$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91807d1c-489c-3c3e-9229-5ecc326d6394.roa File: 91807d1c-489c-3c3e-9229-5ecc326d6394.roa (raw, json) Hash identifier: Q+ebzDXNM0DU6jlhgdG3yXe3TW8QJ1G5vgdkQfQQM4c= Subject key identifier: CB:43:4C:47:B8:61:01:CC:2C:B4:85:2C:27:52:F5:50:E3:F6:A2:A2 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AEE2680C30F29AF2A56C5B200 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91807d1c-489c-3c3e-9229-5ecc326d6394.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 8987 IP address blocks: 130.137.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:80:c3:0f:29:af:2a:56:c5:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=de6c6b9c-12d4-4dc5-a22e-71cb9fe11969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8f:0d:7c:79:66:23:2b:65:41:9a:ff:dc:62: 03:80:f7:33:d3:2c:e2:15:fe:d5:e1:f0:69:31:63: 73:b7:6f:99:97:85:ee:cf:f2:63:69:b4:c1:e5:5d: 3e:44:83:73:75:ff:c1:9c:71:14:8c:36:97:27:ef: 46:a9:c4:e8:00:09:5d:60:05:09:cf:17:f3:26:7a: d1:97:66:02:4e:4f:a6:61:4f:8a:95:3d:31:72:ec: 47:4b:c7:f9:39:bb:d1:c8:eb:c0:15:9c:2b:85:09: cd:7f:5b:ce:10:32:dc:d4:bb:9a:e9:80:18:56:1c: e9:f4:04:5d:14:40:78:f8:e3:fc:fa:0b:7e:ea:19: d2:26:c0:d8:e4:64:91:f5:f8:76:cf:b7:6b:e4:6a: 90:0b:13:e9:64:84:ca:e6:dd:91:7e:3f:25:23:3b: e3:bc:f2:bc:a2:ab:84:73:cc:73:1d:d8:2c:a6:16: be:d3:bb:2f:d7:e9:19:03:5f:4d:b6:d8:04:60:90: a3:cd:da:91:c0:86:1b:6b:13:21:62:53:2d:e6:02: 64:65:d5:4a:d3:17:b6:65:8a:79:5b:b0:2c:61:24: 69:a2:ae:12:a8:85:51:d2:8a:fb:2c:c8:48:c9:09: b8:51:bd:f4:f4:58:f7:1b:e7:2b:f8:6a:a9:45:72: c3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:43:4C:47:B8:61:01:CC:2C:B4:85:2C:27:52:F5:50:E3:F6:A2:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91807d1c-489c-3c3e-9229-5ecc326d6394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e7:e5:c4:08:f2:84:a6:98:9e:3e:15:32:ad:8e:b5:f8:44: b8:21:9c:08:66:f5:c7:22:28:09:e1:30:5b:5a:75:d2:83:bf: 88:bc:b8:00:57:a5:b9:61:f6:69:34:03:2b:83:31:f3:1d:21: c7:5e:c7:53:fb:6d:b3:6f:d2:f9:34:26:b5:fa:52:6a:75:bc: a7:ca:d5:be:4c:dd:ec:44:78:72:89:3d:14:6e:19:36:ab:66: ca:ee:36:bb:e9:a7:30:07:aa:fd:65:fb:49:c2:fc:ba:6d:c3: 48:a8:17:54:2b:7d:75:00:21:cb:b9:fe:e1:7d:91:30:9c:be: a1:98:62:56:4c:a2:ae:3d:73:be:1c:e1:9a:3f:e4:02:1a:26: 37:e5:ae:77:a8:e3:98:99:25:71:15:27:84:90:01:20:16:2f: cb:52:21:aa:1b:85:4e:4b:8e:ba:d2:00:c4:53:e8:be:6c:99: 5d:27:7d:09:21:92:ce:5f:03:1b:03:a5:b0:01:c9:8a:c7:4c: 97:f4:97:de:71:df:2c:d3:08:8b:24:30:67:a4:bc:65:76:d6: f6:b6:48:37:72:9a:fb:ae:f6:44:0b:e1:dc:15:90:26:a2:6c: f8:54:2b:54:58:76:ec:9c:92:a8:df:30:1d:bc:65:e3:80:e8: 19:c7:69:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoDDDymvKlbFsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZGU2YzZiOWMtMTJkNC00ZGM1LWEyMmUtNzFjYjlmZTExOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA048NfHlmIytlQZr/3GIDgPcz0yziFf7V4fBp MWNzt2+Zl4Xuz/JjabTB5V0+RINzdf/BnHEUjDaXJ+9GqcToAAldYAUJzxfzJnrR l2YCTk+mYU+KlT0xcuxHS8f5ObvRyOvAFZwrhQnNf1vOEDLc1Lua6YAYVhzp9ARd FEB4+OP8+gt+6hnSJsDY5GSR9fh2z7dr5GqQCxPpZITK5t2Rfj8lIzvjvPK8oquE c8xzHdgspha+07sv1+kZA19NttgEYJCjzdqRwIYbaxMhYlMt5gJkZdVK0xe2ZYp5 W7AsYSRpoq4SqIVR0or7LMhIyQm4Ub309Fj3G+cr+GqpRXLDmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtDTEe4YQHMLLSFLCdS9VDj9qKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTE4MDdkMWMtNDg5Yy0z YzNlLTkyMjktNWVjYzMyNmQ2Mzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnn5cQI8oSmmJ4+FTKtjrX4RLghnAhm9cciKAnhMFtaddKDv4i8uABX pblh9mk0AyuDMfMdIcdex1P7bbNv0vk0JrX6Ump1vKfK1b5M3exEeHKJPRRuGTar ZsruNrvppzAHqv1l+0nC/Lptw0ioF1QrfXUAIcu5/uF9kTCcvqGYYlZMoq49c74c 4Zo/5AIaJjflrneo45iZJXEVJ4SQASAWL8tSIaobhU5LjrrSAMRT6L5smV0nfQkh ks5fAxsDpbAByYrHTJf0l95x3yzTCIskMGekvGV21va2SDdymvuu9kQL4dwVkCai bPhUK1RYduyckqjfMB28ZeOA6BnHaeM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:48:32 2025 by rpki-client