$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d09b6dad-b859-38c2-861b-a3fd321ebe48.roa File: d09b6dad-b859-38c2-861b-a3fd321ebe48.roa (raw, json) Hash identifier: mBI1MxNmK8Epo5Qfzx6Z6Dh6Q7xhqaWqgnpDOyaCUaM= Subject key identifier: 7C:CF:E8:9E:E7:73:67:3A:1E:35:49:82:E7:20:C3:A8:09:30:E4:A4 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADD666ED29E222108F8204F80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d09b6dad-b859-38c2-861b-a3fd321ebe48.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 8987 IP address blocks: 130.137.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:6e:d2:9e:22:21:08:f8:20:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=4ddc2f58-b4b4-4fea-8676-6f479626c33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:06:2f:b3:38:f3:38:11:27:9b:c4:34:09: f4:d5:13:ec:57:fa:af:cf:10:00:64:56:2a:0d:81: ad:52:8d:e9:6c:df:03:21:06:93:03:6c:5a:ba:6c: 07:e1:37:8a:7b:32:0a:b2:11:c5:b9:a6:7e:71:b0: 63:70:a3:6b:a1:a2:98:3e:9d:29:e5:4c:43:50:fb: ed:4a:73:d7:e3:1e:0d:c2:fb:f9:83:4d:7c:8d:d9: 55:c4:25:b7:eb:8a:b8:f0:c2:7e:ba:bb:98:22:4f: 5d:e2:52:47:ed:f8:9a:64:81:e0:91:8a:b4:cf:eb: 07:3e:77:14:26:4b:6c:cb:f0:87:83:24:f1:48:40: b6:24:1b:b0:4a:6c:67:42:6b:09:24:e2:96:e9:8a: 9e:e5:13:11:56:f6:3d:b5:76:1f:9c:28:63:29:81: 9f:7f:91:aa:ac:c4:86:1a:95:ff:58:77:75:ca:d8: 1d:e7:79:46:a8:ed:f5:09:58:93:db:c9:7f:6f:d2: 29:e9:c0:8d:a0:fa:7a:78:c3:0a:0d:26:af:ff:65: 58:ef:37:a5:fb:0a:c5:6e:9a:b9:ab:f1:f2:64:12: 1d:ad:d8:69:1c:d9:13:5f:d9:90:51:de:10:07:fa: 54:52:f9:f7:6c:15:e9:97:8c:2a:5c:4f:be:6e:fe: e7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CF:E8:9E:E7:73:67:3A:1E:35:49:82:E7:20:C3:A8:09:30:E4:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d09b6dad-b859-38c2-861b-a3fd321ebe48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:10:9c:92:87:03:e7:d3:99:22:2c:20:fd:d2:96:95:73:3f: f9:b9:b6:69:58:56:e0:b2:04:e5:25:1f:a2:d9:a8:70:4b:07: 22:b6:f5:8a:af:1d:fa:4e:72:50:25:4d:c7:01:83:ad:5e:fb: ff:92:3b:e1:c8:75:1f:55:12:30:c4:3a:1a:5c:c1:cd:e0:94: 9b:99:df:65:b3:9a:93:b0:d9:5f:0a:24:54:37:b1:9a:0a:7c: 97:13:d4:db:79:3c:a0:6d:36:5e:fc:4c:2e:3e:12:cd:8e:00: ca:3d:11:f8:7c:ec:01:10:f4:50:a1:9a:77:dc:d8:98:7d:06: 49:ed:19:14:00:6a:0f:6d:f9:9c:c1:5d:b8:a0:3e:8c:10:80: 25:2a:e1:d0:69:88:95:1b:9e:02:52:c1:9a:88:e4:8d:04:77: 56:fb:31:f2:05:d3:3f:dc:e9:01:0b:1a:5b:7c:76:bf:25:1b: b9:9b:46:84:a0:09:12:67:fb:03:41:05:34:90:24:b6:40:2b: 3e:4b:45:d0:d9:6c:e6:ae:1f:10:01:ae:b2:42:ea:58:3b:e4: 28:00:a6:ad:e4:8c:fe:bf:81:46:a9:4d:dc:45:0b:46:6e:fc: ad:28:68:36:b0:fd:3f:73:b0:a0:c2:be:4a:52:be:77:82:c6: 28:de:db:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZm7SniIhCPggT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NGRkYzJmNTgtYjRiNC00ZmVhLTg2NzYtNmY0Nzk2MjZjMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpYGL7M48zgRJ5vENAn01RPsV/qvzxAAZFYq DYGtUo3pbN8DIQaTA2xaumwH4TeKezIKshHFuaZ+cbBjcKNroaKYPp0p5UxDUPvt SnPX4x4Nwvv5g018jdlVxCW364q48MJ+uruYIk9d4lJH7fiaZIHgkYq0z+sHPncU Jktsy/CHgyTxSEC2JBuwSmxnQmsJJOKW6Yqe5RMRVvY9tXYfnChjKYGff5GqrMSG GpX/WHd1ytgd53lGqO31CViT28l/b9Ip6cCNoPp6eMMKDSav/2VY7zel+wrFbpq5 q/HyZBIdrdhpHNkTX9mQUd4QB/pUUvn3bBXpl4wqXE++bv7n7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzP6J7nc2c6HjVJgucgw6gJMOSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDA5YjZkYWQtYjg1OS0z OGMyLTg2MWItYTNmZDMyMWViZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAQnJKHA+fTmSIsIP3SlpVzP/m5tmlYVuCyBOUlH6LZqHBLByK29Yqv HfpOclAlTccBg61e+/+SO+HIdR9VEjDEOhpcwc3glJuZ32WzmpOw2V8KJFQ3sZoK fJcT1Nt5PKBtNl78TC4+Es2OAMo9Efh87AEQ9FChmnfc2Jh9BkntGRQAag9t+ZzB XbigPowQgCUq4dBpiJUbngJSwZqI5I0Ed1b7MfIF0z/c6QELGlt8dr8lG7mbRoSg CRJn+wNBBTSQJLZAKz5LRdDZbOauHxABrrJC6lg75CgApq3kjP6/gUapTdxFC0Zu /K0oaDaw/T9zsKDCvkpSvneCxije2/A= -----END CERTIFICATE-----Generated at Sat Aug 23 12:55:43 2025 by rpki-client