$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa File: ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa (raw, json) Hash identifier: WLkN5bSf7UG3N8ULHdVDE/vXaEsg34ua+PjYb3uD6is= Subject key identifier: 3E:3E:1F:2D:4D:94:93:CA:E1:9D:49:6D:39:41:E3:33:22:D7:BF:25 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF2567A1B515B87B243736900 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7a:1b:51:5b:87:b2:43:73:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=e62e768b-7a0c-4751-b43e-d54f9ecdba46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:cd:df:15:7d:70:bc:82:ed:03:3f:e0:61: b9:3c:1a:34:00:5c:36:00:98:26:79:c5:4e:90:45: 85:bf:78:95:44:2c:d3:48:b5:83:3b:5d:40:9e:d5: ac:7f:1c:e1:0b:b7:8c:b1:7a:a6:e3:0b:7b:8f:28: dc:96:e8:2b:7a:e7:99:82:92:c1:1c:cc:7a:cf:86: ae:79:3b:39:59:c3:a6:5f:13:02:bd:37:6a:65:c8: b2:21:f7:19:6d:b3:58:4f:0d:b8:09:5b:63:db:71: 22:e2:5e:98:ea:c6:38:19:2d:80:30:5e:42:b4:4c: 9c:ac:96:f1:06:b4:9d:3c:69:35:bc:88:b3:b1:a4: 88:33:2f:12:71:a6:f0:3c:e9:cf:e0:cf:89:56:62: a7:cc:26:c8:47:73:80:e6:f7:9e:8f:30:80:0b:95: be:50:c0:80:bf:b7:aa:1d:b7:68:cc:d1:5c:53:00: ac:b1:f8:f7:cc:7c:23:e4:c8:a0:ed:66:d5:b6:b4: cb:a4:d6:77:db:51:1f:0e:bb:3c:8a:53:54:8e:32: 66:35:be:d2:1e:6b:33:6f:48:5c:8b:bd:54:d5:87: c2:be:0f:8e:d2:06:09:b7:5d:74:8d:6b:3f:ea:e2: 08:f4:b8:0c:09:e3:08:fa:fc:e1:c3:ab:bc:14:c7: a9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3E:1F:2D:4D:94:93:CA:E1:9D:49:6D:39:41:E3:33:22:D7:BF:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:fd:68:a9:35:bb:2a:31:3e:0b:5c:ef:ca:c7:ff:16:91:85: cb:f3:d7:3f:d4:ef:17:34:97:5f:4f:0c:db:ff:6f:6d:76:38: 0d:85:8b:65:e0:c1:8c:1f:1f:98:8e:e2:b5:c8:a5:39:3f:3e: 5d:f8:30:10:f7:39:c3:11:da:71:db:2d:6d:81:c1:79:8e:c0: ba:a3:b9:6b:b1:a3:da:2a:5a:97:85:92:9f:d3:16:b2:56:ce: d5:9d:a3:da:26:95:a8:cf:fd:16:8d:2f:c3:42:0a:98:bd:f9: 37:b3:24:a2:65:83:43:1e:d5:3d:40:84:ce:47:85:91:58:4e: 8c:4c:25:b4:1e:7b:41:c9:b6:b7:43:1f:ef:ed:ba:02:71:54: 05:e2:e2:b8:f3:55:e9:20:c6:db:65:83:9e:7c:b2:b1:13:7e: 9b:89:63:c0:11:a1:cf:9c:d3:89:ac:e6:73:d7:7b:3c:1d:ad: 0f:a5:88:c6:e5:08:f8:91:ab:20:a0:4d:90:f2:7e:e9:7d:0c: d0:9d:4f:e7:53:58:45:bb:01:08:45:53:94:b4:37:8a:65:cb: 24:43:f0:20:b7:df:23:6e:06:94:5d:8b:7d:e3:d5:ee:8b:07: da:1b:ae:86:0d:3f:f3:aa:99:ac:4e:14:53:64:57:54:62:fa: ab:1b:5d:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnobUVuHskNzaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZTYyZTc2OGItN2EwYy00NzUxLWI0M2UtZDU0ZjllY2RiYTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+nN3xV9cLyC7QM/4GG5PBo0AFw2AJgmecVO kEWFv3iVRCzTSLWDO11AntWsfxzhC7eMsXqm4wt7jyjclugreueZgpLBHMx6z4au eTs5WcOmXxMCvTdqZciyIfcZbbNYTw24CVtj23Ei4l6Y6sY4GS2AMF5CtEycrJbx BrSdPGk1vIizsaSIMy8ScabwPOnP4M+JVmKnzCbIR3OA5veejzCAC5W+UMCAv7eq HbdozNFcUwCssfj3zHwj5Mig7WbVtrTLpNZ321EfDrs8ilNUjjJmNb7SHmszb0hc i71U1YfCvg+O0gYJt110jWs/6uII9LgMCeMI+vzhw6u8FMepWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4+Hy1NlJPK4Z1JbTlB4zMi178lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZWNiMzllNmQtODk2Ni0z M2YzLWFlNDEtYmI2MjMyMDcyYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE79aKk1uyoxPgtc78rH/xaRhcvz1z/U7xc0l19PDNv/b212OA2Fi2Xg wYwfH5iO4rXIpTk/Pl34MBD3OcMR2nHbLW2BwXmOwLqjuWuxo9oqWpeFkp/TFrJW ztWdo9omlajP/RaNL8NCCpi9+TezJKJlg0Me1T1AhM5HhZFYToxMJbQee0HJtrdD H+/tugJxVAXi4rjzVekgxttlg558srETfpuJY8ARoc+c04ms5nPXezwdrQ+liMbl CPiRqyCgTZDyful9DNCdT+dTWEW7AQhFU5S0N4plyyRD8CC33yNuBpRdi33j1e6L B9obroYNP/OqmaxOFFNkV1Ri+qsbXW0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:57:21 2025 by rpki-client