$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa File: cd5a3695-dc79-32b2-b279-0651d13c045f.roa (raw, json) Hash identifier: 7cKnmnYOr01Wn48TUYOw8MgKG2h4F/B90uVaiPgfkaY= Subject key identifier: 93:85:AF:83:06:2E:25:C8:6D:FA:A1:BB:A8:50:A7:2F:20:E1:E8:59 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AD7D10C13B289496E4FEC2B80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 130.137.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:0c:13:b2:89:49:6e:4f:ec:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=123f246a-b2f2-4615-acb1-093471ba3267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:69:63:2b:8a:ad:3d:98:c0:93:ec:af:ec:69: a9:be:89:a8:4e:09:b6:61:f5:39:6f:6b:a3:39:31: 92:ef:67:39:11:12:7c:25:d4:b5:88:5d:35:ec:07: a9:d9:a1:40:d9:e3:24:e5:82:5f:7d:e6:b0:9b:21: ce:f2:23:d5:91:dd:99:3d:98:16:8f:98:f2:f6:6e: ee:26:0f:5d:69:bd:97:57:22:b4:a9:21:3a:6e:46: 79:b4:1e:23:57:af:de:0e:ac:d8:35:2d:26:cc:b4: 6b:e9:95:18:b2:b7:1b:2e:a5:fc:3c:81:41:2c:31: 0f:44:a9:58:df:75:a5:b5:2d:dd:68:3d:a9:79:68: 66:8e:c9:7b:64:20:1f:95:c4:17:67:64:10:f8:5a: d6:40:69:26:65:d6:7f:c4:6a:38:01:ed:1c:91:a3: 29:e9:42:0d:77:2b:9e:b9:c9:da:12:76:17:f3:65: e9:3c:37:de:21:20:d4:93:97:53:62:87:a2:04:4a: 1b:77:55:b9:9b:f5:07:70:e6:7c:30:c2:5e:7f:e6: a8:6c:52:45:ac:3b:59:f5:8b:41:dd:f5:cb:02:92: a1:3c:fc:a1:ef:ce:cb:77:c9:2e:5f:57:bc:06:4a: a7:fa:b6:97:94:9d:47:48:ca:35:9f:98:83:f8:b5: 57:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:85:AF:83:06:2E:25:C8:6D:FA:A1:BB:A8:50:A7:2F:20:E1:E8:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:89:a2:12:e0:91:e0:93:48:98:45:fd:cb:10:74:0f:84:8f: ee:4b:8f:83:14:ab:e7:79:cd:c6:39:69:56:6d:f1:fa:c1:54: 80:55:35:7e:16:ac:27:ac:10:70:be:84:3e:e1:dd:97:3c:aa: 0d:d4:d9:cf:a5:08:d6:a6:5f:76:2a:85:9e:3c:46:cb:93:22: 4d:5c:36:e5:35:0c:33:08:3c:90:21:af:05:22:fe:90:de:8a: a9:26:61:69:1e:66:3c:06:e0:f8:eb:99:42:b7:e3:35:2e:24: 1d:43:f3:cb:c4:4f:7a:1c:1e:b5:bb:5f:da:b7:ad:65:04:37: 08:e7:90:c7:1f:0e:be:66:02:b6:76:55:0b:4d:41:97:87:40: 1b:f5:56:e1:57:fa:01:ae:53:2c:d0:76:67:3d:36:ee:bc:68: f3:1c:cc:40:c3:a5:c1:03:1a:d5:66:24:b1:8d:11:cc:a2:29: 93:81:63:db:1b:79:1b:cd:0e:56:51:38:ee:0b:2b:be:13:de: f5:f2:b3:0a:5f:15:a0:a7:f6:61:47:71:f6:57:78:2a:cd:3f: df:7d:0f:71:99:02:19:77:82:b9:32:c1:d4:8c:f1:e4:a2:ee: 23:96:6c:d5:fa:57:82:b1:fc:ab:cf:b4:b6:c5:ac:1c:a7:84: 59:70:91:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0QwTsolJbk/sK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MTIzZjI0NmEtYjJmMi00NjE1LWFjYjEtMDkzNDcxYmEzMjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22ljK4qtPZjAk+yv7GmpvomoTgm2YfU5b2uj OTGS72c5ERJ8JdS1iF017Aep2aFA2eMk5YJffeawmyHO8iPVkd2ZPZgWj5jy9m7u Jg9dab2XVyK0qSE6bkZ5tB4jV6/eDqzYNS0mzLRr6ZUYsrcbLqX8PIFBLDEPRKlY 33WltS3daD2peWhmjsl7ZCAflcQXZ2QQ+FrWQGkmZdZ/xGo4Ae0ckaMp6UINdyue ucnaEnYX82XpPDfeISDUk5dTYoeiBEobd1W5m/UHcOZ8MMJef+aobFJFrDtZ9YtB 3fXLApKhPPyh787Ld8kuX1e8Bkqn+raXlJ1HSMo1n5iD+LVXPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOFr4MGLiXIbfqhu6hQpy8g4ehZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2Q1YTM2OTUtZGM3OS0z MmIyLWIyNzktMDY1MWQxM2MwNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWJohLgkeCTSJhF/csQdA+Ej+5Lj4MUq+d5zcY5aVZt8frBVIBVNX4W rCesEHC+hD7h3Zc8qg3U2c+lCNamX3YqhZ48RsuTIk1cNuU1DDMIPJAhrwUi/pDe iqkmYWkeZjwG4PjrmUK34zUuJB1D88vET3ocHrW7X9q3rWUENwjnkMcfDr5mArZ2 VQtNQZeHQBv1VuFX+gGuUyzQdmc9Nu68aPMczEDDpcEDGtVmJLGNEcyiKZOBY9sb eRvNDlZROO4LK74T3vXyswpfFaCn9mFHcfZXeCrNP999D3GZAhl3grkywdSM8eSi 7iOWbNX6V4Kx/KvPtLbFrBynhFlwkR4= -----END CERTIFICATE-----Generated at Sat Aug 23 08:13:18 2025 by rpki-client