$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ba0ef00-9d28-3b0d-bb2e-fc53aac0480c.roa File: 2ba0ef00-9d28-3b0d-bb2e-fc53aac0480c.roa (raw, json) Hash identifier: k1tkZuNiTke2eMCjveh9R5dEXdb/RKlnzi7fbIGmEtQ= Subject key identifier: A1:A5:61:10:5E:7A:4C:3D:A9:E5:7D:2F:8E:D4:D3:02:F8:26:C0:C2 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADA9BB882B20B213AD7789800 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ba0ef00-9d28-3b0d-bb2e-fc53aac0480c.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 130.137.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b8:82:b2:0b:21:3a:d7:78:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=af19d0fc-cbc4-4f4a-ab1e-bc9146354127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:58:9a:79:ee:10:6e:cc:59:c8:56:10:ff: 0d:79:2a:0f:7a:ef:c1:b6:87:93:f2:d5:29:8e:5c: 93:b0:20:d6:b9:db:a2:9b:db:ad:61:28:1e:15:55: fd:e6:04:12:d8:62:c6:bd:c7:19:97:4b:1c:a0:23: 2c:6d:54:b2:67:90:01:db:73:ba:8b:cd:d7:2e:95: e3:59:62:00:bb:68:bd:1a:d8:d8:40:c7:bf:65:4d: d0:11:99:c8:37:9d:3c:77:e1:3d:ba:9b:a9:ec:9b: d0:36:43:78:91:0e:f2:e0:9a:e6:ef:00:12:5c:e1: 91:a1:e9:5e:58:53:dd:e8:bf:8e:69:db:79:31:94: e5:ed:bc:ba:c6:6f:c3:55:97:04:cf:79:85:b2:2b: 0d:91:91:82:75:df:05:a1:f9:1a:f5:c5:37:cd:a0: 73:69:36:64:bb:3b:03:03:9c:1c:44:27:a8:d3:ba: 62:98:ad:fb:65:a6:ba:f5:f5:0c:c8:be:2b:77:45: 3a:23:a9:f4:46:19:e9:c5:31:45:d9:9a:6a:b0:59: 4b:2e:59:12:1e:fc:74:07:bb:eb:89:4c:52:61:69: 1d:68:dd:69:94:af:54:10:04:bd:33:b2:c3:a3:a0: 90:af:a7:7b:05:63:17:73:43:37:ca:25:09:06:c7: e6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A5:61:10:5E:7A:4C:3D:A9:E5:7D:2F:8E:D4:D3:02:F8:26:C0:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ba0ef00-9d28-3b0d-bb2e-fc53aac0480c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:9c:26:e4:b4:e0:db:9f:47:c3:a4:55:75:56:80:65:3a:1e: 9e:d3:4a:c3:a8:79:e8:5a:8d:2a:f1:a5:76:9f:d9:87:68:1e: 09:b1:02:d8:22:c3:fd:b4:3c:7c:9e:e5:b0:57:40:ba:d7:8c: b3:fd:5b:5d:00:e3:29:0a:e0:28:a0:a2:10:ea:82:4c:3b:1e: 45:6e:1b:ff:0f:14:e8:21:d9:eb:e0:2c:25:12:38:42:69:b6: 0c:d2:19:84:fd:32:9f:36:96:96:2b:f2:53:2a:5f:fa:f1:2c: 1a:08:3c:05:b8:04:9e:bf:5b:89:45:3b:b6:24:13:4b:2e:e3: 91:20:ae:9a:a2:c6:1d:11:af:8c:69:97:3a:7d:e5:9a:56:87: cd:07:f4:f9:da:a1:ba:fe:93:bc:e0:b3:5c:34:ee:73:71:9c: b6:30:11:8b:ee:72:dd:c2:d7:cb:e1:6e:76:db:7e:dd:f0:8e: 6c:9c:f2:5e:eb:81:d6:19:5c:bb:e8:16:97:45:88:d3:cc:9b: 31:42:30:4d:b4:8d:3a:46:3b:6d:41:83:66:67:b9:b8:67:d5: e1:ca:da:a7:65:66:d8:53:5d:22:87:18:ab:52:f2:1f:df:1f: 73:99:e0:7f:3f:44:16:70:f8:4b:e7:39:ba:7d:f5:90:ab:72: 10:74:df:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram7iCsgshOtd4mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk YWYxOWQwZmMtY2JjNC00ZjRhLWFiMWUtYmM5MTQ2MzU0MTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRpYmnnuEG7MWchWEP8NeSoPeu/BtoeT8tUp jlyTsCDWuduim9utYSgeFVX95gQS2GLGvccZl0scoCMsbVSyZ5AB23O6i83XLpXj WWIAu2i9GtjYQMe/ZU3QEZnIN508d+E9upup7JvQNkN4kQ7y4Jrm7wASXOGRoele WFPd6L+Oadt5MZTl7by6xm/DVZcEz3mFsisNkZGCdd8Fofka9cU3zaBzaTZkuzsD A5wcRCeo07pimK37Zaa69fUMyL4rd0U6I6n0RhnpxTFF2ZpqsFlLLlkSHvx0B7vr iUxSYWkdaN1plK9UEAS9M7LDo6CQr6d7BWMXc0M3yiUJBsfmEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGlYRBeekw9qeV9L47U0wL4JsDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmJhMGVmMDAtOWQyOC0z YjBkLWJiMmUtZmM1M2FhYzA0ODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6cJuS04NufR8OkVXVWgGU6Hp7TSsOoeehajSrxpXaf2YdoHgmxAtgi w/20PHye5bBXQLrXjLP9W10A4ykK4CigohDqgkw7HkVuG/8PFOgh2evgLCUSOEJp tgzSGYT9Mp82lpYr8lMqX/rxLBoIPAW4BJ6/W4lFO7YkE0su45Egrpqixh0Rr4xp lzp95ZpWh80H9Pnaobr+k7zgs1w07nNxnLYwEYvuct3C18vhbnbbft3wjmyc8l7r gdYZXLvoFpdFiNPMmzFCME20jTpGO21Bg2Znubhn1eHK2qdlZthTXSKHGKtS8h/f H3OZ4H8/RBZw+EvnObp99ZCrchB033g= -----END CERTIFICATE-----Generated at Sat Aug 23 08:11:56 2025 by rpki-client