$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd219da1-ffde-3c40-8fb7-477c26a848a5.roa File: cd219da1-ffde-3c40-8fb7-477c26a848a5.roa (raw, json) Hash identifier: DAK2Zt1CQgto+LbthLP6MmJZAPkZpPnJDgI4oeHKFCs= Subject key identifier: 6F:26:6C:1B:F0:35:67:B7:07:D9:B8:75:CC:99:EE:76:55:90:3D:EC Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AD23BAE5397CFF1A439D2D980 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd219da1-ffde-3c40-8fb7-477c26a848a5.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 130.137.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ae:53:97:cf:f1:a4:39:d2:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=37dcd08b-a847-43bb-8ec1-df34f8c5206c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4e:6b:50:1b:4f:ef:40:8a:c2:f4:19:5d:c7: c6:6f:80:7a:99:91:87:b0:1f:1e:10:1e:b0:7a:7c: 9f:66:a3:36:60:8b:74:ff:b0:b8:a5:ee:90:0b:52: be:85:fa:d9:c7:01:c5:df:f0:8d:ce:60:60:87:8a: 8e:9e:ae:65:84:f2:11:17:f9:51:2a:57:00:96:41: c1:f6:9a:5d:03:2a:f3:60:28:a3:72:13:42:b5:c7: 4c:52:ea:69:4e:9d:40:bd:82:f8:41:c7:9d:af:81: c9:a4:7f:0c:64:5f:e9:15:89:ed:fa:4b:e2:2d:ec: 46:a2:f0:ff:98:50:07:0d:dd:2e:c1:c9:30:32:75: 45:71:06:db:c7:0d:11:c6:fe:b9:aa:f5:ed:32:9a: 3e:47:d5:6e:bb:fe:86:d6:c3:79:0b:79:1a:99:16: 76:a6:ed:e3:4b:76:68:d2:bf:cc:73:89:bd:7d:9b: 73:9f:56:e6:1c:0b:b8:77:41:a1:6c:b2:30:59:18: 57:f9:ee:a0:2c:92:5e:44:71:41:b4:46:63:ef:e0: b5:29:34:62:61:d5:0b:57:a3:74:59:70:b5:d7:27: 45:35:47:58:32:4c:fd:14:ca:18:83:f5:a0:af:80: eb:2e:72:95:20:34:f0:02:a3:28:14:6e:74:7f:82: d5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:26:6C:1B:F0:35:67:B7:07:D9:B8:75:CC:99:EE:76:55:90:3D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd219da1-ffde-3c40-8fb7-477c26a848a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:73:48:bd:b4:bc:e1:f6:81:e1:77:11:94:ec:cb:59:b7:11: 69:0a:8d:d2:6c:8a:47:8c:06:06:08:0a:c8:9a:eb:52:ec:8d: 3e:15:83:79:a4:70:66:0d:ac:b4:55:a3:5f:8b:39:68:f5:6c: a0:84:f8:3a:9a:38:c4:0e:6f:ea:37:bc:76:b3:20:84:9f:a6: ac:f9:b7:42:cf:8d:5d:6b:73:50:a1:0c:eb:55:cc:dd:be:6a: 53:9b:30:f6:f0:5a:38:cd:76:43:b7:32:16:35:80:2d:13:38: 25:4b:b1:ad:09:aa:ff:08:78:47:37:a9:6a:45:1a:3c:08:6b: 8d:d3:00:f5:94:d4:6a:76:f7:7f:8b:33:80:91:64:86:c5:e5: 75:53:54:8c:65:8c:4e:01:78:35:c6:29:25:cb:e6:71:e9:42: 71:93:8a:bf:ed:3f:d6:99:a0:6f:d7:66:97:43:10:f6:e8:04: fc:40:d8:4d:93:52:03:c9:56:69:31:78:75:82:8b:b5:6e:6d: f4:96:e5:18:39:c6:7c:60:cd:29:2a:61:88:a4:c0:26:66:51: 02:f8:ac:34:52:26:ef:4e:e0:39:88:61:56:71:62:f9:5a:b7: 99:17:0a:35:67:1a:08:61:ae:82:a9:87:7c:4c:35:2d:5f:9a: 3c:12:d7:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO65Tl8/xpDnS2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MzdkY2QwOGItYTg0Ny00M2JiLThlYzEtZGYzNGY4YzUyMDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk5rUBtP70CKwvQZXcfGb4B6mZGHsB8eEB6w enyfZqM2YIt0/7C4pe6QC1K+hfrZxwHF3/CNzmBgh4qOnq5lhPIRF/lRKlcAlkHB 9ppdAyrzYCijchNCtcdMUuppTp1AvYL4Qcedr4HJpH8MZF/pFYnt+kviLexGovD/ mFAHDd0uwckwMnVFcQbbxw0Rxv65qvXtMpo+R9Vuu/6G1sN5C3kamRZ2pu3jS3Zo 0r/Mc4m9fZtzn1bmHAu4d0GhbLIwWRhX+e6gLJJeRHFBtEZj7+C1KTRiYdULV6N0 WXC11ydFNUdYMkz9FMoYg/Wgr4DrLnKVIDTwAqMoFG50f4LVPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8mbBvwNWe3B9m4dcyZ7nZVkD3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2QyMTlkYTEtZmZkZS0z YzQwLThmYjctNDc3YzI2YTg0OGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABzSL20vOH2geF3EZTsy1m3EWkKjdJsikeMBgYICsia61LsjT4Vg3mk cGYNrLRVo1+LOWj1bKCE+DqaOMQOb+o3vHazIISfpqz5t0LPjV1rc1ChDOtVzN2+ alObMPbwWjjNdkO3MhY1gC0TOCVLsa0Jqv8IeEc3qWpFGjwIa43TAPWU1Gp293+L M4CRZIbF5XVTVIxljE4BeDXGKSXL5nHpQnGTir/tP9aZoG/XZpdDEPboBPxA2E2T UgPJVmkxeHWCi7VubfSW5Rg5xnxgzSkqYYikwCZmUQL4rDRSJu9O4DmIYVZxYvla t5kXCjVnGghhroKph3xMNS1fmjwS19Y= -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:03 2025 by rpki-client