$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f99f127-fa9c-3eff-956b-c87acddd57bc.roa File: 1f99f127-fa9c-3eff-956b-c87acddd57bc.roa (raw, json) Hash identifier: 3ELz68Iu8fehmR/xpeaYaKJRRjQHLuNRQYtptEuVvuk= Subject key identifier: 35:F9:08:07:02:B2:C5:DD:2C:E1:B3:1A:63:31:78:C9:97:A1:84:E2 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF25674DBF2993C75DFF9DEE4 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f99f127-fa9c-3eff-956b-c87acddd57bc.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:74:db:f2:99:3c:75:df:f9:de:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=d343e9ea-8f5d-47d9-ade6-2f4a1b42eca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:eb:b8:72:5c:8a:bc:bc:da:a1:af:cb:72: 1c:78:e4:23:a0:51:b9:dd:25:15:a8:73:17:8a:d4: d7:fb:73:ab:5e:ae:5e:6f:2a:b7:30:8b:8d:ac:f6: 51:4a:69:36:fc:89:16:9b:be:29:6c:39:b8:80:09: 71:39:4a:fb:9f:4c:05:a2:39:9f:4f:7e:ee:d1:c5: 30:0d:87:69:4a:6c:9f:64:31:5b:e9:e5:88:0a:47: c9:a5:dd:d2:9a:8a:06:45:a6:6e:26:b3:49:0e:3c: a3:a3:33:09:ab:da:b4:c5:50:e8:f0:27:96:c1:bd: 55:fe:89:d9:63:6c:7b:4f:be:24:dd:24:15:83:6b: 89:fd:59:65:f8:26:61:d2:44:0c:a1:ed:f2:7a:be: ad:dc:0a:2e:d9:8c:63:6d:fe:c9:37:e7:b5:58:28: 09:3e:13:0c:2d:49:22:17:6c:53:21:98:86:6a:a0: fa:c9:1c:f8:18:72:6d:fe:ed:50:50:2c:24:65:a2: 0c:0e:f7:cb:07:0e:1b:e5:3f:d2:0b:83:dc:81:57: d9:32:bc:d3:c7:08:15:6e:48:a7:68:aa:60:63:03: 82:a9:be:b2:31:8e:1c:b0:52:9d:f1:83:e9:f7:2a: 85:b7:fb:d3:2a:ad:01:ca:c1:8f:e6:3f:ef:91:23: 81:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F9:08:07:02:B2:C5:DD:2C:E1:B3:1A:63:31:78:C9:97:A1:84:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f99f127-fa9c-3eff-956b-c87acddd57bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:9c:16:90:53:f6:28:6a:bf:5b:51:54:02:a9:90:44:81:39: c4:eb:8a:26:4b:8f:22:95:6b:39:b6:df:ae:98:5f:98:82:6a: 17:8d:46:59:ce:0a:4c:86:f9:c3:04:a7:45:9c:33:c4:87:c9: 4a:e4:48:6b:a8:af:0a:cb:1d:5b:40:6a:7c:ba:1d:65:fa:f9: 3f:3d:59:80:32:9b:46:69:db:98:45:d0:28:94:f3:84:68:f5: d9:3c:2d:2a:5e:45:cf:3c:c5:9c:0b:35:c9:6d:75:eb:0d:12: 63:e4:0f:78:f3:78:7b:8a:37:88:ad:48:54:eb:24:a2:98:93: de:8a:9f:43:7b:d0:ac:bc:c3:42:17:b5:58:a5:3c:ea:a4:ca: fb:a6:f1:04:a3:87:9a:f3:ee:08:e2:08:2f:ae:be:dd:4d:71: ad:a1:56:0c:45:17:d2:93:fc:f5:64:6e:5c:4b:d6:04:9c:3f: 8b:32:70:c6:59:9c:4a:77:cf:e2:42:03:c0:dc:5d:08:0a:64: 7c:ea:4c:bf:fc:dc:d6:70:1d:63:41:f2:a5:96:28:96:28:d8: 9b:e2:f8:7e:27:fd:69:f3:cb:55:b0:68:f5:1e:e9:a9:ba:37: ea:dc:14:f5:7a:2d:31:24:08:77:25:e2:9e:cc:49:b4:5d:db: 33:78:1a:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnTb8pk8dd/53uQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZDM0M2U5ZWEtOGY1ZC00N2Q5LWFkZTYtMmY0YTFiNDJlY2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR3ruHJciry82qGvy3IceOQjoFG53SUVqHMX itTX+3OrXq5ebyq3MIuNrPZRSmk2/IkWm74pbDm4gAlxOUr7n0wFojmfT37u0cUw DYdpSmyfZDFb6eWICkfJpd3SmooGRaZuJrNJDjyjozMJq9q0xVDo8CeWwb1V/onZ Y2x7T74k3SQVg2uJ/Vll+CZh0kQMoe3yer6t3Aou2Yxjbf7JN+e1WCgJPhMMLUki F2xTIZiGaqD6yRz4GHJt/u1QUCwkZaIMDvfLBw4b5T/SC4PcgVfZMrzTxwgVbkin aKpgYwOCqb6yMY4csFKd8YPp9yqFt/vTKq0BysGP5j/vkSOBjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX5CAcCssXdLOGzGmMxeMmXoYTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMWY5OWYxMjctZmE5Yy0z ZWZmLTk1NmItYzg3YWNkZGQ1N2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCcFpBT9ihqv1tRVAKpkESBOcTriiZLjyKVazm2366YX5iCaheNRlnO CkyG+cMEp0WcM8SHyUrkSGuorwrLHVtAany6HWX6+T89WYAym0Zp25hF0CiU84Ro 9dk8LSpeRc88xZwLNcltdesNEmPkD3jzeHuKN4itSFTrJKKYk96Kn0N70Ky8w0IX tVilPOqkyvum8QSjh5rz7gjiCC+uvt1Nca2hVgxFF9KT/PVkblxL1gScP4sycMZZ nEp3z+JCA8DcXQgKZHzqTL/83NZwHWNB8qWWKJYo2Jvi+H4n/Wnzy1WwaPUe6am6 N+rcFPV6LTEkCHcl4p7MSbRd2zN4Glc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:45:11 2025 by rpki-client