$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa File: 2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa (raw, json) Hash identifier: 2JTCdz0nZSXeil79wc9g1BOFqFbAZnIpc9Lm3ydsvb8= Subject key identifier: BD:1E:85:27:9F:39:B6:96:C7:9F:91:07:06:9B:A7:AF:27:3E:CF:86 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AEE26856DD31B9DE302DF7140 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 130.137.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:85:6d:d3:1b:9d:e3:02:df:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=fc036cf5-ad8e-4c1a-9e41-e22d96fd3a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:2b:ab:fe:59:73:b6:6f:8f:b3:46:85:fe: 4b:ab:81:96:94:f1:61:a8:55:9c:e6:94:ca:b3:61: af:ba:b3:db:98:0a:01:7c:a2:0f:97:f8:ca:7f:fc: 9c:76:c0:d2:29:57:eb:90:47:52:2a:af:fe:ff:87: 42:70:71:eb:f3:4c:f6:c9:01:01:c5:21:b3:39:23: 93:2a:eb:85:8f:ae:9a:56:8e:4e:3c:d3:94:16:4c: 23:d1:86:c1:66:ba:d9:ea:e7:f7:ff:55:5c:cd:51: 42:a0:13:fa:12:03:79:eb:34:25:f4:71:36:e3:28: b4:d6:f3:75:fb:09:4f:d8:fd:9c:92:98:0e:3b:dc: 15:9f:a3:92:83:8c:7d:76:9e:8f:35:ca:90:9f:1f: cc:37:c8:db:d7:bc:b9:d1:15:27:a7:d6:5a:b5:9b: 86:6f:cc:6c:a3:9a:ad:19:63:9c:ff:47:6d:36:91: c9:97:ac:11:34:3f:26:13:68:bf:57:44:68:fb:9c: 28:2a:64:3c:72:ea:59:80:f0:56:1e:19:37:7e:fd: ab:2a:be:46:10:c3:41:a1:cb:d4:32:f8:73:ad:22: df:0c:b5:14:ba:9e:20:61:1f:f6:1f:f4:5f:f0:19: f9:b0:49:81:5c:54:6b:07:3e:ac:0b:00:70:f4:5b: f3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1E:85:27:9F:39:B6:96:C7:9F:91:07:06:9B:A7:AF:27:3E:CF:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:42:ef:9b:cb:36:48:62:e3:53:9d:5d:ad:6f:83:b2:d8:81: 73:0d:f8:29:97:2f:dc:6a:82:5f:cf:ec:4f:2b:8f:39:f1:75: f5:e0:fb:5d:6c:50:c7:70:ed:49:1d:45:8f:ef:0a:67:33:1a: b5:38:a6:2c:13:03:ba:31:10:b2:b5:9c:64:0e:2e:76:f4:bb: 28:da:e6:c1:99:1a:e2:b9:bd:fd:d3:ae:1d:ca:8b:f5:c4:ec: 67:87:14:a4:01:b3:83:42:18:cc:34:5e:80:c9:62:b5:cd:48: 57:d6:52:80:d9:4a:1e:64:b8:ae:d4:65:25:af:8b:be:5c:f7: 44:65:4c:be:3f:f4:c5:07:d4:96:80:52:50:30:63:6f:d3:d3: d8:0e:de:27:6d:47:4a:37:1b:53:a7:75:aa:60:b7:d8:b4:62: f3:e8:03:8f:9c:50:4f:e2:30:7d:35:04:85:98:92:81:c3:c0: bf:91:bd:83:c8:b5:04:20:d9:09:39:01:23:d7:74:a5:5f:84: 09:35:d1:0a:50:cf:5d:45:3a:7a:51:59:0a:a6:ce:34:5a:21: de:90:f0:53:bb:fb:9c:78:f9:63:ce:e8:72:28:4e:3a:4f:0a: 5a:84:50:fe:73:b4:27:53:db:48:f3:60:30:91:1f:3e:0a:21: b3:1e:8c:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoVt0xud4wLfcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZmMwMzZjZjUtYWQ4ZS00YzFhLTllNDEtZTIyZDk2ZmQzYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0wrq/5Zc7Zvj7NGhf5Lq4GWlPFhqFWc5pTK s2GvurPbmAoBfKIPl/jKf/ycdsDSKVfrkEdSKq/+/4dCcHHr80z2yQEBxSGzOSOT KuuFj66aVo5OPNOUFkwj0YbBZrrZ6uf3/1VczVFCoBP6EgN56zQl9HE24yi01vN1 +wlP2P2ckpgOO9wVn6OSg4x9dp6PNcqQnx/MN8jb17y50RUnp9ZatZuGb8xso5qt GWOc/0dtNpHJl6wRND8mE2i/V0Ro+5woKmQ8cupZgPBWHhk3fv2rKr5GEMNBocvU MvhzrSLfDLUUup4gYR/2H/Rf8Bn5sEmBXFRrBz6sCwBw9FvzRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0ehSefObaWx5+RBwabp68nPs+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmE0YWI3YTAtMjVhOS0z Mzc5LThlM2UtNmFkY2M0MDMzZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtC75vLNkhi41OdXa1vg7LYgXMN+CmXL9xqgl/P7E8rjznxdfXg+11s UMdw7UkdRY/vCmczGrU4piwTA7oxELK1nGQOLnb0uyja5sGZGuK5vf3Trh3Ki/XE 7GeHFKQBs4NCGMw0XoDJYrXNSFfWUoDZSh5kuK7UZSWvi75c90RlTL4/9MUH1JaA UlAwY2/T09gO3idtR0o3G1Ondapgt9i0YvPoA4+cUE/iMH01BIWYkoHDwL+RvYPI tQQg2Qk5ASPXdKVfhAk10QpQz11FOnpRWQqmzjRaId6Q8FO7+5x4+WPO6HIoTjpP ClqEUP5ztCdT20jzYDCRHz4KIbMejF0= -----END CERTIFICATE-----Generated at Sat Aug 23 06:40:06 2025 by rpki-client