$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8996c67-d2a0-38e3-a110-eaf29f117b40.roa File: b8996c67-d2a0-38e3-a110-eaf29f117b40.roa (raw, json) Hash identifier: BuxzkvEP8V9az18TZs5efXQQwwEEMAQNcmUG1WvI1po= Subject key identifier: 92:6B:4E:C7:C2:CC:B9:EC:87:02:C1:89:0B:96:21:01:E9:71:B1:8D Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADD6666EB7B5C1A8AFAFED740 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8996c67-d2a0-38e3-a110-eaf29f117b40.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 8987 IP address blocks: 130.137.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:66:eb:7b:5c:1a:8a:fa:fe:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=42fb4601-fff9-48b8-bf10-b1c841fd8e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a5:60:ae:ed:e0:3d:a8:3f:97:ab:34:23:49: e0:ef:2c:b6:84:8d:1e:01:cc:6b:33:5b:ee:bc:f4: 62:bd:51:1b:87:26:f3:07:69:7c:af:9c:b2:38:64: 47:25:99:0a:66:99:8c:49:28:c3:f5:64:25:00:99: 1c:d2:09:06:ca:12:43:98:b6:36:5d:57:64:be:8d: 3e:ac:68:71:73:46:45:63:2b:41:fe:82:a1:a4:a5: a0:b2:1a:c3:e2:32:b4:d2:9e:fc:89:83:21:5f:e3: 96:5e:4f:4e:5b:8a:84:3d:b9:05:5f:c0:0e:9a:d7: 5e:0c:b2:15:4f:8f:e4:ce:83:86:9f:16:b1:cb:40: 58:6b:ac:96:a3:5a:94:61:2d:eb:00:67:46:88:ca: 06:f5:ce:0d:5a:eb:4e:12:ad:12:8e:8a:93:bd:ef: cd:e6:c3:37:be:f8:cd:53:b6:a4:40:30:e0:b4:4b: 09:3d:dc:a7:2c:b7:eb:b1:e6:f8:78:3b:b8:b0:1c: cc:d1:db:6e:d8:be:fc:31:74:fd:ad:3f:00:7a:ef: c8:57:e3:ec:23:40:52:3d:1e:8d:f1:36:da:19:a8: 46:5a:00:32:2b:9a:21:96:36:1e:2d:5e:30:7c:64: 8a:48:43:85:e0:03:75:c4:03:de:dd:de:f3:da:0a: ff:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6B:4E:C7:C2:CC:B9:EC:87:02:C1:89:0B:96:21:01:E9:71:B1:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8996c67-d2a0-38e3-a110-eaf29f117b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:06:25:83:25:53:31:a0:ac:b9:c3:6f:d8:e4:8b:fe:fe:ca: b5:e3:be:71:f5:df:c5:0f:b6:12:57:77:7e:28:08:25:6e:c2: 9a:e8:4a:71:bc:8c:90:06:74:b6:46:c1:c0:ae:f1:ad:a4:98: 30:bc:23:70:5e:3a:8f:12:31:fe:7b:e4:66:37:25:5d:a0:d6: ef:b7:b0:de:cb:40:54:10:c9:75:63:29:da:58:ca:07:5d:4e: bc:08:af:24:af:6d:c6:8e:73:55:b5:93:7d:ed:89:3f:c4:9e: 9f:02:d2:3f:39:8f:27:ec:bf:5d:f8:60:f4:27:5a:9a:f0:f6: 7b:63:91:f4:2d:d5:fb:0c:50:1d:63:a5:b5:3e:60:b7:30:6c: 0c:5d:2f:bc:54:d8:0c:31:92:57:78:c9:bd:b9:9b:fd:7d:6f: 43:64:cb:c2:90:c3:35:8b:dc:e1:99:58:58:2b:90:dc:37:05: e2:20:b2:28:9d:ff:9f:06:b6:da:13:f7:f6:fb:d2:ac:0f:e8: 9c:01:15:1d:d8:c4:48:a2:21:06:cc:48:bf:bf:0b:d3:b0:0c: 83:49:ed:e1:3f:97:41:3b:70:6c:25:74:62:b7:21:d4:ac:89: 87:d1:21:36:45:44:ea:c0:d4:ba:f1:26:fe:37:15:c1:b3:c2: d4:23:95:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZmbre1waivr+10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NDJmYjQ2MDEtZmZmOS00OGI4LWJmMTAtYjFjODQxZmQ4ZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqVgru3gPag/l6s0I0ng7yy2hI0eAcxrM1vu vPRivVEbhybzB2l8r5yyOGRHJZkKZpmMSSjD9WQlAJkc0gkGyhJDmLY2XVdkvo0+ rGhxc0ZFYytB/oKhpKWgshrD4jK00p78iYMhX+OWXk9OW4qEPbkFX8AOmtdeDLIV T4/kzoOGnxaxy0BYa6yWo1qUYS3rAGdGiMoG9c4NWutOEq0SjoqTve/N5sM3vvjN U7akQDDgtEsJPdynLLfrseb4eDu4sBzM0dtu2L78MXT9rT8Aeu/IV+PsI0BSPR6N 8TbaGahGWgAyK5ohljYeLV4wfGSKSEOF4AN1xAPe3d7z2gr/uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJrTsfCzLnshwLBiQuWIQHpcbGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjg5OTZjNjctZDJhMC0z OGUzLWExMTAtZWFmMjlmMTE3YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoGJYMlUzGgrLnDb9jki/7+yrXjvnH138UPthJXd34oCCVuwproSnG8 jJAGdLZGwcCu8a2kmDC8I3BeOo8SMf575GY3JV2g1u+3sN7LQFQQyXVjKdpYygdd TrwIrySvbcaOc1W1k33tiT/Enp8C0j85jyfsv134YPQnWprw9ntjkfQt1fsMUB1j pbU+YLcwbAxdL7xU2Awxkld4yb25m/19b0Nky8KQwzWL3OGZWFgrkNw3BeIgsiid /58GttoT9/b70qwP6JwBFR3YxEiiIQbMSL+/C9OwDINJ7eE/l0E7cGwldGK3IdSs iYfRITZFROrA1LrxJv43FcGzwtQjlRo= -----END CERTIFICATE-----Generated at Sat Aug 23 12:54:16 2025 by rpki-client