$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa File: e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa (raw, json) Hash identifier: c1SAHZCksfeqTMPqpnAeiEANl8JSFf5CAj/gYMuFPps= Subject key identifier: 26:EC:77:55:18:31:D9:4B:8B:8B:E5:BA:EA:23:ED:36:2B:00:6A:FE Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF25679D89C9CB196C5D7E7C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:79:d8:9c:9c:b1:96:c5:d7:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=ee7efce3-5315-451a-9bc9-354361ee0e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7c:ca:fb:14:54:57:8a:cb:b2:b0:f4:3e:c4: aa:be:0b:c6:1a:99:ec:90:f1:76:54:0d:fa:f0:75: db:82:d6:68:fc:0b:47:b6:47:51:a4:ea:ec:77:29: f1:ad:66:ea:a6:c0:4b:58:37:0d:86:fb:be:ac:42: 3a:52:aa:d2:6c:1c:b4:4b:61:72:77:9e:89:78:2c: 72:7c:af:bc:18:53:92:0f:b4:8a:ff:bd:cd:d2:02: 90:4c:ff:3a:e3:48:9b:68:7d:1f:2f:7c:6c:3d:e2: 2f:5a:75:ae:f0:60:f3:5d:12:6f:ce:d9:79:dc:8e: 31:d2:44:ec:f6:e7:50:a5:12:43:01:1d:b2:1c:ff: a1:1d:08:69:da:69:81:24:f0:14:18:fd:67:99:10: 6e:43:e0:be:2c:1a:5e:99:83:46:5b:98:29:60:67: 07:34:ef:08:bc:7d:d7:e3:d1:59:55:26:d0:bb:04: ab:d3:de:ec:35:9d:06:a7:70:4b:33:fc:3b:72:aa: 1e:6c:a6:e8:77:23:02:dc:44:5a:89:ac:e2:e2:02: a4:80:47:f9:f8:9d:94:6d:0b:59:19:f0:8c:11:d3: 3a:7b:c5:c6:0b:b6:ea:c2:c9:70:6c:44:ea:44:4d: d6:8c:8b:94:b9:e4:b4:d9:b1:4f:0e:da:25:13:e4: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EC:77:55:18:31:D9:4B:8B:8B:E5:BA:EA:23:ED:36:2B:00:6A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2e:ae:85:c4:6a:63:76:b6:8d:52:09:fb:b5:84:cb:f7:62: 6f:02:6c:1d:0c:60:77:91:4c:17:76:f9:f8:a6:34:4a:6d:4f: df:a4:a4:b2:5a:77:da:95:77:51:c0:a4:41:58:f7:9e:23:e3: 92:3f:fb:ba:10:78:f7:fe:94:2e:60:68:32:87:bc:7b:ff:63: bf:03:73:f5:a6:d1:ff:7c:50:d6:98:5d:09:c1:b4:71:da:28: 2c:e1:9a:34:60:f6:3c:e9:b7:c3:18:30:f2:56:51:a2:27:09: 3d:86:c7:5b:69:80:f7:97:eb:02:96:89:b0:d1:69:51:e4:7b: 8c:5c:51:f1:42:c6:07:1a:65:ae:b0:b0:02:3d:b2:48:d7:21: 56:d3:bc:0f:3b:86:88:f0:7d:b4:de:ce:f3:ce:b6:eb:b4:de: 56:12:da:3d:e3:f0:92:a6:5e:7f:90:e7:25:e6:75:ae:fc:81: 8e:c9:49:2c:96:85:cf:53:c8:e5:02:d7:b3:2d:1c:c0:78:84: 27:2f:ae:ed:a7:d9:37:95:f5:50:b1:90:64:6c:4c:e0:83:9f: ae:1c:7e:d8:af:1d:f3:a6:c4:4d:3e:b6:58:1b:30:15:f6:aa: 2a:9b:e9:ad:9a:19:0d:f3:58:a3:8f:f3:85:71:30:27:97:22: b4:86:8a:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnnYnJyxlsXX58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZWU3ZWZjZTMtNTMxNS00NTFhLTliYzktMzU0MzYxZWUwZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03zK+xRUV4rLsrD0PsSqvgvGGpnskPF2VA36 8HXbgtZo/AtHtkdRpOrsdynxrWbqpsBLWDcNhvu+rEI6UqrSbBy0S2Fyd56JeCxy fK+8GFOSD7SK/73N0gKQTP8640ibaH0fL3xsPeIvWnWu8GDzXRJvztl53I4x0kTs 9udQpRJDAR2yHP+hHQhp2mmBJPAUGP1nmRBuQ+C+LBpemYNGW5gpYGcHNO8IvH3X 49FZVSbQuwSr097sNZ0Gp3BLM/w7cqoebKbodyMC3ERaiazi4gKkgEf5+J2UbQtZ GfCMEdM6e8XGC7bqwslwbETqRE3WjIuUueS02bFPDtolE+TIIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbsd1UYMdlLi4vluuoj7TYrAGr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZTYyM2IzMTMtODZhNS0z ODBjLWJiZjAtOWEyYzc0MzRkYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkuroXEamN2to1SCfu1hMv3Ym8CbB0MYHeRTBd2+fimNEptT9+kpLJa d9qVd1HApEFY954j45I/+7oQePf+lC5gaDKHvHv/Y78Dc/Wm0f98UNaYXQnBtHHa KCzhmjRg9jzpt8MYMPJWUaInCT2Gx1tpgPeX6wKWibDRaVHke4xcUfFCxgcaZa6w sAI9skjXIVbTvA87hojwfbTezvPOtuu03lYS2j3j8JKmXn+Q5yXmda78gY7JSSyW hc9TyOUC17MtHMB4hCcvru2n2TeV9VCxkGRsTOCDn64cftivHfOmxE0+tlgbMBX2 qiqb6a2aGQ3zWKOP84VxMCeXIrSGisY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:52:13 2025 by rpki-client