$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/02d4dbb7-99e0-368d-bd3c-b8b09bf98779.roa File: 02d4dbb7-99e0-368d-bd3c-b8b09bf98779.roa (raw, json) Hash identifier: bODUjLX1Sj2IHUBJtxevE3DKBug+a8qEaKQJC4Pei24= Subject key identifier: 5C:14:C7:16:45:A7:2F:A6:51:B3:1F:39:D4:19:EC:20:84:1E:31:D6 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADA9BB974FFDDE61ACD1EDB00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/02d4dbb7-99e0-368d-bd3c-b8b09bf98779.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 130.137.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b9:74:ff:dd:e6:1a:cd:1e:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=6a69e6f1-6215-4571-93c9-e7dd2a2c4bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:0e:e1:e2:3e:cf:b0:66:3c:dc:d3:d5:d6: c8:bf:bc:55:d2:58:97:09:cc:ca:49:ae:08:51:d0: 84:15:e4:27:c9:ed:8c:f4:6b:1f:5f:f6:60:c3:44: 29:9c:d9:55:66:b9:c4:ba:09:48:83:42:a1:12:7a: dc:dc:6d:eb:08:5c:03:3b:65:25:65:b4:94:95:05: 8c:20:04:c6:e3:24:8d:f5:f8:d7:32:d0:d2:ac:c6: 7a:b3:dd:3a:81:c7:80:c8:3f:08:90:09:70:8e:7d: a4:55:c1:76:37:cd:18:0e:cb:00:da:df:7c:eb:e9: a2:f1:0b:7c:11:43:ca:26:f9:c2:92:06:ac:a4:da: 90:b5:f0:00:1a:a9:c6:64:d9:02:2c:61:53:27:ba: 53:86:76:6a:ea:8e:3c:7c:a8:d2:b7:df:c8:42:b3: 44:64:74:ab:58:70:fc:ba:0c:d1:40:e7:6c:e4:99: fe:a2:ee:76:9f:38:91:5a:de:aa:0a:c4:7a:1c:c8: c3:58:ec:17:0c:e1:89:cb:da:29:2d:14:4d:0c:51: 59:95:1b:d0:c8:bc:95:b4:87:6e:ec:0d:db:b3:6a: d0:03:67:55:db:92:6b:f6:94:dc:49:b6:a5:2f:a9: e1:3c:67:75:02:64:bc:86:57:86:72:6e:df:60:e5: b6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:14:C7:16:45:A7:2F:A6:51:B3:1F:39:D4:19:EC:20:84:1E:31:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/02d4dbb7-99e0-368d-bd3c-b8b09bf98779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c9:f7:54:d4:20:3c:4b:d4:6e:79:c5:8a:b9:35:6c:7f:34: c1:da:36:dc:a8:86:5c:73:1e:2a:3a:3f:3d:b0:1d:53:b8:d1: 03:5f:b6:f9:88:c1:bd:71:ae:b3:cc:cc:52:48:4c:19:b8:39: d4:48:69:0d:b1:0b:35:d8:82:f8:25:36:87:8c:61:7a:7d:3e: d0:dd:12:0f:6b:32:7f:fc:df:99:82:8d:dd:61:97:46:92:7a: 04:15:fc:58:16:98:76:a9:90:f2:db:23:be:a6:e4:eb:99:73: 8d:f1:bd:ec:27:81:2f:8e:c5:30:d2:5a:ae:e9:ff:46:59:d4: fa:cd:7b:3e:b0:bd:33:22:0e:76:12:b7:39:39:78:22:63:6c: 53:36:c1:bb:7c:69:83:8e:16:1c:30:3e:a6:c4:b0:e2:4c:11: b9:a5:14:41:41:86:e2:c3:88:e5:38:00:a4:8f:a3:e1:3c:e6: 8c:8a:c8:86:66:ee:d7:5c:0e:90:74:d3:7d:11:79:2b:c9:13: 4c:09:5a:b3:20:fd:5b:5b:b8:96:5f:34:c3:29:13:cc:3b:ab: dc:c0:91:1b:7c:df:23:17:0e:83:94:d4:61:4e:ce:13:04:94: 7e:b1:00:51:f2:52:71:cf:dd:52:64:4a:93:9b:80:ca:3d:6f: ee:f5:ab:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram7l0/93mGs0e2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk NmE2OWU2ZjEtNjIxNS00NTcxLTkzYzktZTdkZDJhMmM0YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKYO4eI+z7BmPNzT1dbIv7xV0liXCczKSa4I UdCEFeQnye2M9GsfX/Zgw0QpnNlVZrnEuglIg0KhEnrc3G3rCFwDO2UlZbSUlQWM IATG4ySN9fjXMtDSrMZ6s906gceAyD8IkAlwjn2kVcF2N80YDssA2t986+mi8Qt8 EUPKJvnCkgaspNqQtfAAGqnGZNkCLGFTJ7pThnZq6o48fKjSt9/IQrNEZHSrWHD8 ugzRQOds5Jn+ou52nziRWt6qCsR6HMjDWOwXDOGJy9opLRRNDFFZlRvQyLyVtIdu 7A3bs2rQA2dV25Jr9pTcSbalL6nhPGd1AmS8hleGcm7fYOW2HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwUxxZFpy+mUbMfOdQZ7CCEHjHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMDJkNGRiYjctOTllMC0z NjhkLWJkM2MtYjhiMDliZjk4Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbJ91TUIDxL1G55xYq5NWx/NMHaNtyohlxzHio6Pz2wHVO40QNftvmI wb1xrrPMzFJITBm4OdRIaQ2xCzXYgvglNoeMYXp9PtDdEg9rMn/835mCjd1hl0aS egQV/FgWmHapkPLbI76m5OuZc43xvewngS+OxTDSWq7p/0ZZ1PrNez6wvTMiDnYS tzk5eCJjbFM2wbt8aYOOFhwwPqbEsOJMEbmlFEFBhuLDiOU4AKSPo+E85oyKyIZm 7tdcDpB0030ReSvJE0wJWrMg/VtbuJZfNMMpE8w7q9zAkRt83yMXDoOU1GFOzhME lH6xAFHyUnHP3VJkSpObgMo9b+71q/g= -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:02 2025 by rpki-client