$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1988090f-20fe-3061-827b-baf8f280009f.roa File: 1988090f-20fe-3061-827b-baf8f280009f.roa (raw, json) Hash identifier: yk1Iti1Clt9zU1W6xPJAEfYBaJt8q+3eAVvpHTH6ATA= Subject key identifier: FC:58:98:9A:FD:4B:BB:9B:F0:02:7F:E1:C9:7F:E9:83:55:8D:3A:80 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF0F13176681A7106510A0400 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1988090f-20fe-3061-827b-baf8f280009f.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 130.137.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:31:76:68:1a:71:06:51:0a:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=8c30daf7-199e-4617-86a9-a25bf2dd32d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ac:c6:eb:8d:27:ee:de:26:6d:77:56:49:f5: de:fc:e7:91:54:af:59:9c:65:27:44:78:f2:43:e8: fc:53:73:4a:c3:c8:bb:fb:7d:36:5a:86:0e:c3:90: d7:27:75:cf:99:83:24:61:04:b5:e2:c1:96:aa:22: 42:df:e0:c4:93:66:b9:f0:cc:a7:b1:57:14:99:6c: 98:b1:b9:d5:a9:70:9a:21:2c:86:7b:62:5c:b0:7e: 76:49:5e:ec:92:39:39:50:5a:f8:b4:6e:d5:54:89: 79:e9:41:19:a1:c0:49:b3:68:f9:27:3c:27:2b:43: f1:95:07:fa:4d:de:4a:28:ef:b9:cf:16:83:92:34: 8d:13:a5:d6:55:91:91:76:f1:81:4f:b3:4e:7b:42: ea:d1:1b:67:bd:26:67:e5:12:9a:54:5e:4e:cc:10: c5:09:cc:11:23:4c:6d:b0:d2:c3:b0:97:a2:fd:b4: df:e6:fc:70:16:45:da:a6:6b:53:72:97:0e:82:f2: b4:e5:df:b3:d0:d1:7f:10:0a:fa:fa:f4:8f:68:32: ea:3c:a0:71:cf:04:f8:bc:b6:88:f9:65:90:64:2b: 72:f6:65:fa:e8:45:01:c4:50:f2:a0:13:98:9b:c6: cd:d2:86:80:a4:b6:3f:0a:5a:a1:62:e4:c8:1a:f3: 4c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:58:98:9A:FD:4B:BB:9B:F0:02:7F:E1:C9:7F:E9:83:55:8D:3A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1988090f-20fe-3061-827b-baf8f280009f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ed:cb:b1:23:2a:b3:b5:80:c8:de:76:47:06:05:64:57:3c: c7:ec:59:7d:15:be:d8:b5:14:bd:95:b1:de:d1:4d:5e:55:b6: 80:e6:30:cd:e1:88:ce:67:9f:e2:3c:b0:c9:35:53:d5:12:5b: f8:3d:32:a5:51:da:69:e3:00:44:6d:c3:50:39:66:eb:2e:7b: 80:79:c9:ea:b8:81:1d:67:b8:14:61:51:9d:c9:e8:70:3e:0f: 7e:2d:63:95:73:22:2a:b4:76:15:46:90:4d:43:ba:b2:72:53: 9f:42:11:f4:1e:25:e6:40:32:82:b8:2a:8e:2a:57:f5:9b:34: f7:73:92:8b:9f:40:68:c6:7f:7b:3a:ce:51:46:06:a1:c6:7a: 5f:2a:2f:2d:4e:7f:0c:42:33:c2:20:2e:6c:8c:9f:ad:9a:41: 7c:8f:7c:95:53:4c:00:06:c0:69:37:85:78:4a:e2:d1:fd:d2: 8d:63:d7:da:f2:9b:96:e3:96:7f:4f:19:94:27:03:3d:99:2e: 2a:dc:7e:3d:03:9e:a9:4c:94:e3:e4:e3:74:2c:71:ca:3d:9a: 1f:4f:33:da:26:a5:56:fc:54:b5:f6:46:44:15:c5:42:6a:d5: 87:1d:32:a0:81:3a:31:c6:f7:ad:1f:fd:a1:0c:c2:ac:0e:16: 93:af:3c:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TF2aBpxBlEKBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OGMzMGRhZjctMTk5ZS00NjE3LTg2YTktYTI1YmYyZGQzMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKzG640n7t4mbXdWSfXe/OeRVK9ZnGUnRHjy Q+j8U3NKw8i7+302WoYOw5DXJ3XPmYMkYQS14sGWqiJC3+DEk2a58MynsVcUmWyY sbnVqXCaISyGe2JcsH52SV7skjk5UFr4tG7VVIl56UEZocBJs2j5JzwnK0PxlQf6 Td5KKO+5zxaDkjSNE6XWVZGRdvGBT7NOe0Lq0RtnvSZn5RKaVF5OzBDFCcwRI0xt sNLDsJei/bTf5vxwFkXapmtTcpcOgvK05d+z0NF/EAr6+vSPaDLqPKBxzwT4vLaI +WWQZCty9mX66EUBxFDyoBOYm8bN0oaApLY/ClqhYuTIGvNMuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxYmJr9S7ub8AJ/4cl/6YNVjTqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMTk4ODA5MGYtMjBmZS0z MDYxLTgyN2ItYmFmOGYyODAwMDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDty7EjKrO1gMjedkcGBWRXPMfsWX0Vvti1FL2Vsd7RTV5VtoDmMM3h iM5nn+I8sMk1U9USW/g9MqVR2mnjAERtw1A5Zusue4B5yeq4gR1nuBRhUZ3J6HA+ D34tY5VzIiq0dhVGkE1DurJyU59CEfQeJeZAMoK4Ko4qV/WbNPdzkoufQGjGf3s6 zlFGBqHGel8qLy1OfwxCM8IgLmyMn62aQXyPfJVTTAAGwGk3hXhK4tH90o1j19ry m5bjln9PGZQnAz2ZLircfj0DnqlMlOPk43Qscco9mh9PM9ompVb8VLX2RkQVxUJq 1YcdMqCBOjHG960f/aEMwqwOFpOvPIc= -----END CERTIFICATE-----Generated at Sat Aug 23 08:13:36 2025 by rpki-client