$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1be9d0ff-f478-3bcd-8d5d-53ef74d3e4a2.roa File: 1be9d0ff-f478-3bcd-8d5d-53ef74d3e4a2.roa (raw, json) Hash identifier: xqaDVwFnH30PkwRDg5uoCkOZxAe19YUf9I7dT3u6wQA= Subject key identifier: 0B:4D:78:85:A3:E0:2B:74:18:41:AA:20:42:9D:24:6B:34:0A:2E:D5 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AB4EB7C8703D5EF7A2BFE7AC0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1be9d0ff-f478-3bcd-8d5d-53ef74d3e4a2.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 14618 IP address blocks: 130.137.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:7c:87:03:d5:ef:7a:2b:fe:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=67a48885-d725-4f70-8aa2-c2af1460192c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bf:cd:99:b2:27:7b:0d:75:2b:1b:83:bd:45: 9e:4b:54:61:0f:02:5f:c1:2f:75:1e:39:7f:95:a3: 50:76:72:a4:23:59:ff:bc:b7:1c:e7:35:9a:33:2d: 31:81:4c:ec:50:dc:8c:ac:27:1f:02:be:69:00:01: 0d:bf:2b:e6:6b:39:0d:78:53:6e:52:19:e2:ec:8c: 0d:1b:25:fa:06:e8:f1:dc:26:7f:3a:c1:af:71:d6: 95:cb:8a:01:b2:be:9a:e6:11:db:87:4b:e8:80:4e: a9:b7:38:75:b6:fa:e4:41:11:14:81:b6:7b:3b:29: 51:4d:60:1b:32:1d:7a:7c:77:ab:c1:3d:53:61:f7: 81:62:fa:7e:93:77:8b:84:7f:b7:c0:bf:ad:65:d8: ab:ef:cd:99:99:a0:03:5e:a9:89:b8:0f:4c:6a:fe: 85:37:e3:26:13:d9:5d:f2:82:49:af:29:ea:cd:25: c5:58:ce:99:4b:d9:91:df:c1:0a:2f:36:44:5a:07: 3c:75:99:a7:00:09:a4:8d:5c:90:1b:3a:5a:46:b5: 0b:e6:89:45:d1:4d:e8:a5:6a:d5:c6:27:a8:3f:78: 86:ea:92:00:88:8c:76:73:a8:d5:8c:cd:5f:f1:79: 51:61:4c:8a:7b:56:cb:ae:4f:1e:d8:5c:25:5f:d0: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4D:78:85:A3:E0:2B:74:18:41:AA:20:42:9D:24:6B:34:0A:2E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1be9d0ff-f478-3bcd-8d5d-53ef74d3e4a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:88:a0:fc:b2:81:9e:a8:ca:8b:83:04:96:c4:ad:a5:aa:6a: 67:0a:c2:04:ff:83:35:fc:9e:9b:6b:e1:9b:77:e5:6d:ce:d5: f8:7f:a5:38:04:9c:2d:38:f7:b6:52:53:cb:13:92:49:79:48: bc:78:b8:7d:eb:41:30:51:23:2a:da:a9:f0:70:a4:a7:3e:f4: 9f:b8:f9:fa:de:20:c8:74:10:0a:86:a6:04:66:98:24:21:8e: 4e:a9:4c:52:47:c5:ec:1d:0f:04:34:2f:9f:b6:d2:2d:14:37: 5e:16:3b:02:27:66:75:d4:a9:cc:5d:10:10:78:ca:93:35:9d: 81:48:89:af:13:61:33:c0:31:10:06:50:4c:0d:d0:b5:29:54: 14:9a:10:91:0a:75:65:45:57:0f:0f:50:1d:57:99:c0:6c:9e: 52:7b:97:bb:9a:d6:8b:4f:ec:0f:94:ab:0e:6c:24:8b:e4:6d: 59:09:a6:9b:5f:a0:7c:4e:86:8e:7c:d3:10:1c:22:a6:89:c1: af:ca:70:c0:9d:8e:c5:0b:8f:b7:85:bf:b7:66:d6:0c:54:4d: 24:b9:7c:76:4d:60:c0:a7:52:09:df:ba:2a:3b:65:b3:0e:81: 41:da:8a:43:6e:34:1b:85:f5:69:e4:77:f5:48:54:e3:5e:2b: 23:85:4f:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063yHA9Xveiv+esAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NjdhNDg4ODUtZDcyNS00ZjcwLThhYTItYzJhZjE0NjAxOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7/NmbInew11KxuDvUWeS1RhDwJfwS91Hjl/ laNQdnKkI1n/vLcc5zWaMy0xgUzsUNyMrCcfAr5pAAENvyvmazkNeFNuUhni7IwN GyX6Bujx3CZ/OsGvcdaVy4oBsr6a5hHbh0vogE6ptzh1tvrkQREUgbZ7OylRTWAb Mh16fHerwT1TYfeBYvp+k3eLhH+3wL+tZdir782ZmaADXqmJuA9Mav6FN+MmE9ld 8oJJrynqzSXFWM6ZS9mR38EKLzZEWgc8dZmnAAmkjVyQGzpaRrUL5olF0U3opWrV xieoP3iG6pIAiIx2c6jVjM1f8XlRYUyKe1bLrk8e2FwlX9C6/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtNeIWj4Ct0GEGqIEKdJGs0Ci7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMWJlOWQwZmYtZjQ3OC0z YmNkLThkNWQtNTNlZjc0ZDNlNGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKIoPyygZ6oyouDBJbEraWqamcKwgT/gzX8nptr4Zt35W3O1fh/pTgE nC0497ZSU8sTkkl5SLx4uH3rQTBRIyraqfBwpKc+9J+4+freIMh0EAqGpgRmmCQh jk6pTFJHxewdDwQ0L5+20i0UN14WOwInZnXUqcxdEBB4ypM1nYFIia8TYTPAMRAG UEwN0LUpVBSaEJEKdWVFVw8PUB1XmcBsnlJ7l7ua1otP7A+Uqw5sJIvkbVkJpptf oHxOho580xAcIqaJwa/KcMCdjsULj7eFv7dm1gxUTSS5fHZNYMCnUgnfuio7ZbMO gUHaikNuNBuF9Wnkd/VIVONeKyOFT7o= -----END CERTIFICATE-----Generated at Sat Aug 23 10:10:36 2025 by rpki-client