$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ba55a1e4-2d79-3695-8442-96a538b35f02.roa File: ba55a1e4-2d79-3695-8442-96a538b35f02.roa (raw, json) Hash identifier: R+g4P/mtYXQX5qVCKX+nBx7OYs0m0i0fD6Uw0jfLIbU= Subject key identifier: 71:44:16:3C:5F:1C:6A:83:7A:F8:ED:AE:AA:BF:31:A0:A8:6E:71:A6 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADA9BB916B4659DDA8DB72500 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ba55a1e4-2d79-3695-8442-96a538b35f02.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 8987 IP address blocks: 130.137.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b9:16:b4:65:9d:da:8d:b7:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=7006df32-b184-497f-852f-c10b989f74cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d9:e1:60:93:35:08:5d:39:12:9a:33:28:76: 89:1d:6e:79:d2:24:d9:c1:1e:48:71:72:0b:dc:4b: 2f:1c:61:59:1e:6a:af:e8:c2:96:87:ab:eb:cf:e7: fd:d4:64:35:a2:75:28:90:63:b4:2b:8c:31:4a:76: 8b:ae:3d:ac:37:7a:f7:59:69:eb:8f:7a:5a:0e:6f: d4:2c:d1:2d:3c:8d:4d:1c:29:d3:3c:e0:87:e4:48: fb:1c:a4:45:bf:96:31:7b:42:4d:0a:a0:49:7b:06: d8:48:f1:5a:a3:4e:8a:9b:01:02:52:d9:65:30:2b: 99:2f:16:cb:c8:de:71:17:4d:97:71:2e:03:34:41: 58:be:0e:58:18:d0:6e:a2:4b:dc:25:0e:aa:97:26: 96:6a:f0:8c:5d:4e:4f:91:6c:d5:c6:bb:5c:7f:b4: fa:a7:f1:da:5a:4a:cb:22:c8:df:a4:e1:85:43:a6: fb:58:be:96:f6:2c:5a:f8:a8:ce:90:7d:6b:f8:27: fd:c3:d9:5e:e3:d9:57:eb:b9:92:fa:b3:9b:2f:80: eb:71:d9:a9:af:c8:40:fa:cc:ec:49:ad:05:12:77: 04:6b:42:56:2b:7a:ea:87:44:c0:57:a0:43:a8:bc: 3a:db:47:93:a4:6d:b2:3a:73:ee:28:ca:9b:43:ec: a4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:44:16:3C:5F:1C:6A:83:7A:F8:ED:AE:AA:BF:31:A0:A8:6E:71:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ba55a1e4-2d79-3695-8442-96a538b35f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d4:f2:e4:29:77:a2:3a:8f:2f:e0:36:63:48:04:bf:e4:7b: 53:93:f8:6d:3f:84:ae:bf:2f:25:48:10:98:9a:c0:c4:79:ef: 8d:c2:62:98:ab:1b:04:bd:2b:f8:21:f6:ce:0c:81:f4:22:19: 69:67:7b:61:f9:1b:85:b8:b9:63:98:c4:7f:04:29:11:c1:69: 7e:c3:11:35:b4:62:41:6b:44:2c:a0:f1:07:a6:40:43:a7:2d: df:76:2b:90:c4:23:30:dc:9d:b6:97:59:81:20:4a:3a:49:59: de:2e:c3:7b:12:df:8b:63:d2:fe:a6:c9:88:12:0c:9e:0c:25: ee:0e:7e:9d:f4:a8:37:ef:64:10:e9:6b:57:33:d6:4d:3c:67: 8b:8c:ce:ee:54:90:a7:e0:94:e6:98:61:3c:cb:ef:b2:05:c5: 0d:48:78:cb:95:2e:bd:56:fa:a1:47:d1:26:f3:3a:b4:3f:b2: 23:db:97:40:e6:e3:92:ac:21:0c:d1:9f:64:49:58:2a:1d:99: d2:d5:05:be:b4:58:9d:2c:21:f6:ab:ce:b8:ca:7f:9f:66:35: 43:72:0c:a8:10:65:46:c4:a6:5d:0d:19:3b:78:b3:a4:89:ae: 3f:8e:ef:81:a4:46:8a:27:81:fe:91:ca:91:1b:e6:6d:e3:d7: f6:28:aa:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram7kWtGWd2o23JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk NzAwNmRmMzItYjE4NC00OTdmLTg1MmYtYzEwYjk4OWY3NGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtnhYJM1CF05EpozKHaJHW550iTZwR5IcXIL 3EsvHGFZHmqv6MKWh6vrz+f91GQ1onUokGO0K4wxSnaLrj2sN3r3WWnrj3paDm/U LNEtPI1NHCnTPOCH5Ej7HKRFv5Yxe0JNCqBJewbYSPFao06KmwECUtllMCuZLxbL yN5xF02XcS4DNEFYvg5YGNBuokvcJQ6qlyaWavCMXU5PkWzVxrtcf7T6p/HaWkrL IsjfpOGFQ6b7WL6W9ixa+KjOkH1r+Cf9w9le49lX67mS+rObL4Drcdmpr8hA+szs Sa0FEncEa0JWK3rqh0TAV6BDqLw620eTpG2yOnPuKMqbQ+yk+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFEFjxfHGqDevjtrqq/MaCobnGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmE1NWExZTQtMmQ3OS0z Njk1LTg0NDItOTZhNTM4YjM1ZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjU8uQpd6I6jy/gNmNIBL/ke1OT+G0/hK6/LyVIEJiawMR5743CYpir GwS9K/gh9s4MgfQiGWlne2H5G4W4uWOYxH8EKRHBaX7DETW0YkFrRCyg8QemQEOn Ld92K5DEIzDcnbaXWYEgSjpJWd4uw3sS34tj0v6myYgSDJ4MJe4Ofp30qDfvZBDp a1cz1k08Z4uMzu5UkKfglOaYYTzL77IFxQ1IeMuVLr1W+qFH0SbzOrQ/siPbl0Dm 45KsIQzRn2RJWCodmdLVBb60WJ0sIfarzrjKf59mNUNyDKgQZUbEpl0NGTt4s6SJ rj+O74GkRoongf6RypEb5m3j1/Yoqjc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:46:10 2025 by rpki-client