUiqs3IvzcO7CA0BjtjLpPl0V38sOlrJ6hE+hIssmA= Subject key identifier: 88:19:0F:0C:FA:FE:B9:E4:6E:D5:07:B6:D1:C5:B7:C4:ED:4E:DF:B3 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584A0C054A7950ADFC049F4A0D00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cb535352-8a5c-3f67-8a09-ca495d44415a.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 130.137.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:4a:79:50:ad:fc:04:9f:4a:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=8d138157-38a7-41ec-98a1-b73e0aada50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:d0:49:cb:70:10:66:d7:12:0b:25:24:24: 39:5f:e5:36:f3:34:ee:17:02:f0:5e:5e:3f:ae:5a: 08:02:cc:06:5e:03:61:5d:ca:d2:ba:d5:3a:7b:3a: c0:ed:4a:3a:54:1b:21:07:e2:8d:76:c9:ae:1e:70: 9c:7c:e8:75:67:c8:f8:2d:17:92:7b:6b:6a:0c:d9: ec:27:73:87:8d:29:46:30:29:ab:20:78:e2:98:fa: 02:de:40:98:3c:9c:07:f5:6f:c1:0d:8b:96:c2:3f: 83:cf:47:c4:bf:3a:3a:e4:d7:e6:ab:8c:3c:13:25: 43:a6:6d:93:3b:53:d9:82:a0:d7:5e:4a:aa:66:67: 38:ab:05:d8:80:d2:75:32:8a:3c:15:9b:87:e7:f2: 7e:ea:40:8a:58:42:36:85:d7:e4:87:73:92:94:e8: 6a:d0:6f:a4:50:80:45:3c:9c:5c:7b:a8:e6:98:47: 02:dc:1a:40:0f:6c:5e:aa:3d:85:cd:4d:29:42:7f: d1:dd:d1:f4:db:5b:f4:1d:f7:1f:fd:fe:fd:ba:ce: 74:cd:1b:5c:9a:bb:36:f0:4a:b1:7c:d8:ab:37:65: 20:e6:65:d4:04:11:17:34:cf:eb:be:38:34:ae:21: 53:8a:1c:e3:5c:a1:af:5f:84:36:e2:73:f1:e2:ef: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:19:0F:0C:FA:FE:B9:E4:6E:D5:07:B6:D1:C5:B7:C4:ED:4E:DF:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cb535352-8a5c-3f67-8a09-ca495d44415a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:26:ee:4a:7a:0b:52:f9:8a:9e:c0:76:18:b6:6a:95:82:3d: 0a:42:c3:23:b5:f9:7b:4c:f1:57:f7:a3:83:14:7d:90:52:1c: 68:39:e0:8a:09:f2:e8:16:85:97:6d:1f:57:00:49:2e:b1:62: 3a:c0:7d:ef:a1:6f:d8:93:83:a6:85:02:2e:42:2c:3a:26:55: 74:c0:23:97:f0:45:32:db:74:3c:2e:d8:6b:41:00:fd:f2:4f: be:b0:a2:e7:f0:30:6a:49:7c:a3:9a:b6:85:4c:4e:34:00:87: ae:8c:76:b4:f9:93:95:b5:38:7b:f1:29:97:a5:66:89:13:cb: 9d:cb:47:9d:95:d1:44:39:65:74:39:36:cc:f3:06:a5:75:04: 11:85:23:5d:82:2b:05:de:9f:3c:23:c4:b3:36:b2:1b:ad:2b: cb:5a:58:55:b5:02:c8:3b:ce:12:8a:cc:67:ae:f7:d0:11:f2: df:51:33:43:8d:0e:6a:7a:4f:0d:1f:17:f8:10:dd:31:19:ad: 7a:ad:84:96:cb:3c:34:dd:e8:84:8f:14:80:0d:36:2c:0b:2d: 7c:9d:71:98:84:53:70:c8:18:60:d7:64:f6:54:bb:e7:c1:74: ce:ec:80:50:ba:c4:40:1f:d8:c3:1e:83:95:16:60:39:11:27: 4b:04:ee:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUp5UK38BJ9KDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OGQxMzgxNTctMzhhNy00MWVjLTk4YTEtYjczZTBhYWRhNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtInQSctwEGbXEgslJCQ5X+U28zTuFwLwXl4/ rloIAswGXgNhXcrSutU6ezrA7Uo6VBshB+KNdsmuHnCcfOh1Z8j4LReSe2tqDNns J3OHjSlGMCmrIHjimPoC3kCYPJwH9W/BDYuWwj+Dz0fEvzo65Nfmq4w8EyVDpm2T O1PZgqDXXkqqZmc4qwXYgNJ1Moo8FZuH5/J+6kCKWEI2hdfkh3OSlOhq0G+kUIBF PJxce6jmmEcC3BpAD2xeqj2FzU0pQn/R3dH021v0Hfcf/f79us50zRtcmrs28Eqx fNirN2Ug5mXUBBEXNM/rvjg0riFTihzjXKGvX4Q24nPx4u9MUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgZDwz6/rnkbtUHttHFt8TtTt+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2I1MzUzNTItOGE1Yy0z ZjY3LThhMDktY2E0OTVkNDQ0MTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFom7kp6C1L5ip7Adhi2apWCPQpCwyO1+XtM8Vf3o4MUfZBSHGg54IoJ 8ugWhZdtH1cASS6xYjrAfe+hb9iTg6aFAi5CLDomVXTAI5fwRTLbdDwu2GtBAP3y T76woufwMGpJfKOatoVMTjQAh66MdrT5k5W1OHvxKZelZokTy53LR52V0UQ5ZXQ5 NszzBqV1BBGFI12CKwXenzwjxLM2shutK8taWFW1Asg7zhKKzGeu99AR8t9RM0ON Dmp6Tw0fF/gQ3TEZrXqthJbLPDTd6ISPFIANNiwLLXydcZiEU3DIGGDXZPZUu+fB dM7sgFC6xEAf2MMeg5UWYDkRJ0sE7sQ= -----END CERTIFICATE-----Generated at Sun Jun 15 00:01:30 2025 by rpki-client