$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/23799b97-c2fe-31d2-921b-6e5abcbece3d.roa File: 23799b97-c2fe-31d2-921b-6e5abcbece3d.roa (raw, json) Hash identifier: A/UM1pyV6cUNry7SIUH4gT7D+X/L9fhRzRiqKkJ3e+E= Subject key identifier: 60:A1:9F:DB:E7:67:F7:10:62:B6:E0:B5:56:02:F1:D6:EA:EB:34:27 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AAB26685C522D3184A54C7880 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/23799b97-c2fe-31d2-921b-6e5abcbece3d.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 130.137.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:68:5c:52:2d:31:84:a5:4c:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=fe526ec7-490e-4f1b-9fba-8b8b5265d3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:ba:00:7f:f5:d7:3a:76:4b:43:12:eb:9f: 8b:eb:69:3b:29:aa:44:60:f0:83:7d:11:1b:d7:2f: c3:2b:bd:26:ab:ca:d3:52:db:12:6b:b0:fa:6a:9f: 09:52:96:e3:25:b2:88:aa:37:b3:45:ce:83:72:bb: 4d:a8:bb:24:47:56:7e:33:3c:c9:d7:14:11:a0:95: 8a:fe:80:dd:60:23:94:c2:d8:93:1d:c1:af:15:6c: 40:21:a1:4e:14:af:aa:27:dc:37:fc:2b:33:0e:0d: 64:eb:2f:be:26:5a:f3:8a:6b:61:34:ac:89:fe:62: 1f:be:91:f3:df:16:f4:87:99:c5:35:d6:57:8a:10: e1:e5:b5:2d:80:19:7c:b3:df:36:7e:fe:4b:e6:a2: b0:cd:a1:f7:72:21:b9:ad:06:cd:8d:d4:ad:75:64: 95:c7:23:85:a5:62:c2:2e:77:29:cc:60:4d:d8:45: a7:89:f1:c4:27:e8:ec:08:0f:f0:06:09:05:c2:39: b1:bb:1b:6b:8c:6b:56:30:8a:6c:08:f9:2e:e2:f8: d4:9a:d9:14:00:3b:2f:a0:d7:30:91:50:61:fd:fe: 36:f0:74:bd:43:90:f7:a1:5b:70:7f:29:ee:0c:ed: 12:71:7f:46:bb:01:5c:ee:d1:df:c8:93:e8:98:27: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A1:9F:DB:E7:67:F7:10:62:B6:E0:B5:56:02:F1:D6:EA:EB:34:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/23799b97-c2fe-31d2-921b-6e5abcbece3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:af:40:76:5b:cf:f9:b5:41:1d:6e:ab:e9:40:20:70:e5:0b: 00:46:1a:df:8b:c8:95:b9:50:a6:e5:1f:00:ee:ad:66:ad:72: ae:32:e1:72:1e:a3:f1:63:0f:a9:28:53:f7:12:c6:47:69:d3: 5d:2b:24:f5:02:85:1b:59:5a:e5:57:d7:d4:a4:ba:00:cd:39: be:1e:71:5d:10:e3:8d:b4:e4:1c:f9:1e:5a:95:03:9b:f8:94: 13:e5:63:ab:b1:70:f8:7d:3b:71:a1:42:8d:91:d2:bc:4e:2c: 9e:a8:52:99:30:ad:ac:cc:0c:f3:8f:d0:21:fa:c3:b2:3a:fc: 7c:bc:f2:59:48:d8:68:de:df:cc:4f:30:1c:92:cc:98:0c:39: 2f:c3:5d:82:4d:89:8c:32:d0:4f:87:7f:7c:1d:cf:c1:92:aa: 34:8b:ad:79:f4:50:31:c5:85:54:ac:05:34:a4:24:be:4b:17: d5:40:65:3a:ec:19:50:a9:35:52:c9:ba:82:64:6a:81:73:29: 02:fb:c2:23:88:41:40:ea:e0:cd:4f:f7:ee:39:2b:62:f9:c7: c3:b3:d4:23:4f:17:cc:4b:82:35:8d:03:d0:71:e2:34:5c:06: 2d:be:d4:e7:84:02:f5:d5:07:f8:d8:33:fa:24:af:33:8b:36: 2a:67:ad:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJmhcUi0xhKVMeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZmU1MjZlYzctNDkwZS00ZjFiLTlmYmEtOGI4YjUyNjVkM2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7S6AH/11zp2S0MS65+L62k7KapEYPCDfREb 1y/DK70mq8rTUtsSa7D6ap8JUpbjJbKIqjezRc6DcrtNqLskR1Z+MzzJ1xQRoJWK /oDdYCOUwtiTHcGvFWxAIaFOFK+qJ9w3/CszDg1k6y++JlrzimthNKyJ/mIfvpHz 3xb0h5nFNdZXihDh5bUtgBl8s982fv5L5qKwzaH3ciG5rQbNjdStdWSVxyOFpWLC LncpzGBN2EWnifHEJ+jsCA/wBgkFwjmxuxtrjGtWMIpsCPku4vjUmtkUADsvoNcw kVBh/f428HS9Q5D3oVtwfynuDO0ScX9GuwFc7tHfyJPomCduzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGChn9vnZ/cQYrbgtVYC8dbq6zQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMjM3OTliOTctYzJmZS0z MWQyLTkyMWItNmU1YWJjYmVjZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCvQHZbz/m1QR1uq+lAIHDlCwBGGt+LyJW5UKblHwDurWatcq4y4XIe o/FjD6koU/cSxkdp010rJPUChRtZWuVX19SkugDNOb4ecV0Q44205Bz5HlqVA5v4 lBPlY6uxcPh9O3GhQo2R0rxOLJ6oUpkwrazMDPOP0CH6w7I6/Hy88llI2Gje38xP MBySzJgMOS/DXYJNiYwy0E+Hf3wdz8GSqjSLrXn0UDHFhVSsBTSkJL5LF9VAZTrs GVCpNVLJuoJkaoFzKQL7wiOIQUDq4M1P9+45K2L5x8Oz1CNPF8xLgjWNA9Bx4jRc Bi2+1OeEAvXVB/jYM/okrzOLNipnrVE= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:01 2025 by rpki-client