$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/694c908b-5434-3ef7-9fc2-47fa10e515e5.roa File: 694c908b-5434-3ef7-9fc2-47fa10e515e5.roa (raw, json) Hash identifier: RfY8CEF2UG47l6LvYLSitRT4YHBKHJuB3d4xZMLSjCE= Subject key identifier: 12:15:76:EA:95:47:95:EE:A1:D4:52:7E:0E:CF:FD:F2:03:AB:8B:14 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584A7D15F7ACA72C288D76574860 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/694c908b-5434-3ef7-9fc2-47fa10e515e5.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 58588 IP address blocks: 130.137.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f7:ac:a7:2c:28:8d:76:57:48:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=b9f7ecce-8358-4ec4-9436-8ab729dc9d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e5:c6:f5:3d:a6:ca:4c:a7:d7:aa:da:04:80: 09:0b:b4:d2:10:3b:cd:f5:da:0d:eb:0e:d5:10:29: c2:11:fa:d2:db:56:da:01:09:1a:4f:85:40:d1:89: 6e:82:76:2f:aa:79:ea:83:d3:94:7a:38:53:60:38: 10:fd:33:ab:ee:13:20:b7:3b:76:ad:d4:43:a3:f2: 05:87:d5:4c:fe:34:83:ff:53:70:9e:f3:49:c4:34: d3:72:f8:d8:93:9f:6f:78:32:10:8f:74:30:14:e7: 1f:3a:43:f5:dc:0b:31:dd:01:94:9f:64:21:ef:3a: 17:9c:cd:c2:17:54:7d:c9:69:f1:93:14:e8:1a:f9: 9c:57:c5:bc:4f:95:7e:f9:a8:19:a1:17:ff:bf:1f: 5a:76:70:92:08:77:fd:0e:3e:24:51:2c:11:68:5c: 99:32:b5:b8:cb:e5:31:68:e0:dd:7e:51:f5:b6:ee: 19:ee:46:c9:0e:86:b1:6a:0c:da:5f:c8:e7:2e:74: c7:da:82:f1:e2:8a:94:aa:d3:c7:a0:f5:8e:da:ea: 59:e9:68:0d:a6:a4:f8:1e:32:57:2e:d9:da:6b:60: 0f:f6:2c:7a:6c:d8:ab:9a:4a:fa:24:de:21:82:29: 24:ca:6c:3a:7d:96:7f:7e:cb:fb:40:35:2d:a7:cd: 42:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:15:76:EA:95:47:95:EE:A1:D4:52:7E:0E:CF:FD:F2:03:AB:8B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/694c908b-5434-3ef7-9fc2-47fa10e515e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:aa:f5:97:be:d3:84:c3:bf:f2:89:a4:9a:13:d4:5f:db:cc: 75:a0:ed:9d:0c:b0:2f:7c:ca:f7:be:96:c9:1f:40:ef:8e:6b: f4:38:8f:90:9c:c8:d6:f8:6e:50:e4:da:cc:a9:c2:e1:bd:97: 3e:8a:2a:71:3b:1e:d3:48:9e:c2:79:99:56:c2:93:1c:3c:47: 65:b8:ff:8a:b1:6d:48:35:c6:c0:cb:55:7f:88:f1:db:20:99: b9:7e:e4:f4:3c:87:68:89:dd:c5:00:70:06:73:a9:c2:38:3f: d4:4a:24:97:6f:83:ed:28:5b:12:64:41:27:31:c5:fa:94:e2: 3e:f6:5c:03:59:b0:85:58:85:95:c5:89:7a:19:ce:4d:f0:b2: 9f:30:d1:17:a6:88:75:f2:7b:b4:66:da:58:71:52:6d:69:07: df:62:ce:e0:45:b1:95:6e:b7:eb:fd:99:13:05:58:0e:a2:76: cb:b0:02:f6:1e:5a:5d:a7:43:67:b9:bb:24:57:b1:d2:30:5b: b5:f6:8f:ce:73:7c:1d:a1:fa:21:c6:2f:b9:6a:7d:34:83:06: 4d:2e:7c:61:c7:1f:6c:cb:17:95:5f:1f:03:43:b7:76:ad:78: bd:c0:b2:29:35:c0:ba:e9:0b:92:61:74:6a:a1:0a:c8:38:cf: 47:59:d7:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FfespywojXZXSGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk YjlmN2VjY2UtODM1OC00ZWM0LTk0MzYtOGFiNzI5ZGM5ZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOXG9T2mykyn16raBIAJC7TSEDvN9doN6w7V ECnCEfrS21baAQkaT4VA0YlugnYvqnnqg9OUejhTYDgQ/TOr7hMgtzt2rdRDo/IF h9VM/jSD/1NwnvNJxDTTcvjYk59veDIQj3QwFOcfOkP13Asx3QGUn2Qh7zoXnM3C F1R9yWnxkxToGvmcV8W8T5V++agZoRf/vx9adnCSCHf9Dj4kUSwRaFyZMrW4y+Ux aODdflH1tu4Z7kbJDoaxagzaX8jnLnTH2oLx4oqUqtPHoPWO2upZ6WgNpqT4HjJX Ltnaa2AP9ix6bNirmkr6JN4hgikkymw6fZZ/fsv7QDUtp81C4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIVduqVR5XuodRSfg7P/fIDq4sUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNjk0YzkwOGItNTQzNC0z ZWY3LTlmYzItNDdmYTEwZTUxNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqq9Ze+04TDv/KJpJoT1F/bzHWg7Z0MsC98yve+lskfQO+Oa/Q4j5Cc yNb4blDk2sypwuG9lz6KKnE7HtNInsJ5mVbCkxw8R2W4/4qxbUg1xsDLVX+I8dsg mbl+5PQ8h2iJ3cUAcAZzqcI4P9RKJJdvg+0oWxJkQScxxfqU4j72XANZsIVYhZXF iXoZzk3wsp8w0RemiHXye7Rm2lhxUm1pB99izuBFsZVut+v9mRMFWA6idsuwAvYe Wl2nQ2e5uyRXsdIwW7X2j85zfB2h+iHGL7lqfTSDBk0ufGHHH2zLF5VfHwNDt3at eL3Asik1wLrpC5JhdGqhCsg4z0dZ108= -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:15 2025 by rpki-client