$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/df45dc01-dbe8-326a-a444-9d70445a1cfd.roa File: df45dc01-dbe8-326a-a444-9d70445a1cfd.roa (raw, json) Hash identifier: tJzMNLNsMUWKDUi+PFPhPrgzmNV6xe+iQqCE2jwbvmo= Subject key identifier: 90:C2:A7:73:D1:4E:0D:88:7A:9A:AD:DA:46:37:59:A6:CF:3F:1C:D4 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584A0C054A5C951281D61C543E00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/df45dc01-dbe8-326a-a444-9d70445a1cfd.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 130.137.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:4a:5c:95:12:81:d6:1c:54:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=4205869d-c8cb-4712-a010-0fcb594ded3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:69:62:e9:b9:65:d1:81:48:48:60:ad:3e:ee: ca:f9:6e:5b:18:28:e3:ed:b7:63:69:76:e4:e9:a1: 6d:79:d9:aa:0e:5c:28:63:a3:ff:9b:21:22:f1:41: b9:70:45:fb:c3:9c:22:ac:1f:95:1d:fb:f8:5b:93: 07:13:47:9b:82:78:31:71:66:24:cd:81:0d:42:a8: 7a:99:7f:cf:c9:26:96:89:98:ad:19:24:07:f6:b2: f0:f9:5b:bb:62:9e:ef:8a:84:ab:3a:dc:40:f0:46: 71:0b:ac:94:9e:85:10:d3:f6:53:50:1f:00:9b:02: c4:3b:aa:e9:19:eb:bf:32:75:6b:23:e2:86:42:da: 90:4b:1d:ca:da:6c:44:ea:b1:0b:90:d4:61:2b:39: 1a:03:68:7a:5f:3f:cc:03:20:5e:7c:bd:a6:dd:7b: b4:2c:37:f7:12:f2:62:13:1d:d3:b0:4c:08:be:4f: 10:bc:be:1b:d7:55:cd:10:f6:83:3e:dd:9d:c9:96: 98:76:1c:16:52:1d:cc:bb:bf:d4:ee:8a:70:12:70: ad:94:8c:ff:95:34:d2:3d:7b:61:7a:3b:21:59:4d: 95:aa:11:9d:f8:6d:cc:c1:6a:e5:55:ee:69:82:89: 81:79:be:6b:17:18:dc:00:2f:f1:be:88:f9:61:39: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C2:A7:73:D1:4E:0D:88:7A:9A:AD:DA:46:37:59:A6:CF:3F:1C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/df45dc01-dbe8-326a-a444-9d70445a1cfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:89:de:94:fc:24:2a:60:96:c6:c0:0d:3e:49:eb:3d:0a:ea: 43:6f:13:3c:8b:ab:a7:43:9c:fc:93:67:21:fb:46:dd:9e:6f: 50:37:40:4e:65:b9:57:6c:4c:0a:14:2b:14:17:16:b2:5c:a5: 0b:b3:4c:0a:91:f7:ee:66:cf:10:5f:49:de:b5:af:53:c0:47: 48:48:07:59:d4:2a:c7:3f:01:49:6b:eb:be:ee:d5:24:30:a2: 25:f9:49:f0:bc:05:47:1d:58:a0:7e:13:d4:ba:da:22:08:72: 65:a8:9f:01:75:16:1f:d9:f1:40:dd:3d:ad:08:ed:35:a4:3f: 09:bc:d0:1b:08:06:29:80:02:12:1f:ef:27:8e:3c:7d:28:74: 80:b7:9e:65:8b:cf:3d:23:4c:bc:0e:19:5a:d9:88:89:1a:7d: b0:14:27:a1:f3:7b:f8:54:4a:f5:13:c9:48:52:19:a2:bb:4b: a0:37:f9:b7:ea:26:e1:33:90:52:46:ea:40:2d:e4:1f:db:d9: 3a:e0:3c:50:60:1f:eb:fc:31:78:8e:2a:20:2c:ec:a3:60:18: 48:a5:4a:55:19:0d:57:4d:af:ec:3c:1a:4c:df:32:25:e6:55: e0:00:a7:1a:9c:a6:11:3f:ad:14:bd:87:9c:39:64:dd:f5:7f: 05:b3:d8:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUpclRKB1hxUPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NDIwNTg2OWQtYzhjYi00NzEyLWEwMTAtMGZjYjU5NGRlZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02li6bll0YFISGCtPu7K+W5bGCjj7bdjaXbk 6aFtedmqDlwoY6P/myEi8UG5cEX7w5wirB+VHfv4W5MHE0ebgngxcWYkzYENQqh6 mX/PySaWiZitGSQH9rLw+Vu7Yp7vioSrOtxA8EZxC6yUnoUQ0/ZTUB8AmwLEO6rp Geu/MnVrI+KGQtqQSx3K2mxE6rELkNRhKzkaA2h6Xz/MAyBefL2m3Xu0LDf3EvJi Ex3TsEwIvk8QvL4b11XNEPaDPt2dyZaYdhwWUh3Mu7/U7opwEnCtlIz/lTTSPXth ejshWU2VqhGd+G3MwWrlVe5pgomBeb5rFxjcAC/xvoj5YTkq+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDCp3PRTg2Iepqt2kY3WabPPxzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZGY0NWRjMDEtZGJlOC0z MjZhLWE0NDQtOWQ3MDQ0NWExY2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2J3pT8JCpglsbADT5J6z0K6kNvEzyLq6dDnPyTZyH7Rt2eb1A3QE5l uVdsTAoUKxQXFrJcpQuzTAqR9+5mzxBfSd61r1PAR0hIB1nUKsc/AUlr677u1SQw oiX5SfC8BUcdWKB+E9S62iIIcmWonwF1Fh/Z8UDdPa0I7TWkPwm80BsIBimAAhIf 7yeOPH0odIC3nmWLzz0jTLwOGVrZiIkafbAUJ6Hze/hUSvUTyUhSGaK7S6A3+bfq JuEzkFJG6kAt5B/b2TrgPFBgH+v8MXiOKiAs7KNgGEilSlUZDVdNr+w8GkzfMiXm VeAApxqcphE/rRS9h5w5ZN31fwWz2KY= -----END CERTIFICATE-----Generated at Sat Jun 14 06:10:34 2025 by rpki-client