$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c1f3499b-7c5f-3200-972d-06eda5b53e06.roa File: c1f3499b-7c5f-3200-972d-06eda5b53e06.roa (raw, json) Hash identifier: 2GLmqgvJvIeJ6PZ/J1YLoQ0EOcLc7bED+rDGKvv5fc8= Subject key identifier: 40:1B:65:5B:0A:C6:50:7E:19:D5:22:1C:0B:29:5F:0D:EF:01:A6:7F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF256746A1D61852A85DB3080 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c1f3499b-7c5f-3200-972d-06eda5b53e06.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:74:6a:1d:61:85:2a:85:db:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=71f506f8-70d4-4ad9-9664-9b3a6b9ff756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b9:1a:5e:0a:3d:1b:11:82:c8:7e:5b:03:5b: 2e:9a:6a:70:9a:28:9f:ab:08:c0:98:43:4e:5c:34: f2:45:96:b5:63:38:54:84:ab:10:56:25:ab:ad:ef: db:93:e1:46:b1:b7:2e:8e:74:91:4a:07:51:a1:32: 9f:17:8c:a3:93:12:59:d6:d4:14:1f:ff:41:3c:d9: 48:eb:7f:31:fb:cd:72:a1:6b:7a:97:2b:d8:c4:c8: 16:1d:0f:a1:e6:8f:3e:d5:24:c6:85:7e:92:91:2c: e1:b5:2d:c6:47:4c:2a:ef:c4:71:3a:e9:42:a0:fa: 2c:5a:d8:9e:0c:66:20:79:76:60:03:94:ba:3a:a1: 2f:55:ad:88:9e:0f:a1:61:47:74:10:55:f7:10:20: 4f:6e:65:43:4a:ec:1a:29:73:27:2f:27:5d:ce:ae: d5:5f:9e:7c:bc:47:94:a0:2f:a5:94:4c:0c:02:57: 19:dc:8a:ec:96:26:ca:2f:6b:5e:27:1b:cd:6a:f2: 2f:30:82:1f:ef:d6:23:b3:b9:4a:0c:eb:c0:79:e9: df:a5:90:dc:01:79:b1:71:0c:57:33:c8:cb:0f:11: e1:02:4a:2d:de:ea:f5:6f:9e:95:69:18:a9:58:47: ef:59:8f:89:a9:be:3c:2c:1f:88:4b:fb:7f:f5:5c: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1B:65:5B:0A:C6:50:7E:19:D5:22:1C:0B:29:5F:0D:EF:01:A6:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c1f3499b-7c5f-3200-972d-06eda5b53e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:5a:dd:0b:8b:7e:f1:41:5f:38:43:60:62:ce:42:97:95:d2: 33:62:7a:1c:29:90:ae:ac:bb:52:15:79:57:bb:55:17:7b:b7: ce:c1:bc:c1:72:ea:5e:7e:4b:dd:e3:5c:7a:6a:de:48:d6:f8: 9b:3a:6d:ac:0f:54:81:10:8d:5c:35:aa:4b:81:b1:88:17:fb: 4f:04:4b:37:41:90:6f:2c:84:b9:48:00:9c:7b:f6:be:59:a3: f0:43:a6:83:d7:0e:6b:71:16:6a:67:8a:f8:50:0a:95:23:cc: 55:91:e8:b1:dc:78:19:7e:88:fa:63:c8:44:30:b8:17:85:ba: 54:4e:7b:95:31:b5:f4:16:82:b2:50:92:e2:5d:4e:1d:3c:6c: a5:53:9b:00:ec:51:45:f8:16:c3:b4:96:ff:a8:7f:d3:fb:34: d5:41:c5:0e:b1:58:6a:4c:e4:58:31:0d:9e:d9:31:06:3f:46: fd:66:bb:ea:52:0b:fb:5c:37:68:14:2d:12:0e:2a:0f:74:ee: 43:09:53:ab:77:fe:b3:a7:2c:f9:a9:75:0a:0e:dd:d7:82:ab: a2:d8:5a:22:90:91:b4:9f:9d:23:30:71:41:fa:c8:43:cd:e4: 8e:74:5a:21:8e:23:bd:c0:bc:07:0b:51:f6:18:7f:cd:32:d5: 71:ed:49:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnRqHWGFKoXbMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NzFmNTA2ZjgtNzBkNC00YWQ5LTk2NjQtOWIzYTZiOWZmNzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7kaXgo9GxGCyH5bA1summpwmiifqwjAmENO XDTyRZa1YzhUhKsQViWrre/bk+FGsbcujnSRSgdRoTKfF4yjkxJZ1tQUH/9BPNlI 638x+81yoWt6lyvYxMgWHQ+h5o8+1STGhX6SkSzhtS3GR0wq78RxOulCoPosWtie DGYgeXZgA5S6OqEvVa2Ing+hYUd0EFX3ECBPbmVDSuwaKXMnLyddzq7VX558vEeU oC+llEwMAlcZ3IrslibKL2teJxvNavIvMIIf79Yjs7lKDOvAeenfpZDcAXmxcQxX M8jLDxHhAkot3ur1b56VaRipWEfvWY+Jqb48LB+IS/t/9Vzp4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAbZVsKxlB+GdUiHAspXw3vAaZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYzFmMzQ5OWItN2M1Zi0z MjAwLTk3MmQtMDZlZGE1YjUzZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJa3QuLfvFBXzhDYGLOQpeV0jNiehwpkK6su1IVeVe7VRd7t87BvMFy 6l5+S93jXHpq3kjW+Js6bawPVIEQjVw1qkuBsYgX+08ESzdBkG8shLlIAJx79r5Z o/BDpoPXDmtxFmpnivhQCpUjzFWR6LHceBl+iPpjyEQwuBeFulROe5UxtfQWgrJQ kuJdTh08bKVTmwDsUUX4FsO0lv+of9P7NNVBxQ6xWGpM5FgxDZ7ZMQY/Rv1mu+pS C/tcN2gULRIOKg907kMJU6t3/rOnLPmpdQoO3deCq6LYWiKQkbSfnSMwcUH6yEPN 5I50WiGOI73AvAcLUfYYf80y1XHtSTQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:43:56 2025 by rpki-client