$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbf4e6a9-7140-3d40-9399-e744892289fa.roa File: bbf4e6a9-7140-3d40-9399-e744892289fa.roa (raw, json) Hash identifier: o/tuB5szsqMH8rO9qg8bfy8CAn4FytGURUYXIYR0ujQ= Subject key identifier: 3B:F4:74:D8:D5:B4:08:AB:82:8E:94:44:B3:3F:E0:2C:53:C3:05:29 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF25674018489829BF5553180 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbf4e6a9-7140-3d40-9399-e744892289fa.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:74:01:84:89:82:9b:f5:55:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=d6c5be86-8383-4f31-bb2d-7fe94d62e656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:f1:cd:a6:4a:e6:3b:c1:18:72:fb:f3:38: 7a:94:a9:c5:68:ae:a8:8e:48:ce:d6:14:81:f5:43: d4:dc:4c:e9:0f:00:dc:42:b1:9d:82:46:dc:ff:e8: 64:7f:d8:02:ca:7f:d5:65:e2:fb:b4:09:f3:e3:0c: 31:87:41:92:48:01:61:1a:bc:29:a9:fc:ee:81:54: 61:2e:37:ce:e0:cc:0d:6c:9f:75:f4:b3:88:d1:5a: 1d:f8:0e:8d:c7:1d:0c:1f:e5:0f:e9:d1:73:1b:30: ec:33:06:51:0c:c1:14:e7:24:2f:47:32:90:99:70: bc:d4:f8:19:79:90:e3:35:60:e5:bd:64:88:28:69: 49:53:78:c4:a6:12:c8:a4:ed:44:61:da:3f:15:f1: 5f:48:57:8f:5c:84:fb:45:ed:d8:00:17:0f:eb:e0: 07:12:d0:ca:af:c0:30:b5:ef:2a:f4:32:13:08:3a: ac:94:a7:77:a6:5b:b8:06:ec:c7:c1:f4:59:1e:24: 05:2b:ce:64:bd:88:07:0f:45:c8:4a:9f:9c:c1:ff: cb:28:40:86:7c:2f:80:1e:73:e9:9a:6b:c3:c4:39: a6:68:d8:25:af:cb:cb:6a:c2:2b:a1:d1:4f:56:01: b9:aa:60:a8:2f:b4:6c:f8:2e:3d:79:c1:3e:a2:b9: 5c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F4:74:D8:D5:B4:08:AB:82:8E:94:44:B3:3F:E0:2C:53:C3:05:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbf4e6a9-7140-3d40-9399-e744892289fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f6:67:5e:06:76:1a:c4:3e:7c:3e:39:2f:ac:f7:91:a2:df: 16:68:95:05:26:0f:d0:e8:0f:41:93:f6:78:28:83:a6:b0:69: af:72:69:d9:8c:06:53:0e:e8:4c:bf:f0:54:94:94:d1:f9:d2: 22:5c:5b:7a:14:ac:38:1c:6a:ee:13:a2:b9:14:11:96:f7:d2: 47:e0:ce:5e:2f:20:e4:c6:5f:a0:6c:a2:9e:40:63:65:79:c3: 19:23:4e:26:be:52:4b:4b:a4:9b:25:81:d6:f3:23:0e:d3:da: 70:61:e5:71:db:ad:6e:eb:55:88:70:f6:c1:7f:db:d9:3f:1e: 64:75:5c:f5:e1:37:9c:e7:45:89:3a:c0:b9:a6:a7:3b:d1:37: 4e:d8:59:26:d0:a0:63:08:e7:99:e3:7d:4b:9b:05:55:62:5b: a3:f2:a4:ec:fd:f0:9e:43:ea:f1:0d:f3:d2:0d:da:e6:af:b5: bc:ec:3f:99:d6:7d:56:b4:45:4d:e9:55:02:7f:e2:40:5d:08: c4:7e:c2:16:90:d2:6c:86:04:c7:f5:aa:e0:60:65:cf:e8:a4: 05:80:58:c1:fb:10:8e:fd:96:0b:5d:d0:74:06:78:46:9b:f1: 9a:45:5b:be:b2:70:30:3e:94:57:95:40:08:80:e5:d3:2a:5b: 41:38:53:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnQBhImCm/VVMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZDZjNWJlODYtODM4My00ZjMxLWJiMmQtN2ZlOTRkNjJlNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXvxzaZK5jvBGHL78zh6lKnFaK6ojkjO1hSB 9UPU3EzpDwDcQrGdgkbc/+hkf9gCyn/VZeL7tAnz4wwxh0GSSAFhGrwpqfzugVRh LjfO4MwNbJ919LOI0Vod+A6Nxx0MH+UP6dFzGzDsMwZRDMEU5yQvRzKQmXC81PgZ eZDjNWDlvWSIKGlJU3jEphLIpO1EYdo/FfFfSFePXIT7Re3YABcP6+AHEtDKr8Aw te8q9DITCDqslKd3plu4BuzHwfRZHiQFK85kvYgHD0XISp+cwf/LKECGfC+AHnPp mmvDxDmmaNglr8vLasIrodFPVgG5qmCoL7Rs+C49ecE+orlcnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDv0dNjVtAirgo6URLM/4CxTwwUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmJmNGU2YTktNzE0MC0z ZDQwLTkzOTktZTc0NDg5MjI4OWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHn2Z14GdhrEPnw+OS+s95Gi3xZolQUmD9DoD0GT9ngog6awaa9yadmM BlMO6Ey/8FSUlNH50iJcW3oUrDgcau4TorkUEZb30kfgzl4vIOTGX6Bsop5AY2V5 wxkjTia+UktLpJslgdbzIw7T2nBh5XHbrW7rVYhw9sF/29k/HmR1XPXhN5znRYk6 wLmmpzvRN07YWSbQoGMI55njfUubBVViW6PypOz98J5D6vEN89IN2uavtbzsP5nW fVa0RU3pVQJ/4kBdCMR+whaQ0myGBMf1quBgZc/opAWAWMH7EI79lgtd0HQGeEab 8ZpFW76ycDA+lFeVQAiA5dMqW0E4U3c= -----END CERTIFICATE-----Generated at Sat Aug 23 22:01:15 2025 by rpki-client