$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d90f6627-cf4f-33ec-aaf9-8c1563fa04cd.roa File: d90f6627-cf4f-33ec-aaf9-8c1563fa04cd.roa (raw, json) Hash identifier: SsPqU8Wu/IKfLmAF0Bnj8S7JTEjnG05kKlJ6XJ9shKc= Subject key identifier: 04:2D:74:3D:81:16:38:72:DD:39:89:FD:78:B1:71:C5:F6:A8:D7:3F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF0F137BED07E9EEBB1AA0D80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d90f6627-cf4f-33ec-aaf9-8c1563fa04cd.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 8987 IP address blocks: 130.137.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:37:be:d0:7e:9e:eb:b1:aa:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=05d335fe-654d-4c4c-b3e1-7e206f75f33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:86:4c:44:c5:02:22:f3:89:46:19:6c:da: b8:f1:c6:04:3d:45:d9:2d:c2:e6:17:1b:14:68:b7: b5:48:b3:ac:e6:ed:0a:f0:79:a8:7e:3c:df:1a:22: c8:ba:ea:8b:57:32:49:be:b4:86:81:c5:dc:b0:d3: 1e:58:8a:79:da:98:6f:86:30:d4:c9:ba:99:0c:fc: 64:f1:1f:36:1f:2d:ae:d9:5d:cb:06:05:f1:d4:91: 45:3f:04:1a:44:d7:d3:fb:d1:32:25:ac:24:c2:b5: 6f:c7:e9:c3:f8:ae:0e:23:be:d1:fd:09:d4:35:a2: 26:63:93:d4:2b:b6:9a:18:a6:0b:9b:5f:14:50:47: 49:39:1c:94:e5:c8:45:88:83:31:67:4b:13:4c:87: 19:3d:f6:94:6c:f0:de:0c:3b:a5:5e:a1:60:f9:7a: 81:dd:05:d1:b7:20:30:a2:a7:fc:75:8b:9f:45:46: 43:2e:ac:3a:10:01:49:90:24:06:e9:2f:a9:75:99: e5:98:45:09:e6:14:47:5c:08:3a:0f:8f:8e:41:e0: f8:98:88:1c:2f:3f:b9:d3:ea:f3:15:8a:36:b6:c2: 1c:ca:69:1d:20:a9:9a:de:67:f6:ea:da:07:e1:5c: 35:3d:d7:77:5c:13:09:90:0b:3e:c9:26:b4:0f:d8: 4c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2D:74:3D:81:16:38:72:DD:39:89:FD:78:B1:71:C5:F6:A8:D7:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d90f6627-cf4f-33ec-aaf9-8c1563fa04cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c7:7c:5e:c8:f5:10:c0:7b:45:56:67:1a:d1:36:1c:67:02: 61:9f:92:70:ac:60:79:b4:a8:7c:e6:5d:5a:83:54:66:b8:0a: 6c:4c:ce:eb:47:3e:65:13:83:17:a7:12:ad:fd:3e:68:c1:9a: ac:26:e6:01:7f:8c:32:5c:2c:c2:29:82:6e:98:79:fd:66:70: d3:c1:e9:d7:42:b7:84:de:d1:e4:2e:7a:2f:26:b2:4e:dc:07: c0:84:5c:92:86:4e:3e:3b:fa:3a:ba:bf:fd:ea:f2:98:51:52: e0:73:13:4c:14:47:4f:63:69:26:11:e8:ee:cb:ea:07:0c:35: 63:65:fe:28:63:03:a3:4e:e4:6a:71:11:d2:da:5a:b0:ee:21: 84:f6:af:80:b8:21:22:d0:54:db:e9:08:ff:ba:5a:d4:d9:d4: 93:98:cd:d2:15:a2:44:04:35:8c:1f:8c:88:ab:b3:8b:26:0e: a4:78:c4:84:68:49:09:d1:96:81:41:a6:2e:89:5e:c5:b3:65: 54:72:b8:82:6a:97:28:f7:bd:e1:1e:61:d3:5b:a3:54:19:cb: 4e:de:62:1e:a4:8e:5e:c1:83:50:ce:5c:c7:b1:61:e9:05:2c: 7a:76:d3:3d:05:bf:a9:70:cc:3b:b2:82:f2:a2:45:49:21:df: 00:a2:72:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8Te+0H6e67GqDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MDVkMzM1ZmUtNjU0ZC00YzRjLWIzZTEtN2UyMDZmNzVmMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYCGTETFAiLziUYZbNq48cYEPUXZLcLmFxsU aLe1SLOs5u0K8HmofjzfGiLIuuqLVzJJvrSGgcXcsNMeWIp52phvhjDUybqZDPxk 8R82Hy2u2V3LBgXx1JFFPwQaRNfT+9EyJawkwrVvx+nD+K4OI77R/QnUNaImY5PU K7aaGKYLm18UUEdJORyU5chFiIMxZ0sTTIcZPfaUbPDeDDulXqFg+XqB3QXRtyAw oqf8dYufRUZDLqw6EAFJkCQG6S+pdZnlmEUJ5hRHXAg6D4+OQeD4mIgcLz+50+rz FYo2tsIcymkdIKma3mf26toH4Vw1Pdd3XBMJkAs+ySa0D9hM+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQtdD2BFjhy3TmJ/XixccX2qNc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDkwZjY2MjctY2Y0Zi0z M2VjLWFhZjktOGMxNTYzZmEwNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgoncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDHfF7I9RDAe0VWZxrRNhxnAmGfknCsYHm0qHzmXVqDVGa4CmxMzutH PmUTgxenEq39PmjBmqwm5gF/jDJcLMIpgm6Yef1mcNPB6ddCt4Te0eQuei8msk7c B8CEXJKGTj47+jq6v/3q8phRUuBzE0wUR09jaSYR6O7L6gcMNWNl/ihjA6NO5Gpx EdLaWrDuIYT2r4C4ISLQVNvpCP+6WtTZ1JOYzdIVokQENYwfjIirs4smDqR4xIRo SQnRloFBpi6JXsWzZVRyuIJqlyj3veEeYdNbo1QZy07eYh6kjl7Bg1DOXMexYekF LHp20z0Fv6lwzDuygvKiRUkh3wCicrg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:54:14 2025 by rpki-client