$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e8070f34-a2e8-3513-a05c-1e47606c997e.roa File: e8070f34-a2e8-3513-a05c-1e47606c997e.roa (raw, json) Hash identifier: mlDx6fucflUSZRIQgWaYk7TJ/JWdPbzVTUoin+olYq0= Subject key identifier: A9:69:A2:7E:89:A8:86:6A:D2:F3:81:26:77:83:D1:C2:EE:1E:3B:70 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF25674A17200A8F4CB799080 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e8070f34-a2e8-3513-a05c-1e47606c997e.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:74:a1:72:00:a8:f4:cb:79:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=3293b25a-44b3-490b-888a-b70d39176612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:04:d0:47:8e:ae:58:ee:07:0c:27:29:2f:93: 6f:3a:a8:5a:f1:39:35:dc:3b:81:e3:cd:72:33:5d: 80:10:f4:4a:23:f2:5a:d4:4e:9a:2c:a2:71:88:b4: aa:d6:38:5a:de:dd:69:98:fe:6c:ae:ba:34:42:d6: 65:7f:2c:cf:5f:24:91:02:89:74:46:7d:a0:ae:a5: 8c:df:f2:96:13:fe:88:49:c3:09:a6:00:2c:ef:b6: bc:2b:ff:7c:c3:c8:57:6f:f2:b6:c1:e7:a4:88:da: ef:3f:b7:75:0e:5c:30:6e:e3:8e:26:72:0c:77:dc: d0:45:dc:c8:57:69:3a:8a:0a:81:86:45:94:87:b2: 66:56:55:2e:d7:6e:1a:1f:eb:a5:c7:e3:58:3f:3d: d5:9f:c8:a1:d0:17:bc:d3:f3:56:5a:c5:7a:8b:08: 29:23:1b:f6:62:e5:fc:86:cf:af:6a:4f:79:5b:ae: ee:bb:39:62:c3:0a:c4:aa:2e:01:d3:84:d0:00:ae: 78:3e:71:62:a2:72:34:4a:2b:18:93:d1:b6:1b:86: a7:69:70:6a:52:f6:cb:e5:48:f9:02:76:c1:e5:f8: b3:10:9f:a6:9d:2d:a0:15:99:91:00:bc:cf:0e:70: c6:ac:fa:02:d3:3c:51:ff:55:71:26:cf:2b:31:76: 90:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:69:A2:7E:89:A8:86:6A:D2:F3:81:26:77:83:D1:C2:EE:1E:3B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e8070f34-a2e8-3513-a05c-1e47606c997e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:d4:22:de:85:28:ef:e8:b6:c3:58:7f:37:84:da:c2:e8:24: 95:a9:84:19:8a:4b:43:20:93:b3:3b:0d:31:9f:d2:a8:1c:1a: 31:b8:fe:87:37:78:7d:9c:a7:80:65:c4:09:7f:cd:f9:d4:9f: ac:2c:4a:f1:cb:6c:b8:bf:3b:6b:08:73:2b:84:3d:47:c7:07: d8:b5:78:e6:24:28:d6:28:64:f4:13:1c:2c:1f:25:8d:1b:e7: 74:c3:43:96:43:89:ad:96:b0:e0:6f:23:7f:04:b3:be:0e:ae: f8:a6:88:23:94:dd:36:84:53:0c:d9:e0:a8:dd:8c:fa:ce:3d: 57:da:56:88:6c:12:07:a5:0f:b5:7e:e7:73:49:46:64:9f:4a: 6c:ec:94:b3:87:f7:c4:37:65:81:43:46:7e:f6:55:50:72:35: b7:4f:9c:f5:45:ed:6b:b4:36:3d:e3:24:01:d0:35:c7:7d:82: e5:bf:4f:e1:c3:4d:8b:77:ad:9d:15:20:f4:d3:48:38:f4:50: 7e:de:09:ae:9e:ec:58:62:18:d9:24:05:db:8b:9e:68:cd:0e: 57:20:67:29:e8:f5:d8:5f:e6:d9:c5:26:8e:ec:17:ac:52:df: e7:2d:eb:f4:c7:1a:fb:82:fd:12:39:45:05:32:af:3a:4c:7e: e5:72:6e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnShcgCo9Mt5kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MzI5M2IyNWEtNDRiMy00OTBiLTg4OGEtYjcwZDM5MTc2NjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwTQR46uWO4HDCcpL5NvOqha8Tk13DuB481y M12AEPRKI/Ja1E6aLKJxiLSq1jha3t1pmP5srro0QtZlfyzPXySRAol0Rn2grqWM 3/KWE/6IScMJpgAs77a8K/98w8hXb/K2weekiNrvP7d1DlwwbuOOJnIMd9zQRdzI V2k6igqBhkWUh7JmVlUu124aH+ulx+NYPz3Vn8ih0Be80/NWWsV6iwgpIxv2YuX8 hs+vak95W67uuzliwwrEqi4B04TQAK54PnFionI0SisYk9G2G4anaXBqUvbL5Uj5 AnbB5fizEJ+mnS2gFZmRALzPDnDGrPoC0zxR/1VxJs8rMXaQ5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlpon6JqIZq0vOBJneD0cLuHjtwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZTgwNzBmMzQtYTJlOC0z NTEzLWEwNWMtMWU0NzYwNmM5OTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDUIt6FKO/otsNYfzeE2sLoJJWphBmKS0Mgk7M7DTGf0qgcGjG4/oc3 eH2cp4BlxAl/zfnUn6wsSvHLbLi/O2sIcyuEPUfHB9i1eOYkKNYoZPQTHCwfJY0b 53TDQ5ZDia2WsOBvI38Es74OrvimiCOU3TaEUwzZ4KjdjPrOPVfaVohsEgelD7V+ 53NJRmSfSmzslLOH98Q3ZYFDRn72VVByNbdPnPVF7Wu0Nj3jJAHQNcd9guW/T+HD TYt3rZ0VIPTTSDj0UH7eCa6e7FhiGNkkBduLnmjNDlcgZyno9dhf5tnFJo7sF6xS 3+ct6/THGvuC/RI5RQUyrzpMfuVybgc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:53:46 2025 by rpki-client