$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d90f6627-cf4f-33ec-aaf9-8c1563fa04cd.roa File: d90f6627-cf4f-33ec-aaf9-8c1563fa04cd.roa (raw, json) Hash identifier: HHld02Rbl26HRYVVK7eqbIsQ+P13StHG8pB+UwaayDQ= Subject key identifier: 28:E9:37:B1:C0:88:FD:54:72:D2:C1:2F:4B:A7:9C:9B:AD:D7:2F:5E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584A10353F4CB2DF27ED9AE0E080 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d90f6627-cf4f-33ec-aaf9-8c1563fa04cd.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 8987 IP address blocks: 130.137.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:3f:4c:b2:df:27:ed:9a:e0:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=b2050d70-bdc8-47e2-82b2-d17da4c3eb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:33:59:62:de:5d:5d:c4:8d:df:af:6f:93:22: 7e:28:dc:bd:83:1e:7b:7d:11:fd:0d:7c:44:35:ab: a3:9c:a2:4a:82:25:81:13:b1:4f:56:8e:be:4d:31: 91:e0:5b:c5:3a:8e:18:10:10:ff:75:e9:98:8b:54: f1:29:0c:32:cf:c1:2f:7c:5c:12:fe:da:16:85:22: 84:bf:1e:e8:92:a8:6f:47:ea:de:f2:71:99:b9:4c: 47:8a:f3:bf:b5:99:5e:b7:4b:9b:2d:f2:c5:d0:51: 1e:4e:29:76:56:c1:af:07:d3:06:78:38:eb:5a:a1: fe:95:cf:c3:3d:f9:1d:ba:44:bd:d0:04:9b:5b:7a: ff:22:39:4d:34:0f:2f:dc:45:69:48:44:a5:6d:22: ae:2a:82:72:8f:b6:53:fa:f9:5e:56:aa:f2:00:31: 61:5f:e2:7b:13:c2:27:aa:f2:9e:69:6a:33:00:f7: 62:ba:fc:99:be:0b:69:0e:6f:13:4a:82:f2:25:61: de:03:49:84:64:d6:d0:6b:71:32:29:f9:20:7a:4b: 7c:39:a2:1d:b9:1c:c7:07:a3:93:f6:2e:25:04:10: 55:a4:e8:28:a5:f4:62:ff:3f:52:c5:3a:e1:aa:f8: a6:02:98:31:b7:7d:89:62:e1:e4:1d:e7:e3:f2:e7: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E9:37:B1:C0:88:FD:54:72:D2:C1:2F:4B:A7:9C:9B:AD:D7:2F:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d90f6627-cf4f-33ec-aaf9-8c1563fa04cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a4:84:47:8c:44:95:3e:30:e8:aa:1a:87:25:88:d4:78:c7: de:6e:be:d3:5a:46:a5:60:ab:1a:df:d8:68:b1:59:40:9d:5a: ed:7b:22:86:66:eb:c0:54:e1:d0:4d:c0:f2:f7:22:5f:9a:94: c8:06:0f:64:0b:8c:ee:0b:dc:95:97:97:03:84:45:4e:01:79: da:67:77:ab:bf:60:d8:d8:2d:12:3f:bc:ed:e3:cb:8d:77:e4: bf:25:1c:d6:4b:d2:69:66:2e:ce:29:96:4a:7b:ea:dd:d4:c7: c6:59:ee:92:e6:12:5d:ea:70:b7:23:1f:fe:d9:ef:fb:57:bb: 5d:8e:dd:d9:fc:d6:e5:c1:e3:09:ff:90:0e:64:ea:73:a1:cf: a3:a8:7e:4c:ac:61:fe:e1:db:95:b2:2f:eb:7a:a0:3a:80:e9: 3b:a4:d6:f7:75:16:32:17:2c:ea:f0:dd:9d:92:8a:5a:21:9c: 89:3f:f5:f2:32:37:b1:33:32:b5:d1:2d:76:cc:c5:03:5e:b7: 6a:b8:c0:90:e5:26:de:85:11:53:a0:fd:ea:d5:1f:5c:6a:98: 97:06:fb:96:9f:84:e6:72:d6:16:f0:77:d3:d6:3d:46:a5:3d: 9a:96:54:66:95:8c:21:0d:f9:9f:d2:1e:66:53:5f:52:5b:b1: f9:1a:45:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNT9Mst8n7Zrg4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk YjIwNTBkNzAtYmRjOC00N2UyLTgyYjItZDE3ZGE0YzNlYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDNZYt5dXcSN369vkyJ+KNy9gx57fRH9DXxE NaujnKJKgiWBE7FPVo6+TTGR4FvFOo4YEBD/demYi1TxKQwyz8EvfFwS/toWhSKE vx7okqhvR+re8nGZuUxHivO/tZlet0ubLfLF0FEeTil2VsGvB9MGeDjrWqH+lc/D PfkdukS90ASbW3r/IjlNNA8v3EVpSESlbSKuKoJyj7ZT+vleVqryADFhX+J7E8In qvKeaWozAPdiuvyZvgtpDm8TSoLyJWHeA0mEZNbQa3EyKfkgekt8OaIduRzHB6OT 9i4lBBBVpOgopfRi/z9SxTrhqvimApgxt32JYuHkHefj8uewzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjpN7HAiP1UctLBL0unnJut1y9eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDkwZjY2MjctY2Y0Zi0z M2VjLWFhZjktOGMxNTYzZmEwNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgoncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGkhEeMRJU+MOiqGocliNR4x95uvtNaRqVgqxrf2GixWUCdWu17IoZm 68BU4dBNwPL3Il+alMgGD2QLjO4L3JWXlwOERU4Bedpnd6u/YNjYLRI/vO3jy413 5L8lHNZL0mlmLs4plkp76t3Ux8ZZ7pLmEl3qcLcjH/7Z7/tXu12O3dn81uXB4wn/ kA5k6nOhz6OofkysYf7h25WyL+t6oDqA6Tuk1vd1FjIXLOrw3Z2SilohnIk/9fIy N7EzMrXRLXbMxQNet2q4wJDlJt6FEVOg/erVH1xqmJcG+5afhOZy1hbwd9PWPUal PZqWVGaVjCEN+Z/SHmZTX1JbsfkaRfY= -----END CERTIFICATE-----Generated at Sun Jun 15 13:57:19 2025 by rpki-client