$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c4c73e78-966a-39bc-b62f-fd2f273d0d84.roa File: c4c73e78-966a-39bc-b62f-fd2f273d0d84.roa (raw, json) Hash identifier: vQGSEWhlEOzrJRJ+DzkBr6ByF4BEbWfcVLTDi0FO3Yg= Subject key identifier: B6:FA:DD:5C:13:E5:5D:E1:AE:D9:47:F8:A8:50:4A:09:60:C9:83:43 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849C904E492C2D9E99DD8C1BB00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c4c73e78-966a-39bc-b62f-fd2f273d0d84.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 130.137.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:e4:92:c2:d9:e9:9d:d8:c1:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=cc3514a1-990a-45a1-9040-666dcfb6699c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:df:89:3c:fd:07:09:86:05:37:3a:7b:a7: 68:36:e5:61:c5:4c:a9:dc:a2:47:e5:24:70:45:34: eb:56:6c:14:e8:09:fb:fe:ac:67:c4:fb:96:0d:8d: 03:93:02:c5:2d:0e:d9:cb:10:54:8b:57:b0:3b:b0: 1b:cb:88:c8:87:1a:bb:a1:2e:e0:a1:d0:92:b4:22: ec:7d:d8:7d:3c:cb:95:36:f5:8c:b1:28:bc:8c:49: 5d:c0:2f:fe:1b:80:c5:16:79:a5:fa:ab:85:a0:0d: 24:00:55:c5:3d:1f:11:f4:78:b8:ac:e2:dd:11:a7: b6:a6:f4:58:4d:c3:65:33:94:cd:a2:a0:64:10:a3: 88:d9:34:44:5d:7d:fe:fa:35:d1:60:e4:f2:4b:f0: 5b:61:ac:e1:3f:7c:d1:ef:7b:c0:d1:71:24:d7:23: 29:c8:bd:9e:ea:72:ce:05:22:00:2b:a2:71:e1:d4: 46:2c:3d:98:d7:b9:5e:2b:d1:e8:07:0b:fb:39:23: d4:cf:f2:32:7c:19:a3:21:db:3d:8c:3b:14:dd:cb: 95:71:e0:06:63:15:23:85:fc:c6:6a:a0:e0:2b:10: 67:4a:c4:56:59:e3:04:37:10:68:d1:5a:c0:b2:4b: 8a:a1:34:9c:01:13:97:48:ce:27:da:07:16:5e:86: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FA:DD:5C:13:E5:5D:E1:AE:D9:47:F8:A8:50:4A:09:60:C9:83:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c4c73e78-966a-39bc-b62f-fd2f273d0d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c2:7d:3d:37:de:a5:72:de:94:ab:8a:c7:d2:85:68:08:c2: 96:b1:e2:ee:7f:22:b5:df:30:77:f6:30:6c:0a:95:82:e9:ce: 09:07:f9:bf:b3:58:f6:3c:78:16:70:0b:4d:71:74:ca:e2:b6: 3d:6d:1f:a7:dd:02:44:ec:39:34:e9:1e:a0:20:d1:21:42:e3: cf:7f:82:4f:9c:e2:50:43:da:0b:95:02:1c:4c:b8:f5:86:87: 68:75:df:29:6a:a4:eb:16:7d:60:df:16:6c:44:88:95:e2:08: 1a:9f:de:48:8c:a7:a7:b7:19:06:6e:70:bb:9f:49:74:eb:e6: ce:d9:a5:e2:90:e1:e6:c4:b9:60:ea:e2:ff:21:d4:0d:63:c1: 86:49:08:5b:74:fe:8f:3a:9f:a5:69:e8:66:3a:10:12:bd:6c: 8d:ce:1f:95:ed:fe:d3:10:2d:e7:23:80:ba:d3:c5:1e:c8:a3: a3:df:8f:8e:e7:9c:a1:4b:c9:8f:86:bb:2a:31:17:5f:0e:2f: 2a:29:fd:c0:8e:b1:2c:a2:87:30:73:cd:6f:0c:17:79:f4:59: 63:b2:6a:23:04:f0:f1:47:07:4a:96:af:3a:af:02:ef:66:84: 89:ab:94:5a:24:48:93:7e:78:aa:fd:e9:14:4d:10:3d:15:56: a1:7f:8b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBOSSwtnpndjBuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk Y2MzNTE0YTEtOTkwYS00NWExLTkwNDAtNjY2ZGNmYjY2OTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8rfiTz9BwmGBTc6e6doNuVhxUyp3KJH5SRw RTTrVmwU6An7/qxnxPuWDY0DkwLFLQ7ZyxBUi1ewO7Aby4jIhxq7oS7godCStCLs fdh9PMuVNvWMsSi8jEldwC/+G4DFFnml+quFoA0kAFXFPR8R9Hi4rOLdEae2pvRY TcNlM5TNoqBkEKOI2TREXX3++jXRYOTyS/BbYazhP3zR73vA0XEk1yMpyL2e6nLO BSIAK6Jx4dRGLD2Y17leK9HoBwv7OSPUz/IyfBmjIds9jDsU3cuVceAGYxUjhfzG aqDgKxBnSsRWWeMENxBo0VrAskuKoTScAROXSM4n2gcWXoZQWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLb63VwT5V3hrtlH+KhQSglgyYNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYzRjNzNlNzgtOTY2YS0z OWJjLWI2MmYtZmQyZjI3M2QwZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATCfT033qVy3pSrisfShWgIwpax4u5/IrXfMHf2MGwKlYLpzgkH+b+z WPY8eBZwC01xdMritj1tH6fdAkTsOTTpHqAg0SFC489/gk+c4lBD2guVAhxMuPWG h2h13ylqpOsWfWDfFmxEiJXiCBqf3kiMp6e3GQZucLufSXTr5s7ZpeKQ4ebEuWDq 4v8h1A1jwYZJCFt0/o86n6Vp6GY6EBK9bI3OH5Xt/tMQLecjgLrTxR7Io6Pfj47n nKFLyY+GuyoxF18OLyop/cCOsSyihzBzzW8MF3n0WWOyaiME8PFHB0qWrzqvAu9m hImrlFokSJN+eKr96RRNED0VVqF/i+g= -----END CERTIFICATE-----Generated at Sat May 10 03:19:19 2025 by rpki-client