$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/564f8912-55f1-38aa-9aa6-5e3d7e99ff21.roa File: 564f8912-55f1-38aa-9aa6-5e3d7e99ff21.roa (raw, json) Hash identifier: 3HeCE1MxJQEq6uL/afNNlk+kL3iMPrplr11bZ2lYEN8= Subject key identifier: 54:1D:10:06:C5:CB:66:DE:87:48:81:CE:11:B3:7D:11:CA:D2:6A:2A Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AD7D11465A25D0B43DBC68580 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/564f8912-55f1-38aa-9aa6-5e3d7e99ff21.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 130.137.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:14:65:a2:5d:0b:43:db:c6:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=3e6fea56-cad5-403c-bdba-8735af3348d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:60:9b:3e:56:44:7e:82:5a:59:3a:7e:91: 6c:bb:fc:b1:54:88:63:c4:01:04:80:e4:d4:2e:04: f0:b9:95:8a:a5:85:9f:a1:10:09:c4:27:b4:f7:9b: c7:dc:83:b0:10:42:30:e9:9a:96:77:7f:1c:c3:3d: a3:03:88:a2:37:18:82:b8:45:43:3d:65:10:b7:0c: 5d:9b:31:54:5f:61:d1:6b:7e:4a:ba:07:70:35:db: 0f:e4:6a:16:e4:46:79:f1:04:4e:37:58:b4:58:4e: 12:a7:ec:5e:d4:70:57:32:d4:cf:d8:36:be:6a:1e: cc:fa:38:4e:ad:18:d8:da:c3:fe:a4:57:6c:4c:51: 5d:f8:ba:c0:6d:72:8e:cb:0c:71:43:ba:d2:5c:69: 66:02:ea:e6:d6:41:96:9d:7a:51:67:15:98:20:ce: d7:63:64:3d:be:41:f6:dc:64:ac:d7:0e:3b:b0:a3: 8e:dc:5c:ee:d9:a6:83:d5:d2:02:1a:6f:37:00:9f: 6f:fc:39:f2:69:4b:97:8f:0b:f7:23:91:ed:d7:f9: d1:fe:60:ea:c3:c8:38:96:69:a3:bf:e3:c8:9a:1f: 96:10:2c:07:3b:20:4f:b5:97:59:c1:74:09:76:a1: 44:0d:a9:69:10:7d:93:31:86:d8:2c:de:47:70:e7: 8a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1D:10:06:C5:CB:66:DE:87:48:81:CE:11:B3:7D:11:CA:D2:6A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/564f8912-55f1-38aa-9aa6-5e3d7e99ff21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:69:00:7d:94:42:ca:45:b9:3d:34:17:c5:44:22:e4:d3:02: 74:4c:78:f7:8d:0a:10:30:c3:d6:b9:f6:f1:e7:9b:8f:43:2d: c2:c3:14:6e:77:aa:b3:27:05:34:07:bd:ff:66:5b:bb:e6:3a: 60:18:92:98:b6:39:85:28:d1:2d:f1:f9:4b:0b:d9:60:c5:8d: e3:64:eb:6a:15:18:14:b7:24:9f:32:0e:c9:6d:24:31:7d:49: eb:79:02:ba:2e:1f:e7:aa:7c:25:a5:74:03:90:e7:95:29:7c: c0:c7:fb:f7:41:51:83:68:08:00:81:2c:cf:4d:4a:b8:a2:3f: 61:d8:3a:67:51:11:33:9b:e1:6f:24:90:01:c3:7d:76:e0:af: 59:0d:e2:b9:76:27:73:2d:ca:19:5f:ad:51:92:58:bf:30:c7: b7:b8:58:e5:c0:c8:36:31:ba:7c:12:4d:10:62:2f:dc:a1:15: 0e:7a:f3:eb:15:f2:36:fd:58:56:df:90:a6:b6:4d:56:3f:a9: 98:10:85:47:b8:21:6e:ea:f3:84:30:8f:82:c6:a8:3e:7b:42: ff:70:37:1e:c0:6e:ab:b0:b1:7a:45:7c:03:f6:5b:b7:a9:d3: e3:7a:f7:1c:5c:6d:8e:86:c1:19:86:5c:d7:14:74:d1:b2:2e: 69:62:b4:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0RRlol0LQ9vGhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk M2U2ZmVhNTYtY2FkNS00MDNjLWJkYmEtODczNWFmMzM0OGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc9gmz5WRH6CWlk6fpFsu/yxVIhjxAEEgOTU LgTwuZWKpYWfoRAJxCe095vH3IOwEEIw6ZqWd38cwz2jA4iiNxiCuEVDPWUQtwxd mzFUX2HRa35KugdwNdsP5GoW5EZ58QRON1i0WE4Sp+xe1HBXMtTP2Da+ah7M+jhO rRjY2sP+pFdsTFFd+LrAbXKOywxxQ7rSXGlmAurm1kGWnXpRZxWYIM7XY2Q9vkH2 3GSs1w47sKOO3Fzu2aaD1dICGm83AJ9v/DnyaUuXjwv3I5Ht1/nR/mDqw8g4lmmj v+PImh+WECwHOyBPtZdZwXQJdqFEDalpEH2TMYbYLN5HcOeKWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQdEAbFy2beh0iBzhGzfRHK0moqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTY0Zjg5MTItNTVmMS0z OGFhLTlhYTYtNWUzZDdlOTlmZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZpAH2UQspFuT00F8VEIuTTAnRMePeNChAww9a59vHnm49DLcLDFG53 qrMnBTQHvf9mW7vmOmAYkpi2OYUo0S3x+UsL2WDFjeNk62oVGBS3JJ8yDsltJDF9 Set5ArouH+eqfCWldAOQ55UpfMDH+/dBUYNoCACBLM9NSriiP2HYOmdRETOb4W8k kAHDfXbgr1kN4rl2J3MtyhlfrVGSWL8wx7e4WOXAyDYxunwSTRBiL9yhFQ568+sV 8jb9WFbfkKa2TVY/qZgQhUe4IW7q84Qwj4LGqD57Qv9wNx7AbquwsXpFfAP2W7ep 0+N69xxcbY6GwRmGXNcUdNGyLmlitOQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:33 2025 by rpki-client