$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d6515976-250b-3c68-9dc0-421a34035f7d.roa File: d6515976-250b-3c68-9dc0-421a34035f7d.roa (raw, json) Hash identifier: 0iI5FdaBgZuGwSeUS+D5Zz72AojCmWwO9kaXiaMVjsc= Subject key identifier: 50:56:64:E3:61:17:C1:53:3B:AA:7A:F5:FE:11:3A:DF:ED:43:DE:DD Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADD6667682F229820D0289D80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d6515976-250b-3c68-9dc0-421a34035f7d.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 130.137.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:67:68:2f:22:98:20:d0:28:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=77871efc-5730-48dc-862c-457b17acc5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:92:d7:0d:44:bc:5e:d0:f1:8b:db:30:89: 2f:15:f7:89:8f:77:67:82:ad:ed:e7:35:49:bb:4c: bd:81:a4:52:22:f0:eb:31:ff:8b:49:97:e7:fa:bb: 24:76:23:95:16:0a:7e:6c:10:d7:56:a5:b9:76:8b: d9:84:c7:a1:5c:fc:b2:c4:72:37:27:65:4f:85:c3: 5e:ea:8f:05:fe:b4:93:37:73:fe:da:b4:4e:af:ac: 64:99:fc:0f:16:69:3b:74:8d:6a:17:58:b9:87:d6: c8:5a:e2:dc:d4:a8:f2:c1:e7:48:33:13:fd:7c:79: e2:ee:2a:a9:ca:ca:99:d7:43:d2:ff:46:21:84:6e: e3:7a:7a:74:c1:7e:96:2f:d4:7d:b6:25:e9:c5:6e: 1d:74:42:e1:de:9c:d6:34:6c:25:91:a7:6c:02:4c: eb:5b:eb:87:16:7d:69:19:ae:aa:b9:86:d0:96:9d: f3:52:d6:ea:fd:fd:d2:42:33:64:55:fa:b5:c2:49: 46:bd:88:18:bd:7b:73:12:c3:4f:02:0c:2c:14:61: 38:bc:2e:90:8e:25:a8:97:e6:cf:aa:2c:80:f3:7c: 9d:bf:29:84:88:27:8e:15:f3:46:e3:da:c3:39:c7: 40:5f:39:3f:67:47:20:28:ca:68:c6:d6:74:f3:0d: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:56:64:E3:61:17:C1:53:3B:AA:7A:F5:FE:11:3A:DF:ED:43:DE:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d6515976-250b-3c68-9dc0-421a34035f7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:81:13:99:31:1a:49:e8:df:64:c4:48:05:a7:b6:b9:88:5c: 9a:c4:01:d6:f6:14:b2:19:af:6c:a4:14:97:33:3f:0c:ec:ea: 65:2e:5e:ea:38:bf:54:4e:0b:e5:6a:4f:89:7a:46:c8:76:bb: 79:38:a4:fe:5b:ce:d3:ae:20:d7:b9:8e:04:ab:6a:0f:95:4b: 60:ef:2d:0a:a0:cf:d3:a0:cd:a2:c6:0a:48:49:17:9b:06:f6: 89:5a:1b:98:21:49:52:1d:be:ce:3b:4f:6e:98:e4:54:06:bd: b2:c1:58:5e:be:37:98:8a:7d:36:27:e6:7b:83:2e:5a:8a:5c: c0:44:c0:02:fa:82:9c:c9:f9:2b:62:b9:6f:38:45:39:1e:80: b0:0e:8e:b3:6e:b3:1b:a1:e8:c7:86:50:18:2c:f8:6e:1c:a8: 1a:bb:5b:2a:9a:3d:7f:75:7c:a5:23:04:27:ac:8a:e1:ed:f0: c6:f1:3e:ba:d3:2f:7b:61:a6:92:6f:99:7f:5a:61:d9:64:7e: 32:fb:63:81:35:a7:53:a8:f5:b2:ac:75:28:15:69:30:7c:4f: 73:31:5d:a6:68:6d:44:f9:9f:0d:c9:aa:e5:4c:5e:db:03:d9: a1:79:98:cc:af:60:99:42:93:6d:9e:9d:f2:d9:b7:a1:0a:52: ad:e6:64:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZmdoLyKYINAonYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk Nzc4NzFlZmMtNTczMC00OGRjLTg2MmMtNDU3YjE3YWNjNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhuS1w1EvF7Q8YvbMIkvFfeJj3dngq3t5zVJ u0y9gaRSIvDrMf+LSZfn+rskdiOVFgp+bBDXVqW5dovZhMehXPyyxHI3J2VPhcNe 6o8F/rSTN3P+2rROr6xkmfwPFmk7dI1qF1i5h9bIWuLc1KjywedIMxP9fHni7iqp ysqZ10PS/0YhhG7jenp0wX6WL9R9tiXpxW4ddELh3pzWNGwlkadsAkzrW+uHFn1p Ga6quYbQlp3zUtbq/f3SQjNkVfq1wklGvYgYvXtzEsNPAgwsFGE4vC6QjiWol+bP qiyA83ydvymEiCeOFfNG49rDOcdAXzk/Z0cgKMpoxtZ08w11dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBWZONhF8FTO6p69f4ROt/tQ97dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDY1MTU5NzYtMjUwYi0z YzY4LTlkYzAtNDIxYTM0MDM1ZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyBE5kxGkno32TESAWntrmIXJrEAdb2FLIZr2ykFJczPwzs6mUuXuo4 v1ROC+VqT4l6Rsh2u3k4pP5bztOuINe5jgSrag+VS2DvLQqgz9OgzaLGCkhJF5sG 9olaG5ghSVIdvs47T26Y5FQGvbLBWF6+N5iKfTYn5nuDLlqKXMBEwAL6gpzJ+Sti uW84RTkegLAOjrNusxuh6MeGUBgs+G4cqBq7WyqaPX91fKUjBCesiuHt8MbxPrrT L3thppJvmX9aYdlkfjL7Y4E1p1Oo9bKsdSgVaTB8T3MxXaZobUT5nw3JquVMXtsD 2aF5mMyvYJlCk22enfLZt6EKUq3mZNk= -----END CERTIFICATE-----Generated at Sat Aug 23 10:19:15 2025 by rpki-client