$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/068d6de4-5d79-3f2c-b991-e250f609251f.roa File: 068d6de4-5d79-3f2c-b991-e250f609251f.roa (raw, json) Hash identifier: wRfDTR7lsuJTeG7juGYKBE5fk2NIF5A5+NolLCwITUw= Subject key identifier: B7:82:28:E4:73:CE:38:94:A3:CF:3F:E9:98:75:2C:46:EE:51:67:CC Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF2567A496003615C13C38780 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/068d6de4-5d79-3f2c-b991-e250f609251f.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7a:49:60:03:61:5c:13:c3:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=147d506c-306b-4ab5-abb8-72934a2ecb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ff:44:65:52:4d:bc:ac:09:cc:79:34:1a:ea: 54:b6:ab:e8:b6:25:d0:27:30:88:87:ad:5e:88:4b: e7:d6:fc:04:65:4c:5e:ed:e1:b2:7a:e6:50:28:f9: 91:5e:8b:57:e9:c5:c7:b2:cb:47:1b:cc:6f:af:31: d6:2a:40:50:cf:ff:d6:22:ca:76:8a:14:7e:7f:e1: 42:4b:86:cd:9c:3e:bf:b6:f5:14:23:ae:bc:5b:96: 9a:2e:be:7a:95:88:d0:52:51:ed:8a:58:63:79:3c: 15:35:55:8c:4b:76:1a:d2:60:b0:de:b3:21:56:ca: e1:14:92:28:49:ec:b5:4a:ef:b5:71:6d:cc:1f:c0: 7d:41:7a:25:33:87:2e:eb:70:cb:f7:c4:36:41:00: 9d:be:84:cb:76:04:4b:80:bc:da:f2:2e:2d:c8:12: cd:72:4f:6f:6d:df:b1:3d:c4:2d:90:3b:ae:be:35: cb:b1:e8:8f:0b:b3:8f:10:e5:49:8c:48:db:7a:58: 1b:0e:40:35:74:d7:4c:dc:f4:fe:75:d8:14:75:c8: a5:a7:35:68:76:9d:a8:90:55:77:17:ec:69:61:0e: f8:3c:23:27:5c:72:19:26:8f:d6:8b:55:5d:37:30: d6:bb:7a:7a:54:52:7f:9a:57:c4:91:d5:60:92:cb: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:82:28:E4:73:CE:38:94:A3:CF:3F:E9:98:75:2C:46:EE:51:67:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/068d6de4-5d79-3f2c-b991-e250f609251f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:53:7d:a1:29:8a:8d:dc:8f:c7:79:fd:6c:69:5e:6a:a3:c5: 06:a7:a7:42:e0:fb:91:ae:38:5c:dd:1f:a9:79:31:cc:13:41: ea:9a:7f:62:d4:c6:78:4e:99:52:4b:57:5d:71:92:71:6e:9f: c1:5c:d5:e4:ff:01:61:b6:26:40:fe:e1:a9:16:56:e4:69:e1: 19:b0:b8:f7:53:7d:fc:cd:f8:2e:09:17:3e:14:b8:f2:29:b5: dd:15:64:62:53:71:26:c8:5c:72:95:bc:6f:dd:cf:93:79:1c: 9e:9d:85:45:6a:ba:c7:7b:49:58:a5:3f:fc:47:3d:ed:bc:28: 5c:b1:7f:66:45:3a:5e:94:e1:5d:fc:17:0d:91:af:13:86:0f: 14:7f:f0:8d:cd:78:c1:c8:1f:c5:92:8a:99:e6:7e:2f:8e:7f: bf:92:6f:f7:33:24:c9:9d:d5:ce:29:68:e6:45:6d:15:34:20: 51:a2:77:04:c2:df:f8:00:18:64:81:86:cc:2a:2a:c1:48:7a: 88:e7:0f:8e:cb:ee:49:4b:b7:52:69:db:81:c6:f5:78:da:b8: 15:4c:fb:5a:87:08:54:af:c4:83:77:16:36:be:6d:14:9d:41: f7:6e:fb:1d:9f:ba:7d:47:30:39:71:6f:55:87:93:55:a3:12: 9d:91:1b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnpJYANhXBPDh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MTQ3ZDUwNmMtMzA2Yi00YWI1LWFiYjgtNzI5MzRhMmVjYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/9EZVJNvKwJzHk0GupUtqvotiXQJzCIh61e iEvn1vwEZUxe7eGyeuZQKPmRXotX6cXHsstHG8xvrzHWKkBQz//WIsp2ihR+f+FC S4bNnD6/tvUUI668W5aaLr56lYjQUlHtilhjeTwVNVWMS3Ya0mCw3rMhVsrhFJIo Sey1Su+1cW3MH8B9QXolM4cu63DL98Q2QQCdvoTLdgRLgLza8i4tyBLNck9vbd+x PcQtkDuuvjXLseiPC7OPEOVJjEjbelgbDkA1dNdM3PT+ddgUdcilpzVodp2okFV3 F+xpYQ74PCMnXHIZJo/Wi1VdNzDWu3p6VFJ/mlfEkdVgkssN6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeCKORzzjiUo88/6Zh1LEbuUWfMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMDY4ZDZkZTQtNWQ3OS0z ZjJjLWI5OTEtZTI1MGY2MDkyNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgoniMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtTfaEpio3cj8d5/WxpXmqjxQanp0Lg+5GuOFzdH6l5McwTQeqaf2LU xnhOmVJLV11xknFun8Fc1eT/AWG2JkD+4akWVuRp4RmwuPdTffzN+C4JFz4UuPIp td0VZGJTcSbIXHKVvG/dz5N5HJ6dhUVqusd7SVilP/xHPe28KFyxf2ZFOl6U4V38 Fw2RrxOGDxR/8I3NeMHIH8WSipnmfi+Of7+Sb/czJMmd1c4paOZFbRU0IFGidwTC 3/gAGGSBhswqKsFIeojnD47L7klLt1Jp24HG9XjauBVM+1qHCFSvxIN3Fja+bRSd Qfdu+x2fun1HMDlxb1WHk1WjEp2RG/A= -----END CERTIFICATE-----Generated at Sat Aug 23 12:56:15 2025 by rpki-client