$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/531d8398-b955-3ca2-9032-3d7609e92d88.roa File: 531d8398-b955-3ca2-9032-3d7609e92d88.roa (raw, json) Hash identifier: Q60gFc/gvZ0TxdufEPyBdcSMep9rQXPEOw1FkV4012U= Subject key identifier: BC:CA:7C:3F:F0:FB:AA:83:ED:03:7F:E1:B4:86:EC:23:14:C4:7A:6A Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF25679C8E080648666AEF970 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/531d8398-b955-3ca2-9032-3d7609e92d88.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:79:c8:e0:80:64:86:66:ae:f9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=35b36ae7-9179-49e7-ae68-efab842f24ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1b:77:92:62:7c:b2:af:fc:7a:f2:4c:f3:5e: f6:ef:f3:d8:b2:fb:6b:00:ff:0a:66:f5:12:85:bb: 18:3f:71:51:64:69:b6:29:b7:1f:ff:47:ef:1e:e9: 0d:05:f0:b3:06:45:a0:4d:92:42:98:85:a5:30:7b: ea:0f:68:72:c4:11:f3:c9:e3:b6:63:ac:ae:61:3e: 6d:9f:41:8b:bf:79:cf:3f:91:d9:8a:36:39:64:50: 09:f1:6f:bb:b2:36:18:aa:28:83:7c:18:7a:d4:09: c5:8c:60:ee:4d:e1:ad:bb:b9:a6:ec:87:4d:b1:50: eb:3a:03:11:92:21:17:a2:d1:d0:df:ea:b2:a2:f5: 3b:51:82:94:41:2d:24:85:fd:a2:56:74:0b:66:f7: aa:6b:b1:bb:ac:00:aa:e5:22:ba:6b:5f:cf:8a:f9: e8:2b:4f:b9:da:7c:61:6f:cf:5e:d7:12:c7:ad:c5: cd:b7:03:36:ca:4f:61:d7:3d:c2:4a:c4:e6:b7:61: 87:09:b5:17:6a:e8:8a:38:29:6a:32:0a:bc:c8:45: 1e:23:93:c1:0d:93:80:f1:40:91:21:f1:37:6f:df: 3c:de:f3:e9:53:fa:4f:d5:3d:5a:a0:e1:48:02:b6: 7c:1b:24:17:26:a4:e5:20:6d:d7:31:4b:5a:25:a9: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CA:7C:3F:F0:FB:AA:83:ED:03:7F:E1:B4:86:EC:23:14:C4:7A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/531d8398-b955-3ca2-9032-3d7609e92d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:5a:af:d7:cc:91:a4:98:a2:48:c8:91:d8:95:9c:d2:e8:fa: 57:9b:e9:86:7b:f2:cd:52:a6:cf:cf:2d:a7:24:5e:8f:e9:60: 46:a4:c3:c8:45:a4:17:56:b1:8b:03:8c:0a:a8:4e:87:d7:29: f6:54:42:c8:5f:86:5f:03:a4:55:ad:6f:a7:69:f8:cc:c0:60: c4:ed:5b:4f:a0:07:0e:8a:8d:9b:63:81:03:f5:30:fe:30:c6: de:59:58:bd:f5:9e:94:eb:60:b2:53:77:c3:c9:17:3e:8a:3c: 31:41:ad:6f:1a:1d:2a:b6:11:c4:ce:8c:d7:6e:3b:1b:9e:f6: 97:2b:46:15:20:4b:7d:62:59:c3:a6:79:30:69:8e:18:b0:d8: f1:a8:74:ad:ad:49:96:78:db:27:db:f2:54:62:97:f3:56:4e: a8:bb:a2:43:89:63:3e:10:db:5c:65:4d:5c:40:83:b5:98:8e: ff:29:93:72:5f:64:45:21:6f:10:1d:a1:17:67:70:82:49:20: 37:c8:95:6f:bb:98:4f:ff:aa:81:34:95:77:16:4e:44:a0:7e: 50:7d:65:bb:a9:37:01:4e:a4:47:b4:bd:56:8f:56:92:a6:08: 19:63:60:33:0b:5a:db:2b:da:d8:b2:c3:60:4d:08:e4:cd:34: 3a:e5:75:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnnI4IBkhmau+XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MzViMzZhZTctOTE3OS00OWU3LWFlNjgtZWZhYjg0MmYyNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxt3kmJ8sq/8evJM81727/PYsvtrAP8KZvUS hbsYP3FRZGm2Kbcf/0fvHukNBfCzBkWgTZJCmIWlMHvqD2hyxBHzyeO2Y6yuYT5t n0GLv3nPP5HZijY5ZFAJ8W+7sjYYqiiDfBh61AnFjGDuTeGtu7mm7IdNsVDrOgMR kiEXotHQ3+qyovU7UYKUQS0khf2iVnQLZveqa7G7rACq5SK6a1/PivnoK0+52nxh b89e1xLHrcXNtwM2yk9h1z3CSsTmt2GHCbUXauiKOClqMgq8yEUeI5PBDZOA8UCR IfE3b9883vPpU/pP1T1aoOFIArZ8GyQXJqTlIG3XMUtaJamC8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzKfD/w+6qD7QN/4bSG7CMUxHpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTMxZDgzOTgtYjk1NS0z Y2EyLTkwMzItM2Q3NjA5ZTkyZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZar9fMkaSYokjIkdiVnNLo+leb6YZ78s1Sps/PLackXo/pYEakw8hF pBdWsYsDjAqoTofXKfZUQshfhl8DpFWtb6dp+MzAYMTtW0+gBw6KjZtjgQP1MP4w xt5ZWL31npTrYLJTd8PJFz6KPDFBrW8aHSq2EcTOjNduOxue9pcrRhUgS31iWcOm eTBpjhiw2PGodK2tSZZ42yfb8lRil/NWTqi7okOJYz4Q21xlTVxAg7WYjv8pk3Jf ZEUhbxAdoRdncIJJIDfIlW+7mE//qoE0lXcWTkSgflB9ZbupNwFOpEe0vVaPVpKm CBljYDMLWtsr2tiyw2BNCOTNNDrldRg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:01:50 2025 by rpki-client