$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4361b23a-0b42-3078-9043-9ce57c5d8cf7.roa File: 4361b23a-0b42-3078-9043-9ce57c5d8cf7.roa (raw, json) Hash identifier: dBRTZWPttRispH1RLeMYJvqiLzs20FdRfF77NhbE75k= Subject key identifier: 21:CF:F9:F6:B9:23:19:63:6E:EC:C3:30:EF:16:E8:D0:B7:87:7C:C7 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADA9BB727C32855AA4A670000 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4361b23a-0b42-3078-9043-9ce57c5d8cf7.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 8987 IP address blocks: 130.137.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b7:27:c3:28:55:aa:4a:67:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=e13fa9fe-5bc8-47f7-b60f-30da8055d031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e2:ea:25:70:3c:e2:a0:a4:2e:ac:92:1f:6e: dd:62:d3:bb:1b:bd:a4:25:40:4d:d5:4d:0b:62:e3: 5e:b1:86:51:09:fd:b2:ac:56:88:15:ad:1d:cc:6f: 85:7e:0b:b5:fa:b6:ca:80:8d:68:88:9e:55:33:46: cf:71:7a:e4:e8:27:cd:ad:df:95:ac:59:0a:45:3f: 2f:3d:7b:89:45:0e:46:30:35:88:c1:52:47:86:76: ca:7b:d3:d3:b5:06:e0:71:d2:21:4a:36:3a:b7:b3: 05:f4:32:2d:83:af:e8:9a:e8:c1:d4:7a:80:c8:bf: 43:90:97:00:01:25:88:72:12:11:76:8f:c1:ec:31: 37:42:f0:db:3d:a7:88:b8:3d:9e:e1:34:5a:80:35: 99:5b:14:27:a9:0e:44:fd:5a:5d:32:91:88:dd:50: 8b:44:a1:7b:3a:b1:c4:3f:43:25:80:df:3f:3a:44: 57:5a:74:47:5f:4a:f5:bc:5f:8a:b6:7e:32:8a:3a: 71:ee:f1:f7:47:f4:cb:85:89:21:38:67:90:5f:55: 22:bf:fc:b1:cb:ea:6a:07:a3:9c:8f:60:44:e2:eb: 9e:bd:50:74:3e:94:99:e8:38:9a:18:ae:6a:a3:cd: c4:ec:88:c8:19:6d:ce:2f:9b:c9:5d:49:4c:04:cf: ab:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CF:F9:F6:B9:23:19:63:6E:EC:C3:30:EF:16:E8:D0:B7:87:7C:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4361b23a-0b42-3078-9043-9ce57c5d8cf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:5b:76:e7:cd:69:9f:e0:26:1a:c1:12:fb:36:fb:84:b7:66: bc:d8:a5:f4:fc:8e:b9:43:8d:6e:b3:9b:e7:7b:88:3b:4f:ff: 5d:7d:27:99:ae:94:b0:4f:e4:38:ca:6c:24:1f:33:25:16:63: 63:d7:00:18:c5:43:9f:63:31:eb:37:ed:f2:15:29:39:44:0c: c6:7b:9e:a5:ab:ad:62:07:98:93:67:20:60:41:95:50:ec:91: 93:35:b7:ff:4d:fe:71:32:3b:00:44:c4:8c:43:ee:1e:08:78: df:c1:dc:4c:22:ba:0e:97:4b:db:f1:4a:83:a1:6e:89:4a:1f: ba:f7:d4:a0:d3:b6:aa:3d:c1:cc:ef:7f:b0:ad:09:cd:2f:7a: 5e:a7:d7:32:ae:2e:7b:79:d8:ee:49:9e:42:5e:2a:d2:cf:fa: 1a:52:27:d0:93:cb:b4:b3:f1:82:57:df:49:95:85:b4:64:5f: c9:61:4d:9e:66:65:c8:27:03:50:70:81:d5:93:bc:12:40:63: 49:52:0c:28:17:1d:f3:79:92:33:24:a4:2d:59:f8:99:ca:0c: 76:c6:d3:3b:8d:f7:2f:21:3b:45:ed:69:dc:25:d4:d6:1b:ea: 26:c4:41:e6:0b:0e:b2:ab:c5:fc:8e:ba:4a:d5:27:35:40:8f: 90:a3:d9:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram7cnwyhVqkpnAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ZTEzZmE5ZmUtNWJjOC00N2Y3LWI2MGYtMzBkYTgwNTVkMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+LqJXA84qCkLqySH27dYtO7G72kJUBN1U0L YuNesYZRCf2yrFaIFa0dzG+Ffgu1+rbKgI1oiJ5VM0bPcXrk6CfNrd+VrFkKRT8v PXuJRQ5GMDWIwVJHhnbKe9PTtQbgcdIhSjY6t7MF9DItg6/omujB1HqAyL9DkJcA ASWIchIRdo/B7DE3QvDbPaeIuD2e4TRagDWZWxQnqQ5E/VpdMpGI3VCLRKF7OrHE P0MlgN8/OkRXWnRHX0r1vF+Ktn4yijpx7vH3R/TLhYkhOGeQX1Uiv/yxy+pqB6Oc j2BE4uuevVB0PpSZ6DiaGK5qo83E7IjIGW3OL5vJXUlMBM+riQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHP+fa5IxljbuzDMO8W6NC3h3zHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDM2MWIyM2EtMGI0Mi0z MDc4LTkwNDMtOWNlNTdjNWQ4Y2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhbdufNaZ/gJhrBEvs2+4S3ZrzYpfT8jrlDjW6zm+d7iDtP/119J5mu lLBP5DjKbCQfMyUWY2PXABjFQ59jMes37fIVKTlEDMZ7nqWrrWIHmJNnIGBBlVDs kZM1t/9N/nEyOwBExIxD7h4IeN/B3Ewiug6XS9vxSoOhbolKH7r31KDTtqo9wczv f7CtCc0vel6n1zKuLnt52O5JnkJeKtLP+hpSJ9CTy7Sz8YJX30mVhbRkX8lhTZ5m ZcgnA1BwgdWTvBJAY0lSDCgXHfN5kjMkpC1Z+JnKDHbG0zuN9y8hO0Xtadwl1NYb 6ibEQeYLDrKrxfyOukrVJzVAj5Cj2Y0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:01:46 2025 by rpki-client