$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa File: 2df51bd2-8f35-3784-a672-9288ad204a5e.roa (raw, json) Hash identifier: YXfOSsJLOxuCXXCIJ4vMjfKuQiPyM7FSXg9znkBkEKw= Subject key identifier: 58:D4:80:FC:89:0B:A9:0C:1D:3E:F3:85:E2:B0:99:EE:34:BD:96:60 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADA9BB6E6ADBC15F6C8A6EC3C Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 130.137.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b6:e6:ad:bc:15:f6:c8:a6:ec:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=07c2b529-2916-4207-9f94-9017943c6feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a4:4e:5c:11:b2:42:ef:cd:b9:fe:0f:70:94: 5c:41:d7:db:10:84:7c:68:2e:f9:a2:f4:d7:c5:1c: c2:df:21:36:10:73:f4:87:59:8f:a2:38:98:2f:dd: 5e:5f:e1:34:d4:2d:41:83:61:8e:b7:f4:08:c5:d3: 93:c4:51:40:92:e0:ef:0c:d5:b7:63:90:3c:8e:2d: 87:8d:26:3d:e3:6b:a5:90:cd:e0:c1:ce:1f:c6:df: 02:f3:74:e5:42:b2:c2:e2:ea:1b:df:2f:ad:08:5c: b1:72:8a:29:b0:51:2c:0b:ea:82:be:95:53:da:d4: 3f:68:87:4f:89:3b:58:ae:ad:1d:a6:35:b6:9a:3b: 36:58:6a:e6:b9:63:9b:14:85:b0:55:7a:2b:06:e4: c1:33:d4:94:01:5d:4f:ca:68:39:98:d7:4e:70:18: 0c:38:f2:dd:fe:b5:98:d9:6c:77:52:1b:df:11:8f: b7:78:c0:d9:3f:70:00:71:d1:4b:51:77:14:ee:f7: 46:9b:a4:cf:c1:73:20:32:14:1e:1e:eb:41:14:4f: 95:f3:61:08:3f:5a:cc:8e:96:5a:b1:8f:ef:e2:34: e6:24:3e:36:ed:f8:0c:3b:77:e1:7e:20:36:6c:b5: 23:13:13:6f:19:2a:a9:1c:c0:ec:0d:a5:75:50:3d: b4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D4:80:FC:89:0B:A9:0C:1D:3E:F3:85:E2:B0:99:EE:34:BD:96:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6b:df:62:7c:62:f8:6d:1f:7f:4e:f5:eb:a0:6c:e2:28:85: b9:01:76:3b:4d:89:bb:c5:4c:48:c4:16:26:61:e1:48:6d:18: 40:8d:45:83:dc:d1:6a:0c:5c:51:4f:e0:e2:67:35:33:66:c5: 00:e5:03:ef:99:31:9a:7c:dc:e3:b8:0f:09:ea:62:0f:4b:22: 3b:67:a9:dc:55:4d:b5:02:a4:dc:e6:5a:07:5f:b4:3c:1a:fc: ee:11:3e:84:8c:74:eb:d7:59:94:db:59:9a:ef:dc:32:44:bf: 38:af:4a:94:8c:e1:e0:8f:be:08:01:eb:f5:bc:85:a8:cb:d4: 16:b0:95:7a:c4:66:01:6b:3e:21:dc:cf:5f:28:b9:ec:6e:b0: 24:59:a6:35:9f:b2:c0:ef:83:4d:df:9a:27:ae:37:8e:33:69: 42:13:20:e8:10:4d:22:6b:b6:b4:ad:26:5f:06:ef:19:ba:b8: 23:e8:dc:33:09:2a:02:cc:57:63:31:c4:9d:34:73:09:1d:8d: ec:c6:f7:e2:d9:0e:98:8e:a8:2e:46:e4:0a:71:2f:b1:c3:18: 3a:cf:4f:c3:db:1d:21:46:61:6e:a4:18:a9:7d:a6:8f:7f:fe: cc:fa:25:9e:f7:26:23:77:0f:70:12:8a:76:fc:32:b3:4b:52: bb:97:df:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram7bmrbwV9sim7DwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MDdjMmI1MjktMjkxNi00MjA3LTlmOTQtOTAxNzk0M2M2ZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ROXBGyQu/Nuf4PcJRcQdfbEIR8aC75ovTX xRzC3yE2EHP0h1mPojiYL91eX+E01C1Bg2GOt/QIxdOTxFFAkuDvDNW3Y5A8ji2H jSY942ulkM3gwc4fxt8C83TlQrLC4uob3y+tCFyxcoopsFEsC+qCvpVT2tQ/aIdP iTtYrq0dpjW2mjs2WGrmuWObFIWwVXorBuTBM9SUAV1Pymg5mNdOcBgMOPLd/rWY 2Wx3UhvfEY+3eMDZP3AAcdFLUXcU7vdGm6TPwXMgMhQeHutBFE+V82EIP1rMjpZa sY/v4jTmJD427fgMO3fhfiA2bLUjExNvGSqpHMDsDaV1UD208QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjUgPyJC6kMHT7zheKwme40vZZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmRmNTFiZDItOGYzNS0z Nzg0LWE2NzItOTI4OGFkMjA0YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBr32J8YvhtH39O9eugbOIohbkBdjtNibvFTEjEFiZh4UhtGECNRYPc 0WoMXFFP4OJnNTNmxQDlA++ZMZp83OO4DwnqYg9LIjtnqdxVTbUCpNzmWgdftDwa /O4RPoSMdOvXWZTbWZrv3DJEvzivSpSM4eCPvggB6/W8hajL1BawlXrEZgFrPiHc z18ouexusCRZpjWfssDvg03fmieuN44zaUITIOgQTSJrtrStJl8G7xm6uCPo3DMJ KgLMV2MxxJ00cwkdjezG9+LZDpiOqC5G5ApxL7HDGDrPT8PbHSFGYW6kGKl9po9/ /sz6JZ73JiN3D3ASinb8MrNLUruX378= -----END CERTIFICATE-----Generated at Sat Aug 23 08:20:49 2025 by rpki-client