$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/00433da8-ff5f-32d8-ac8d-6d63c3385461.roa File: 00433da8-ff5f-32d8-ac8d-6d63c3385461.roa (raw, json) Hash identifier: Z96+9qrnZvUFbdTphOKBDZ2+6AIwWtOAkbGG9ctrkZo= Subject key identifier: 0A:42:C4:C2:56:19:EA:7C:EC:B4:30:22:B4:30:57:92:F7:08:40:14 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AAB26682AF98B8BEC3B05C2C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/00433da8-ff5f-32d8-ac8d-6d63c3385461.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 130.137.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:68:2a:f9:8b:8b:ec:3b:05:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=69ff807f-a765-48e7-9760-4399a7e7fdb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:69:8c:14:17:ac:71:f4:32:ce:e1:41:df: e6:a8:2c:90:95:b5:d2:35:a3:b1:94:b4:2b:c0:ed: ef:8a:57:0d:d7:ad:bd:f8:e4:9a:9b:a4:13:d3:1c: e5:60:36:7a:61:34:92:55:6e:0f:24:4d:03:d9:f1: b4:2f:9e:b9:8f:66:69:a5:af:1e:cb:33:39:c8:90: d3:b7:3c:1c:67:4a:14:4a:63:ba:eb:5c:77:e2:78: 7f:91:8d:01:bc:d1:b2:2e:65:1e:98:ff:85:bc:7f: 19:05:e7:7d:4e:67:01:c1:d0:dc:9d:b3:38:a0:36: 96:8c:b8:39:34:f8:30:61:ab:40:c0:6d:77:8d:e2: cb:f8:28:d7:7f:6d:cb:9f:ab:4b:5b:bf:d0:78:10: 08:d3:bf:8f:b0:fa:cf:fa:0c:04:73:a1:5a:24:10: 0f:19:27:1c:8a:c3:2e:b5:68:be:fe:1d:28:c6:21: 67:38:56:5d:7c:e4:d2:18:94:7a:6c:0c:81:01:c0: 51:a1:1d:5b:58:f3:65:87:7b:f2:8c:d3:e8:ae:75: 3d:ff:d0:8e:9d:41:17:ae:30:c5:ae:cf:0f:e6:c3: 15:d7:b4:35:19:89:2b:9d:88:7d:e8:83:80:94:ff: 01:99:88:2d:28:be:27:7d:d5:30:a8:ee:38:60:3d: f1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:42:C4:C2:56:19:EA:7C:EC:B4:30:22:B4:30:57:92:F7:08:40:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/00433da8-ff5f-32d8-ac8d-6d63c3385461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:1e:a7:15:a5:05:b3:52:6a:ba:a1:32:31:c6:aa:ae:1a:c7: 31:b3:9a:4c:b4:9e:e7:f1:5e:45:77:b7:50:f5:db:0d:85:60: f5:66:90:81:a4:d1:4c:2b:03:3f:21:f7:7e:0e:cb:34:f0:76: ba:2f:e0:52:92:20:d7:b2:f3:f2:0b:e6:62:2c:39:d1:f2:ca: f3:9e:5e:f0:cb:37:ea:23:f8:ef:bf:63:6e:42:da:6b:37:a1: 02:74:c3:e0:1c:47:25:c7:f6:84:3e:32:48:5c:2d:a5:4f:4f: 07:c4:f8:ec:57:2a:b7:a3:9b:22:d6:6f:cc:ff:97:71:03:88: 7b:19:c7:bb:41:50:18:b5:bf:62:f3:73:59:66:77:02:07:c1: 56:ee:ef:e9:4c:be:b5:f5:40:04:30:b2:f6:56:f3:c8:ab:ca: 1c:42:34:38:3e:8a:b6:f2:55:19:b7:fb:3f:9b:7c:da:a3:dc: 48:81:30:0d:2e:96:d8:24:52:c6:ff:ff:90:fa:80:28:64:01: a4:4a:83:a8:e2:25:1d:3b:40:ed:59:26:64:46:d8:05:2b:aa: 97:6a:fa:a5:54:98:73:dd:07:71:8c:4c:0e:aa:a1:4d:23:23: 70:07:7d:e3:4f:71:53:d7:25:ee:03:e4:9c:4f:1f:d6:c5:ba: fe:5d:01:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJmgq+YuL7DsFwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NjlmZjgwN2YtYTc2NS00OGU3LTk3NjAtNDM5OWE3ZTdmZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVppjBQXrHH0Ms7hQd/mqCyQlbXSNaOxlLQr wO3vilcN1629+OSam6QT0xzlYDZ6YTSSVW4PJE0D2fG0L565j2Zppa8eyzM5yJDT tzwcZ0oUSmO661x34nh/kY0BvNGyLmUemP+FvH8ZBed9TmcBwdDcnbM4oDaWjLg5 NPgwYatAwG13jeLL+CjXf23Ln6tLW7/QeBAI07+PsPrP+gwEc6FaJBAPGSccisMu tWi+/h0oxiFnOFZdfOTSGJR6bAyBAcBRoR1bWPNlh3vyjNPornU9/9COnUEXrjDF rs8P5sMV17Q1GYkrnYh96IOAlP8BmYgtKL4nfdUwqO44YD3xJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApCxMJWGep87LQwIrQwV5L3CEAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMDA0MzNkYTgtZmY1Zi0z MmQ4LWFjOGQtNmQ2M2MzMzg1NDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIepxWlBbNSarqhMjHGqq4axzGzmky0nufxXkV3t1D12w2FYPVmkIGk 0UwrAz8h934OyzTwdrov4FKSINey8/IL5mIsOdHyyvOeXvDLN+oj+O+/Y25C2ms3 oQJ0w+AcRyXH9oQ+MkhcLaVPTwfE+OxXKrejmyLWb8z/l3EDiHsZx7tBUBi1v2Lz c1lmdwIHwVbu7+lMvrX1QAQwsvZW88iryhxCNDg+irbyVRm3+z+bfNqj3EiBMA0u ltgkUsb//5D6gChkAaRKg6jiJR07QO1ZJmRG2AUrqpdq+qVUmHPdB3GMTA6qoU0j I3AHfeNPcVPXJe4D5JxPH9bFuv5dAYc= -----END CERTIFICATE-----Generated at Mon Aug 4 18:58:08 2025 by rpki-client