$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f3bd1d6-1d88-3a5e-be29-39ee6b797a6d.roa File: 0f3bd1d6-1d88-3a5e-be29-39ee6b797a6d.roa (raw, json) Hash identifier: pzMLPkJs00uz+985/fdJT5UOZb9VbnJpZvN4ySxSQfc= Subject key identifier: 35:34:B7:6B:15:7C:20:60:27:E7:28:BE:D7:F5:EC:E1:FB:11:A5:86 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AA85BA15ED2724E28D1EB1C00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f3bd1d6-1d88-3a5e-be29-39ee6b797a6d.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 130.137.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:a1:5e:d2:72:4e:28:d1:eb:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=2751ab22-2c57-45ae-991d-5ec0741676f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:8f:ca:22:03:c2:ef:a1:d5:70:01:89:4d: 22:af:28:c1:38:7a:42:dc:31:f4:b5:a2:12:47:8b: a7:50:ab:a4:1c:22:6d:1a:7a:21:33:7e:a9:82:31: 2c:7f:8e:9a:01:e1:67:f5:4b:b1:59:d4:55:0c:d0: 54:94:d2:95:dd:ec:be:8c:5c:f1:7b:97:41:1d:1a: 6f:ab:93:23:b0:6d:cc:cb:dd:e1:3f:4f:55:c2:61: 22:74:44:83:7e:20:03:48:aa:9e:bf:71:78:95:c0: fa:3b:c7:39:d0:1e:1e:bc:fd:40:18:c9:03:7b:70: e5:5d:05:4d:c1:4c:9d:48:e1:a9:7e:4a:c0:55:a4: 2a:83:8f:0c:0e:a0:59:9e:3c:1f:c1:ef:7c:24:eb: 0d:75:29:37:93:0d:22:63:eb:74:14:27:90:02:15: c1:31:75:18:70:81:31:9a:03:78:75:80:fc:6a:ce: 4c:54:d7:15:96:6e:00:57:36:02:cf:db:6c:69:b6: 7a:d6:fe:61:6f:a7:2c:10:ee:f1:ac:51:e7:a8:57: d1:e4:1e:e1:d9:1e:bc:b7:28:3b:49:cd:51:8c:e1: 6d:8a:65:d4:5f:9b:62:bf:73:cd:75:46:6a:bc:60: b7:2d:86:ad:94:45:e7:d6:a5:06:85:9b:ce:cd:da: 6a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:34:B7:6B:15:7C:20:60:27:E7:28:BE:D7:F5:EC:E1:FB:11:A5:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f3bd1d6-1d88-3a5e-be29-39ee6b797a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ee:22:c0:05:59:de:44:71:d4:37:8f:53:22:02:fe:40:fe: 90:a8:7d:58:ca:83:a4:db:f7:08:4a:c6:82:d3:76:39:f9:a8: 2f:b2:ef:ee:54:8a:ae:42:04:ef:84:ec:f5:22:aa:b2:06:4b: 4c:38:c3:c0:9d:19:e8:6f:ea:f0:b0:e4:ff:95:07:5c:33:78: d5:38:f2:fb:18:42:0b:3d:12:df:29:d1:5f:be:72:94:a0:67: 3a:1c:20:58:43:5c:22:04:6f:93:13:99:51:35:d7:ee:e0:7f: 9b:ae:bb:59:c7:bc:d5:3d:3f:5d:d0:44:69:a5:b1:4f:c1:72: 2e:db:03:2c:66:72:c0:3f:76:18:88:3b:d0:52:f1:0f:25:fe: dd:93:cc:2f:0b:00:b5:93:0c:b8:d4:ae:57:e2:94:90:62:f7: 04:13:a1:e3:cf:36:a5:2a:a8:93:ec:0a:6c:c3:ad:b9:e1:7a: 01:73:ce:2f:47:d5:fe:7c:23:2a:1e:27:f0:9d:c9:ff:fb:5a: 99:22:9f:97:28:f1:60:fb:ae:da:3e:08:b4:64:d7:77:67:9d: 83:6a:bd:96:cb:d8:c4:47:4c:51:19:12:6a:5e:b9:50:08:c3: da:dd:27:8f:b1:07:32:b8:66:25:3e:bc:f3:11:4c:4a:ba:35: 82:db:77:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW6Fe0nJOKNHrHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk Mjc1MWFiMjItMmM1Ny00NWFlLTk5MWQtNWVjMDc0MTY3NmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFKPyiIDwu+h1XABiU0iryjBOHpC3DH0taIS R4unUKukHCJtGnohM36pgjEsf46aAeFn9UuxWdRVDNBUlNKV3ey+jFzxe5dBHRpv q5MjsG3My93hP09VwmEidESDfiADSKqev3F4lcD6O8c50B4evP1AGMkDe3DlXQVN wUydSOGpfkrAVaQqg48MDqBZnjwfwe98JOsNdSk3kw0iY+t0FCeQAhXBMXUYcIEx mgN4dYD8as5MVNcVlm4AVzYCz9tsabZ61v5hb6csEO7xrFHnqFfR5B7h2R68tyg7 Sc1RjOFtimXUX5tiv3PNdUZqvGC3LYatlEXn1qUGhZvOzdpqfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDU0t2sVfCBgJ+covtf17OH7EaWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMGYzYmQxZDYtMWQ4OC0z YTVlLWJlMjktMzllZTZiNzk3YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/uIsAFWd5EcdQ3j1MiAv5A/pCofVjKg6Tb9whKxoLTdjn5qC+y7+5U iq5CBO+E7PUiqrIGS0w4w8CdGehv6vCw5P+VB1wzeNU48vsYQgs9Et8p0V++cpSg ZzocIFhDXCIEb5MTmVE11+7gf5uuu1nHvNU9P13QRGmlsU/Bci7bAyxmcsA/dhiI O9BS8Q8l/t2TzC8LALWTDLjUrlfilJBi9wQToePPNqUqqJPsCmzDrbnhegFzzi9H 1f58IyoeJ/Cdyf/7Wpkin5co8WD7rto+CLRk13dnnYNqvZbL2MRHTFEZEmpeuVAI w9rdJ4+xBzK4ZiU+vPMRTEq6NYLbd6k= -----END CERTIFICATE-----Generated at Mon Aug 4 14:55:19 2025 by rpki-client