$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b091710-07b4-382b-95aa-866892818442.roa File: 3b091710-07b4-382b-95aa-866892818442.roa (raw, json) Hash identifier: kKwac1tWv0jmFuWNR6ucyPMDw0PKUqX1ocob1YlFnhQ= Subject key identifier: C8:59:A6:AF:E9:09:F6:6E:DC:AC:83:C3:AF:9B:F2:3D:DC:80:CE:1F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADD66683E4B8D4BF1C9F12600 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b091710-07b4-382b-95aa-866892818442.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 8987 IP address blocks: 130.137.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:68:3e:4b:8d:4b:f1:c9:f1:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=cd76be1b-7af2-4a4b-b899-10c62c3b0493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cb:50:26:78:4a:18:17:72:bd:0d:c8:56:c1: 58:3a:eb:65:af:7e:4b:b9:2d:a4:97:ec:c8:09:8e: c3:bf:94:f3:54:3b:4c:77:0f:93:b3:8c:6a:08:d7: 85:20:7b:e4:2f:fb:a0:aa:9f:19:8a:6c:99:ee:a7: 09:06:aa:81:a4:cf:ff:2b:01:d8:6f:79:f8:37:4f: dd:04:09:31:60:65:5d:04:db:cf:0f:7f:9d:e5:d9: de:a4:a6:3e:74:40:51:14:e8:90:24:fe:ca:d2:a3: 3f:ad:e1:31:a4:b0:08:6a:fd:3f:fc:ab:c4:4e:97: dc:4a:38:14:83:5a:8c:59:54:dc:b2:3b:90:25:89: ae:58:88:bd:e3:4f:8e:6a:02:30:05:a5:cd:fd:ba: 83:d2:d6:0c:77:82:85:73:cf:b4:cc:ce:9f:82:f6: b2:71:91:17:3b:f1:69:9a:5d:42:e2:8c:73:93:af: 30:fa:52:51:4a:ff:01:92:11:30:ee:66:aa:44:14: a8:fd:ca:f3:cd:aa:2d:2a:ce:3b:c5:c5:d7:5a:03: 8c:90:5e:1c:c8:14:f8:bb:e0:00:b0:8b:ad:87:b7: f0:32:6f:25:db:d9:33:16:0c:63:ec:78:a9:43:ed: 58:e5:46:a6:53:13:6c:bf:d2:b7:28:ed:f4:17:bc: 3f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:59:A6:AF:E9:09:F6:6E:DC:AC:83:C3:AF:9B:F2:3D:DC:80:CE:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b091710-07b4-382b-95aa-866892818442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b6:b2:39:08:e2:ba:0d:a8:f3:db:fb:dd:ea:cb:41:2c:d9: bf:2b:e9:e0:3f:07:96:5c:b3:4e:c2:42:a2:e9:9f:51:3b:b4: a8:c2:51:a4:19:68:60:96:82:67:94:8e:d8:67:96:6e:ce:73: e1:42:87:01:c2:1d:93:7b:62:e1:1e:53:29:f7:ae:8c:b9:8f: 05:6b:08:a2:5e:0b:c0:ab:90:29:77:aa:4a:60:2c:5a:a4:fa: ff:1d:0a:73:a0:04:fa:55:ca:aa:03:00:ad:59:04:14:9f:f9: ab:21:12:ec:da:2f:85:72:e7:5e:e5:51:9a:3b:e8:10:b6:44: ff:6a:fe:5c:8d:f7:a1:82:07:9b:0e:1e:b6:2d:c6:e0:83:41: c1:cb:68:13:25:31:3d:32:eb:90:37:30:26:8e:9e:88:87:22: f3:63:74:3f:2a:ad:d6:48:f8:ce:b0:07:7d:a2:b7:79:8f:66: 0f:d1:78:fd:3f:d5:d2:dd:48:d1:e0:85:4a:82:0c:e9:e2:f8: 5c:d7:94:10:8e:71:93:e7:0b:0d:03:82:45:4b:4c:23:30:14: 38:62:39:41:32:63:a4:7a:a9:0c:bc:93:9e:fc:ce:ae:91:5f: 1c:24:3c:d1:af:b7:fb:2f:72:d6:b5:ed:69:e6:07:69:67:78: f6:d8:f4:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZmg+S41L8cnxJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk Y2Q3NmJlMWItN2FmMi00YTRiLWI4OTktMTBjNjJjM2IwNDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMtQJnhKGBdyvQ3IVsFYOutlr35LuS2kl+zI CY7Dv5TzVDtMdw+Ts4xqCNeFIHvkL/ugqp8ZimyZ7qcJBqqBpM//KwHYb3n4N0/d BAkxYGVdBNvPD3+d5dnepKY+dEBRFOiQJP7K0qM/reExpLAIav0//KvETpfcSjgU g1qMWVTcsjuQJYmuWIi940+OagIwBaXN/bqD0tYMd4KFc8+0zM6fgvaycZEXO/Fp ml1C4oxzk68w+lJRSv8BkhEw7maqRBSo/crzzaotKs47xcXXWgOMkF4cyBT4u+AA sIuth7fwMm8l29kzFgxj7HipQ+1Y5UamUxNsv9K3KO30F7w/AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhZpq/pCfZu3KyDw6+b8j3cgM4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvM2IwOTE3MTAtMDdiNC0z ODJiLTk1YWEtODY2ODkyODE4NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK2sjkI4roNqPPb+93qy0Es2b8r6eA/B5Zcs07CQqLpn1E7tKjCUaQZ aGCWgmeUjthnlm7Oc+FChwHCHZN7YuEeUyn3roy5jwVrCKJeC8CrkCl3qkpgLFqk +v8dCnOgBPpVyqoDAK1ZBBSf+ashEuzaL4Vy517lUZo76BC2RP9q/lyN96GCB5sO HrYtxuCDQcHLaBMlMT0y65A3MCaOnoiHIvNjdD8qrdZI+M6wB32it3mPZg/ReP0/ 1dLdSNHghUqCDOni+FzXlBCOcZPnCw0DgkVLTCMwFDhiOUEyY6R6qQy8k578zq6R XxwkPNGvt/svcta17WnmB2lnePbY9KE= -----END CERTIFICATE-----Generated at Sat Aug 23 13:09:39 2025 by rpki-client