$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa File: af81503f-94d7-3c4a-82d3-477d600d79fc.roa (raw, json) Hash identifier: dr1JsufNAqJ/1ZUqWU6Kn9ZucfdQWvHirB0ph7XRoXo= Subject key identifier: 09:5D:BE:43:D0:45:7F:50:FA:7C:64:D1:69:CA:0C:1B:B9:95:45:D5 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF2567A2B02CA6C7E9B2BDE40 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7a:2b:02:ca:6c:7e:9b:2b:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=fbc8f70e-33fb-4eb3-9800-f79ec5867067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d2:43:3e:31:bc:04:f4:22:70:ce:25:88:cc: 9e:96:03:88:f6:e6:9d:66:e9:01:6d:e0:ca:07:88: 8b:9d:38:ea:83:77:ab:ab:0f:27:4b:f0:71:5a:42: a2:9a:01:bd:1a:f8:5a:27:9e:38:b7:8e:82:78:f3: 0c:1d:aa:62:c8:39:ed:fa:e2:c0:e4:80:39:52:c4: 3d:d4:e5:57:17:c1:9b:01:ab:d5:37:9b:a0:7e:91: 6f:ba:20:75:02:95:ef:f7:ff:78:bc:06:9e:ee:c4: 55:70:ed:bb:b8:10:39:b0:49:60:c4:f3:6a:e7:a6: d2:4d:57:b5:61:f8:3e:57:ae:03:21:dc:6d:b2:07: f0:fd:c1:c8:41:a0:78:59:1a:86:b0:2c:fa:5d:89: ad:ac:46:9b:a3:d1:eb:8a:d0:cb:9a:fc:82:8b:f7: 9a:57:d4:77:47:2e:68:f4:c8:43:b6:fb:19:2c:bb: fb:c2:27:5a:80:32:d6:37:24:30:1a:8a:92:17:21: 14:6a:48:10:1e:67:a0:62:fe:ae:37:5f:80:c9:44: 1e:2c:b5:e0:0d:93:06:3f:d7:24:0a:55:28:d6:34: a8:58:b5:d3:7a:f1:0f:78:59:05:e4:5f:92:59:cc: 4d:4a:ef:f3:c5:78:48:c4:83:72:60:d8:57:86:8d: 3a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5D:BE:43:D0:45:7F:50:FA:7C:64:D1:69:CA:0C:1B:B9:95:45:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:df:40:5b:d3:57:d6:4c:31:fe:1c:1e:f9:f5:99:fa:68:ba: 8f:09:b2:92:f4:33:51:72:81:59:1f:bc:bb:c0:81:e0:98:0e: c1:98:9b:6d:72:b4:58:c2:89:81:fd:73:45:3a:d8:f5:20:13: 29:03:04:be:54:a0:5e:e7:73:a4:cd:19:38:42:9d:11:36:39: 7c:f7:05:3c:bf:e4:d6:bf:76:ba:08:7c:62:27:f3:37:59:57: fb:01:5d:8c:53:72:8c:b5:dc:3f:75:34:77:7b:f4:12:b4:af: 11:81:da:a5:9b:47:68:1a:2f:80:2c:cb:c9:c5:be:02:c5:77: 11:9c:62:b3:23:7b:18:0a:99:6e:75:04:bf:1a:89:9a:89:27: 95:87:05:9f:a6:12:33:22:44:fe:c1:74:ef:24:df:1b:2a:d9: bc:df:0a:cb:8b:f2:2a:b9:ed:ea:7e:25:d6:51:ff:2a:f3:e2: d8:bb:19:dc:d7:63:9b:e7:8a:26:e1:4e:f9:13:18:31:2c:f7: a1:68:7e:40:36:c9:ab:0a:61:dd:4c:2a:55:19:d0:23:7e:c3: ba:03:6b:65:1d:fc:bf:0e:5b:c1:67:be:de:a9:6d:03:fb:e3: 7f:2c:ce:d2:cb:55:33:c1:1b:09:2b:0a:42:5e:de:d1:c2:b4: 46:d0:da:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnorAspsfpsr3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZmJjOGY3MGUtMzNmYi00ZWIzLTk4MDAtZjc5ZWM1ODY3MDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9JDPjG8BPQicM4liMyelgOI9uadZukBbeDK B4iLnTjqg3erqw8nS/BxWkKimgG9GvhaJ544t46CePMMHapiyDnt+uLA5IA5UsQ9 1OVXF8GbAavVN5ugfpFvuiB1ApXv9/94vAae7sRVcO27uBA5sElgxPNq56bSTVe1 Yfg+V64DIdxtsgfw/cHIQaB4WRqGsCz6XYmtrEabo9HritDLmvyCi/eaV9R3Ry5o 9MhDtvsZLLv7widagDLWNyQwGoqSFyEUakgQHmegYv6uN1+AyUQeLLXgDZMGP9ck ClUo1jSoWLXTevEPeFkF5F+SWcxNSu/zxXhIxINyYNhXho062QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAldvkPQRX9Q+nxk0WnKDBu5lUXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYWY4MTUwM2YtOTRkNy0z YzRhLTgyZDMtNDc3ZDYwMGQ3OWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7fQFvTV9ZMMf4cHvn1mfpouo8JspL0M1FygVkfvLvAgeCYDsGYm21y tFjCiYH9c0U62PUgEykDBL5UoF7nc6TNGThCnRE2OXz3BTy/5Na/droIfGIn8zdZ V/sBXYxTcoy13D91NHd79BK0rxGB2qWbR2gaL4Asy8nFvgLFdxGcYrMjexgKmW51 BL8aiZqJJ5WHBZ+mEjMiRP7BdO8k3xsq2bzfCsuL8iq57ep+JdZR/yrz4ti7GdzX Y5vniibhTvkTGDEs96FofkA2yasKYd1MKlUZ0CN+w7oDa2Ud/L8OW8Fnvt6pbQP7 438sztLLVTPBGwkrCkJe3tHCtEbQ2qk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:59:49 2025 by rpki-client