$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa File: 1b1f431a-cc2d-3476-9010-a01cf18e3242.roa (raw, json) Hash identifier: HStIIcyzLBbCvqx7k2J4p6nwAJuqhtht13nRArLX3eo= Subject key identifier: 20:F6:84:4B:6A:A8:CF:2F:6D:52:4B:8F:C2:34:40:69:57:42:67:75 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADA9BB7D0EA9448B338B99200 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 8987 IP address blocks: 130.137.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b7:d0:ea:94:48:b3:38:b9:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=262acaa2-500b-4155-b187-9664e7c9134d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d3:ee:3d:b3:34:ab:f0:f9:e9:fc:36:4e:8c: d5:a4:06:c2:33:fe:2b:0f:b7:04:ef:2a:0e:51:8f: 1d:52:63:22:5e:93:c3:47:95:c5:d4:40:00:09:5e: ba:ed:fd:34:6f:3d:de:b9:3e:4e:67:48:77:30:10: 6a:42:4a:5d:b5:bd:38:cd:69:a3:a5:2a:03:aa:e7: 60:2d:29:0f:21:6e:19:29:b8:7b:64:bd:77:cd:5f: 52:ff:01:b4:9f:72:be:10:da:52:cd:7e:2c:ff:20: bc:dd:83:7d:13:90:86:4e:be:05:04:d9:15:6b:0b: d0:c0:fa:68:46:a8:a8:5c:40:3d:60:c6:dd:b4:c1: 1f:81:ec:8b:34:cb:41:8a:f3:6b:cf:86:46:30:57: 3a:62:b5:c3:df:77:6c:18:fa:8e:40:76:53:44:31: b1:f1:fa:c9:90:c5:02:7c:69:f0:84:14:52:d6:1b: e3:6c:85:3f:1b:26:a3:12:63:92:91:4f:14:e7:c0: c1:cf:9b:f2:11:dc:64:99:59:9d:56:47:b6:f8:68: 2c:35:7e:3c:e5:c4:74:7c:e1:5b:51:4b:ab:d6:9d: 01:04:67:47:13:f9:ed:a7:5d:f3:3d:58:8a:0d:4b: 14:cc:e0:87:bf:ab:6f:34:8e:3d:01:8a:93:e5:1f: f3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F6:84:4B:6A:A8:CF:2F:6D:52:4B:8F:C2:34:40:69:57:42:67:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:65:56:04:26:f8:c2:3c:36:6b:f2:f7:45:e3:a2:7e:66:ba: ca:85:e1:05:42:6f:64:60:70:02:0e:b0:10:a0:0f:e1:27:4e: 99:28:8e:20:1b:69:30:95:c0:f7:60:0f:ea:0f:9f:3e:4f:81: 60:2e:79:21:3b:0d:4e:1e:9a:7c:8d:34:57:95:d8:dd:2d:05: 41:03:dd:86:71:26:87:e8:cd:3f:95:3f:d0:ee:02:4a:8d:57: 75:1a:b0:66:74:4d:c1:0a:9f:51:5b:1b:be:13:1f:7f:4e:6f: 0f:6b:ea:93:68:f1:b9:13:20:f8:51:4e:80:38:3d:b4:43:c5: 74:ce:85:05:4f:58:f3:26:29:f8:be:1b:b5:dc:5c:4b:12:d1: 89:49:3f:18:57:1d:d1:c1:86:4f:3b:e1:5e:f7:e9:93:17:61: b7:d8:25:3b:58:a7:36:cf:e3:18:06:08:56:f4:bc:14:4f:f1: 2c:0f:80:61:c0:97:be:b2:ed:1d:8d:9b:58:c5:58:16:0d:7c: 6e:be:97:06:5a:9a:1d:ed:82:4c:a6:db:ec:34:8f:c2:fe:74: 4d:ad:ef:d5:05:a1:9c:8a:4e:ca:88:50:08:31:66:26:c7:06: 8d:4e:de:f7:da:77:82:64:84:1c:ea:e7:1d:0e:82:b1:5d:34: c0:81:3c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram7fQ6pRIszi5kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MjYyYWNhYTItNTAwYi00MTU1LWIxODctOTY2NGU3YzkxMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidPuPbM0q/D56fw2TozVpAbCM/4rD7cE7yoO UY8dUmMiXpPDR5XF1EAACV667f00bz3euT5OZ0h3MBBqQkpdtb04zWmjpSoDqudg LSkPIW4ZKbh7ZL13zV9S/wG0n3K+ENpSzX4s/yC83YN9E5CGTr4FBNkVawvQwPpo RqioXEA9YMbdtMEfgeyLNMtBivNrz4ZGMFc6YrXD33dsGPqOQHZTRDGx8frJkMUC fGnwhBRS1hvjbIU/GyajEmOSkU8U58DBz5vyEdxkmVmdVke2+GgsNX485cR0fOFb UUur1p0BBGdHE/ntp13zPViKDUsUzOCHv6tvNI49AYqT5R/zFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD2hEtqqM8vbVJLj8I0QGlXQmd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMWIxZjQzMWEtY2MyZC0z NDc2LTkwMTAtYTAxY2YxOGUzMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9lVgQm+MI8Nmvy90Xjon5musqF4QVCb2RgcAIOsBCgD+EnTpkojiAb aTCVwPdgD+oPnz5PgWAueSE7DU4emnyNNFeV2N0tBUED3YZxJofozT+VP9DuAkqN V3UasGZ0TcEKn1FbG74TH39Obw9r6pNo8bkTIPhRToA4PbRDxXTOhQVPWPMmKfi+ G7XcXEsS0YlJPxhXHdHBhk874V736ZMXYbfYJTtYpzbP4xgGCFb0vBRP8SwPgGHA l76y7R2Nm1jFWBYNfG6+lwZamh3tgkym2+w0j8L+dE2t79UFoZyKTsqIUAgxZibH Bo1O3vfad4JkhBzq5x0OgrFdNMCBPIA= -----END CERTIFICATE-----Generated at Sat Aug 23 13:02:48 2025 by rpki-client