$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/785d8a4b-88a6-38fb-97a2-f8dc44d6a5fd.roa File: 785d8a4b-88a6-38fb-97a2-f8dc44d6a5fd.roa (raw, json) Hash identifier: ChrXdkdG82idH8zHqQjVqiF2O0IC4UBo5w2COtodz5g= Subject key identifier: F9:33:62:E0:6D:54:A3:3A:CA:6E:9A:7E:78:0B:45:03:05:3F:FE:63 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584A331AF4610E5E0D6BD60D1080 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/785d8a4b-88a6-38fb-97a2-f8dc44d6a5fd.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 8987 IP address blocks: 130.137.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:f4:61:0e:5e:0d:6b:d6:0d:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=f891c772-492e-45e1-9763-64371b9a3413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:05:d8:c0:b5:3b:d4:e0:1c:75:c3:82:de:a7: e7:a2:9d:6f:73:ea:17:76:f6:3c:ff:45:a6:50:9a: a6:38:a3:7f:68:53:12:7e:87:13:e7:d4:84:71:24: 30:82:10:84:f7:c9:01:31:f4:e4:3e:60:e6:5e:a2: 5c:b8:ad:7d:85:15:52:2b:5f:86:e0:eb:b7:f7:e0: f1:27:f2:66:a7:16:d7:cd:14:9f:c4:f1:85:f1:19: 9b:ba:af:92:e8:a5:1a:ad:73:83:a4:84:d6:0d:cc: 05:68:f0:6f:14:f2:33:32:4c:00:15:7f:3b:cc:b9: 12:07:79:6c:b3:ce:62:d4:bb:3c:7a:9f:4f:c1:42: 6d:60:28:e0:2e:0b:1a:1c:5b:8f:3c:33:ab:c1:d5: 82:97:9e:56:a7:8e:4d:24:70:75:e4:1a:41:4d:3c: 46:1a:8b:b5:e4:97:62:c4:89:ec:1d:1d:37:2c:9b: f6:d4:63:e1:c0:4b:df:d2:f5:f6:08:86:69:c7:da: e9:f0:cc:23:b0:19:76:80:ef:aa:55:7f:68:52:08: 15:cd:2c:e6:5b:7c:e2:93:e2:13:11:eb:58:66:79: 45:a0:ae:42:e3:3f:d5:90:13:1a:fa:cb:d1:a5:11: 99:a7:6d:fc:8e:fc:f5:50:63:80:e5:a9:53:24:16: 79:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:33:62:E0:6D:54:A3:3A:CA:6E:9A:7E:78:0B:45:03:05:3F:FE:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/785d8a4b-88a6-38fb-97a2-f8dc44d6a5fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:48:77:95:d9:6e:03:fa:cc:7e:de:42:44:6c:02:cf:a1:73: 7e:f7:11:a9:4f:6d:2e:97:a1:5f:6a:06:15:4f:13:52:b0:43: ae:16:df:2f:04:e0:b7:55:19:f8:ed:9b:39:89:5a:3b:68:fb: 01:cd:5a:ed:ee:cc:84:dd:bb:72:40:37:78:52:dd:db:fd:c5: c2:7f:d0:b7:c5:1f:80:9d:a0:c1:e0:da:de:22:32:dc:32:05: 83:c2:bc:75:25:f3:a5:21:f6:4a:e8:52:24:9f:9b:c9:55:8f: b1:ef:3f:d9:a2:80:44:9f:da:85:17:53:cf:44:0b:80:e1:05: c2:20:96:2b:ba:27:d9:28:12:25:e5:e2:9d:45:8c:01:0b:f0: b6:04:eb:4c:80:cd:11:a5:ad:8e:4c:fb:65:2e:70:ce:f9:b0: 01:44:9d:2b:b0:a5:29:4a:79:ba:60:57:f3:12:b8:c4:f0:58: 56:ba:ef:f6:ba:9a:a5:bc:c9:e0:25:6b:ce:e6:e3:3b:2c:03: 28:b0:30:0e:3f:a6:71:e4:46:05:de:8d:10:de:fc:e1:a2:67: d9:af:80:d2:31:eb:a0:c1:8f:67:cd:12:f6:bb:23:f9:09:2b: 55:36:57:30:6f:80:94:ad:2d:6f:c4:ce:dd:18:83:4f:78:6e: 87:0a:d1:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvRhDl4Na9YNEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk Zjg5MWM3NzItNDkyZS00NWUxLTk3NjMtNjQzNzFiOWEzNDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgXYwLU71OAcdcOC3qfnop1vc+oXdvY8/0Wm UJqmOKN/aFMSfocT59SEcSQwghCE98kBMfTkPmDmXqJcuK19hRVSK1+G4Ou39+Dx J/JmpxbXzRSfxPGF8Rmbuq+S6KUarXODpITWDcwFaPBvFPIzMkwAFX87zLkSB3ls s85i1Ls8ep9PwUJtYCjgLgsaHFuPPDOrwdWCl55Wp45NJHB15BpBTTxGGou15Jdi xInsHR03LJv21GPhwEvf0vX2CIZpx9rp8MwjsBl2gO+qVX9oUggVzSzmW3zik+IT EetYZnlFoK5C4z/VkBMa+svRpRGZp238jvz1UGOA5alTJBZ5dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkzYuBtVKM6ym6afngLRQMFP/5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNzg1ZDhhNGItODhhNi0z OGZiLTk3YTItZjhkYzQ0ZDZhNWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBId5XZbgP6zH7eQkRsAs+hc373EalPbS6XoV9qBhVPE1KwQ64W3y8E 4LdVGfjtmzmJWjto+wHNWu3uzITdu3JAN3hS3dv9xcJ/0LfFH4CdoMHg2t4iMtwy BYPCvHUl86Uh9kroUiSfm8lVj7HvP9migESf2oUXU89EC4DhBcIgliu6J9koEiXl 4p1FjAEL8LYE60yAzRGlrY5M+2UucM75sAFEnSuwpSlKebpgV/MSuMTwWFa67/a6 mqW8yeAla87m4zssAyiwMA4/pnHkRgXejRDe/OGiZ9mvgNIx66DBj2fNEva7I/kJ K1U2VzBvgJStLW/Ezt0Yg094bocK0bo= -----END CERTIFICATE-----Generated at Mon Jun 16 04:34:05 2025 by rpki-client