$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/904e0d66-ff77-33ca-a82d-b9c9133c4673.roa File: 904e0d66-ff77-33ca-a82d-b9c9133c4673.roa (raw, json) Hash identifier: fVbmhnCTPqywj4lHCBH12Tn4KDVo2xq4zw3f0sJ2OHA= Subject key identifier: C4:FE:F4:C3:2F:CC:E8:0A:D4:12:A5:52:68:A5:5E:34:5F:09:8D:7F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AC8763F52E958EDD1E3B6F0C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/904e0d66-ff77-33ca-a82d-b9c9133c4673.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 130.137.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:3f:52:e9:58:ed:d1:e3:b6:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=87e459e1-c507-486f-8ae6-bd362b59025e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d3:78:c7:5a:78:58:8f:11:25:7a:4c:8c:f2: c1:b3:10:b9:d6:8c:06:cc:e8:b1:cb:b9:4e:81:3d: a9:fb:6a:40:75:fd:6a:02:a2:98:3c:09:d7:ce:62: ff:a1:65:e8:99:22:da:e0:6c:3b:92:f5:fd:cb:95: b1:6e:49:f0:18:07:47:56:74:1f:5e:bf:62:77:04: f4:b3:e2:3c:bc:df:b5:5e:3b:7e:13:cc:76:b5:d9: a8:06:1a:8d:b9:eb:6e:9c:e9:a2:5e:57:3a:c6:d4: 4e:ec:ea:6d:33:50:85:bc:c0:e0:41:ff:65:95:69: 50:29:cf:f7:82:2d:3e:f2:85:52:29:78:fd:64:73: 6b:62:bf:ea:aa:a2:e3:c0:6c:63:38:38:cc:e3:4f: e8:e8:c6:0c:ac:d1:62:76:fb:00:fb:e3:56:1e:df: fe:29:a4:20:d6:98:e1:ac:b0:93:bc:59:11:ca:13: 51:15:e8:5c:51:49:fe:13:a3:c8:f8:3a:82:13:12: 84:cd:79:b6:ce:99:3d:fd:63:17:77:bd:a4:b0:ec: 64:35:54:7d:db:a4:4f:27:16:b0:ca:6a:73:d8:4b: 77:79:96:34:43:d0:3f:ac:00:b1:d5:1e:75:56:e5: 34:9a:4b:e0:d5:11:50:2d:91:25:f4:43:ba:0b:e6: 48:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FE:F4:C3:2F:CC:E8:0A:D4:12:A5:52:68:A5:5E:34:5F:09:8D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/904e0d66-ff77-33ca-a82d-b9c9133c4673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a5:a9:b3:7b:7a:3e:72:b1:9e:d9:13:ce:74:45:57:2e:1b: d4:85:5c:e4:ab:18:45:8e:10:67:16:81:2c:0b:96:b9:2c:b1: f1:53:fc:c1:1c:a5:8b:61:cc:22:2f:0e:9d:26:e8:0e:ad:56: 6f:17:50:07:90:2c:f6:c6:e0:95:c3:5c:97:86:1b:ed:ec:93: 13:89:49:62:31:df:24:4f:f2:17:b7:cb:bf:bc:e3:da:8b:05: e3:54:9d:b0:3f:9d:f4:b7:16:02:a5:ce:82:3a:a8:cf:e6:5f: 23:1a:72:b9:24:fc:5d:15:60:f5:08:2f:97:c8:b0:f3:86:78: e5:eb:9f:77:a6:76:8b:76:af:71:3b:f0:d7:09:c5:b9:17:ff: a3:c8:9a:c3:49:f2:28:3d:a7:f3:25:53:2f:b0:f7:7e:5d:76: 9f:99:8e:a8:b4:ca:c4:7f:e0:12:ff:41:ca:b3:eb:d2:36:8a: 31:fb:f3:ef:1e:56:a6:1e:8e:bf:7f:b7:08:fb:9b:a9:92:9e: 92:9c:d6:36:e7:8a:1f:e9:0b:94:95:4a:40:73:fd:9e:15:ed: 1f:0a:b7:be:a7:8b:be:a4:53:c9:dc:14:58:86:30:ae:60:ef: 85:d3:7a:a7:da:ec:d7:5d:0c:9e:39:fc:eb:e8:86:5c:21:a1: 64:74:c9:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdj9S6Vjt0eO28MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ODdlNDU5ZTEtYzUwNy00ODZmLThhZTYtYmQzNjJiNTkwMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29N4x1p4WI8RJXpMjPLBsxC51owGzOixy7lO gT2p+2pAdf1qAqKYPAnXzmL/oWXomSLa4Gw7kvX9y5WxbknwGAdHVnQfXr9idwT0 s+I8vN+1Xjt+E8x2tdmoBhqNuetunOmiXlc6xtRO7OptM1CFvMDgQf9llWlQKc/3 gi0+8oVSKXj9ZHNrYr/qqqLjwGxjODjM40/o6MYMrNFidvsA++NWHt/+KaQg1pjh rLCTvFkRyhNRFehcUUn+E6PI+DqCExKEzXm2zpk9/WMXd72ksOxkNVR926RPJxaw ympz2Et3eZY0Q9A/rACx1R51VuU0mkvg1RFQLZEl9EO6C+ZIhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMT+9MMvzOgK1BKlUmilXjRfCY1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTA0ZTBkNjYtZmY3Ny0z M2NhLWE4MmQtYjljOTEzM2M0NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWlqbN7ej5ysZ7ZE850RVcuG9SFXOSrGEWOEGcWgSwLlrkssfFT/MEc pYthzCIvDp0m6A6tVm8XUAeQLPbG4JXDXJeGG+3skxOJSWIx3yRP8he3y7+849qL BeNUnbA/nfS3FgKlzoI6qM/mXyMacrkk/F0VYPUIL5fIsPOGeOXrn3emdot2r3E7 8NcJxbkX/6PImsNJ8ig9p/MlUy+w935ddp+Zjqi0ysR/4BL/Qcqz69I2ijH78+8e VqYejr9/twj7m6mSnpKc1jbnih/pC5SVSkBz/Z4V7R8Kt76ni76kU8ncFFiGMK5g 74XTeqfa7NddDJ45/OvohlwhoWR0ycE= -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:42 2025 by rpki-client