$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e150e17e-36db-303d-8a83-87eb221b390b.roa File: e150e17e-36db-303d-8a83-87eb221b390b.roa (raw, json) Hash identifier: sXm+mJ/CAUaoNsPoRKXSWJOy1SiwR5coJtAkFWi8NXA= Subject key identifier: D6:22:1B:FD:71:64:65:DE:0A:F3:CB:2A:30:B2:C5:97:71:4F:6E:75 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADD66654EF3D41F73CB28A580 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e150e17e-36db-303d-8a83-87eb221b390b.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 8987 IP address blocks: 130.137.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:65:4e:f3:d4:1f:73:cb:28:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=08d06c61-7611-4770-8186-f9ceae756314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:92:ac:4a:9a:79:cf:bf:72:a1:25:79:57:2d: 6b:5a:15:c7:52:4c:dd:54:eb:a5:46:94:73:36:3a: e3:8d:b0:4d:14:8d:ce:f0:88:3c:c5:16:91:c8:83: 76:e7:3a:0a:71:93:53:5c:b5:5c:88:e1:72:17:42: 4e:52:32:78:60:d2:45:37:a4:0e:68:46:e4:89:7b: d5:a6:d6:52:ea:b1:cd:40:a1:04:3e:c1:3a:b6:57: e1:e7:a6:4e:1c:65:6b:17:dd:ab:41:00:57:10:78: 97:df:79:64:0f:70:b8:4a:76:89:38:07:15:ee:69: 29:d6:ee:e1:ce:19:04:31:c6:cc:ea:41:33:dd:96: 85:2f:0c:56:01:28:2d:ed:fa:e5:e7:a9:7a:a1:35: 21:84:3b:c3:c3:ec:02:ba:c0:b9:bc:a3:70:14:2f: 6e:bf:98:41:2a:0e:53:01:1f:4a:c6:fd:14:9e:94: da:18:ef:f1:24:f2:5d:47:2d:74:b2:4c:f1:bb:b2: 8c:8c:0a:67:7d:df:12:38:1e:85:78:85:94:14:1f: a5:dd:d9:a5:9a:24:99:45:9b:37:96:ef:3e:cf:06: 69:4c:37:ae:4b:f8:09:be:56:77:e8:37:ff:4d:63: 82:3a:ba:c7:ca:e7:01:5d:a6:2b:47:5c:fb:32:29: ec:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:22:1B:FD:71:64:65:DE:0A:F3:CB:2A:30:B2:C5:97:71:4F:6E:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e150e17e-36db-303d-8a83-87eb221b390b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:48:ea:d9:01:29:3d:ce:75:29:44:05:ef:2a:dd:46:5f:1f: e3:60:16:19:8d:aa:58:27:f8:16:78:21:da:63:28:fd:06:48: 7c:8a:ac:21:ca:75:cc:87:58:9c:9c:f0:3d:9d:78:17:41:e5: b8:e3:cf:8e:8a:79:e7:1d:4d:dd:b3:1c:41:ea:a9:fe:24:3c: ab:bf:65:0f:58:5a:da:9d:bc:04:b8:96:dc:01:73:e3:5d:da: 9f:10:4b:3b:a3:92:4a:9e:18:ca:2e:7c:a2:09:65:3a:4c:5e: 1a:4b:73:f8:a3:2b:a6:5b:d1:41:08:12:0a:1c:aa:02:8f:57: 95:1a:ee:a5:af:3a:b0:46:3a:44:46:bd:9b:f8:8f:4a:ef:8c: cf:bb:ce:fb:c5:b2:da:f6:e5:10:c3:63:c0:fd:54:9a:52:ae: 2a:bc:99:c4:55:67:57:c0:cf:c7:f7:3a:46:8f:84:80:30:70: 08:b5:e2:ba:2c:89:c7:c5:9c:c8:4d:d9:2b:13:e9:3e:01:69: 9a:2e:fe:52:dc:e8:34:89:80:98:6c:cd:01:87:54:7a:d2:45: 2c:8a:da:4f:2a:1e:a2:04:0d:a1:f6:b3:2e:5d:24:10:6c:98: ba:46:f5:a1:f4:4d:c5:87:0b:4b:72:c4:d8:2d:3d:79:54:90: 71:dd:aa:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZmVO89Qfc8sopYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MDhkMDZjNjEtNzYxMS00NzcwLTgxODYtZjljZWFlNzU2MzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5KsSpp5z79yoSV5Vy1rWhXHUkzdVOulRpRz NjrjjbBNFI3O8Ig8xRaRyIN25zoKcZNTXLVciOFyF0JOUjJ4YNJFN6QOaEbkiXvV ptZS6rHNQKEEPsE6tlfh56ZOHGVrF92rQQBXEHiX33lkD3C4SnaJOAcV7mkp1u7h zhkEMcbM6kEz3ZaFLwxWASgt7frl56l6oTUhhDvDw+wCusC5vKNwFC9uv5hBKg5T AR9Kxv0UnpTaGO/xJPJdRy10skzxu7KMjApnfd8SOB6FeIWUFB+l3dmlmiSZRZs3 lu8+zwZpTDeuS/gJvlZ36Df/TWOCOrrHyucBXaYrR1z7MinskwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYiG/1xZGXeCvPLKjCyxZdxT251MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZTE1MGUxN2UtMzZkYi0z MDNkLThhODMtODdlYjIyMWIzOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhI6tkBKT3OdSlEBe8q3UZfH+NgFhmNqlgn+BZ4IdpjKP0GSHyKrCHK dcyHWJyc8D2deBdB5bjjz46KeecdTd2zHEHqqf4kPKu/ZQ9YWtqdvAS4ltwBc+Nd 2p8QSzujkkqeGMoufKIJZTpMXhpLc/ijK6Zb0UEIEgocqgKPV5Ua7qWvOrBGOkRG vZv4j0rvjM+7zvvFstr25RDDY8D9VJpSriq8mcRVZ1fAz8f3OkaPhIAwcAi14ros icfFnMhN2SsT6T4BaZou/lLc6DSJgJhszQGHVHrSRSyK2k8qHqIEDaH2sy5dJBBs mLpG9aH0TcWHC0tyxNgtPXlUkHHdqiA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:55:20 2025 by rpki-client