$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a06f6fce-40c6-399a-9ee1-82c5f3a2cf36.roa File: a06f6fce-40c6-399a-9ee1-82c5f3a2cf36.roa (raw, json) Hash identifier: RhKm2m91fBJooNJZphTWXBTXXpcVWCvYWD95Qlpf1eU= Subject key identifier: D4:38:98:D5:E2:31:0D:F7:48:EB:4B:70:1F:56:05:D6:06:17:D9:98 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849C904DAF25DAC62A77B4AAE00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a06f6fce-40c6-399a-9ee1-82c5f3a2cf36.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 130.137.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:da:f2:5d:ac:62:a7:7b:4a:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=1c8075c9-71bb-4027-a441-817698bf4068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:17:00:a7:b5:10:c8:b1:1e:43:70:ba:9c: 3d:6f:04:e3:55:cb:67:58:eb:d2:b6:1c:fc:1d:68: ea:0e:98:82:6e:6d:b2:15:4e:86:51:28:31:76:d9: 6a:9e:a8:f7:b7:6b:5f:17:49:06:80:8f:47:7f:46: 84:29:26:03:7a:73:8a:a8:c5:49:03:a6:48:89:c7: 55:7a:01:11:3a:4b:29:03:1e:c2:e2:81:60:45:7c: cc:52:38:b9:00:21:d6:f7:bc:82:6c:17:1d:aa:bc: 91:39:9f:bb:38:46:ff:61:42:93:bb:4f:c5:ce:d0: 43:70:04:52:cf:e2:13:68:ca:65:d0:53:57:f9:05: 3c:17:c0:07:ed:ff:b4:67:54:70:e8:a6:1b:e2:d2: 8b:08:8c:14:a4:d1:f2:e3:25:75:38:53:bf:cc:a2: 7f:aa:60:95:25:61:6e:19:2a:eb:f2:23:7a:1e:a7: 4e:93:17:91:13:5e:8c:77:a0:3c:ab:f6:a6:6b:f4: 59:8c:d6:7f:2f:d4:41:e3:38:dc:93:57:fe:e8:33: 14:d0:6b:09:c7:59:00:4e:98:42:36:48:d3:bf:a2: 76:8b:92:ed:46:36:01:21:1d:bf:b1:1f:70:e4:4f: e5:ec:42:8f:e7:5b:bb:31:dc:6e:42:8a:7b:c5:d3: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:38:98:D5:E2:31:0D:F7:48:EB:4B:70:1F:56:05:D6:06:17:D9:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a06f6fce-40c6-399a-9ee1-82c5f3a2cf36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:1f:81:80:87:47:74:db:2b:1c:69:42:f1:66:08:94:39:9e: c0:b4:ce:37:cf:98:66:f1:1f:4b:0d:d1:21:bb:e9:ba:f1:b8: 32:9f:51:b9:36:98:43:63:fc:57:3d:fe:f6:25:2d:3d:fa:ff: 68:71:54:bb:c0:f5:8d:89:59:22:32:26:a0:31:f2:28:1c:d1: 1f:2a:38:40:e6:e8:51:65:81:44:99:d9:59:f9:c1:45:11:96: 59:19:cd:15:1f:87:e3:c7:67:61:99:d8:30:a6:d9:94:95:a2: 41:f9:e7:16:15:8f:b0:20:86:33:c8:af:25:c0:61:85:9e:50: 73:ba:83:24:d4:b5:b9:92:e6:b8:8a:3a:09:73:35:b2:0d:e6: ff:dc:06:98:20:e4:cd:73:de:9e:9a:cb:bd:31:86:c2:27:8f: ce:89:33:33:aa:32:f8:57:ce:7f:6f:3b:8c:dc:39:c4:b4:ae: f3:85:3b:d9:e2:37:5d:e7:cd:a0:58:6b:ae:f5:d3:e9:9e:f7: f1:90:36:52:8a:01:d7:30:26:25:7c:b6:55:cf:55:ab:76:55: 11:d2:43:04:63:17:c2:81:84:12:a9:50:66:bc:b2:f3:03:c5: ca:9e:9f:51:1a:c1:f1:3d:18:11:16:94:2d:23:60:5e:27:45: ef:ba:f2:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBNryXaxip3tKrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk MWM4MDc1YzktNzFiYi00MDI3LWE0NDEtODE3Njk4YmY0MDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS0XAKe1EMixHkNwupw9bwTjVctnWOvSthz8 HWjqDpiCbm2yFU6GUSgxdtlqnqj3t2tfF0kGgI9Hf0aEKSYDenOKqMVJA6ZIicdV egEROkspAx7C4oFgRXzMUji5ACHW97yCbBcdqryROZ+7OEb/YUKTu0/FztBDcARS z+ITaMpl0FNX+QU8F8AH7f+0Z1Rw6KYb4tKLCIwUpNHy4yV1OFO/zKJ/qmCVJWFu GSrr8iN6HqdOkxeRE16Md6A8q/ama/RZjNZ/L9RB4zjck1f+6DMU0GsJx1kATphC NkjTv6J2i5LtRjYBIR2/sR9w5E/l7EKP51u7MdxuQop7xdPLAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ4mNXiMQ33SOtLcB9WBdYGF9mYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTA2ZjZmY2UtNDBjNi0z OTlhLTllZTEtODJjNWYzYTJjZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEfgYCHR3TbKxxpQvFmCJQ5nsC0zjfPmGbxH0sN0SG76brxuDKfUbk2 mENj/Fc9/vYlLT36/2hxVLvA9Y2JWSIyJqAx8igc0R8qOEDm6FFlgUSZ2Vn5wUUR llkZzRUfh+PHZ2GZ2DCm2ZSVokH55xYVj7AghjPIryXAYYWeUHO6gyTUtbmS5riK OglzNbIN5v/cBpgg5M1z3p6ay70xhsInj86JMzOqMvhXzn9vO4zcOcS0rvOFO9ni N13nzaBYa6710+me9/GQNlKKAdcwJiV8tlXPVat2VRHSQwRjF8KBhBKpUGa8svMD xcqen1EawfE9GBEWlC0jYF4nRe+68hQ= -----END CERTIFICATE-----Generated at Sat May 10 03:07:52 2025 by rpki-client