$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/85b5591c-78f3-3264-a4a7-3216b1882c46.roa File: 85b5591c-78f3-3264-a4a7-3216b1882c46.roa (raw, json) Hash identifier: kSkpvv2lMDD8YCPnwbNG0cXuWflK9pvdEo+UGQ/NWN8= Subject key identifier: 88:47:1F:D1:57:A8:E7:AB:7B:F7:F9:40:9A:DB:B6:02:04:61:B4:1A Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584A8B0B5D3EEC8844E365B73780 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/85b5591c-78f3-3264-a4a7-3216b1882c46.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 14618 IP address blocks: 130.137.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:5d:3e:ec:88:44:e3:65:b7:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=32939269-70e8-4961-8c97-c601cc0e237c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:09:1d:87:74:f6:65:07:0d:ba:db:4a:5f: ed:b7:b4:04:98:68:df:a9:5c:93:dc:e3:ee:85:e7: b8:7f:4b:7d:d7:e8:a9:5f:1e:c4:86:b6:4b:7e:f0: c9:1d:2f:5e:2d:3d:7f:33:ac:46:59:91:02:d4:fb: b0:6b:ae:50:58:00:41:26:61:76:3f:53:8a:5b:3e: 13:eb:de:80:3e:e8:36:80:54:24:8e:75:34:40:fc: f5:8f:39:02:47:68:d3:a1:b9:07:41:89:c1:63:a4: 9d:b9:60:4b:f0:82:ef:72:57:89:f8:85:20:0b:40: e2:c2:f2:e9:5c:a5:57:44:9b:a3:24:c1:6d:2e:81: f6:da:be:30:86:e5:b1:b1:76:c2:b1:fd:5d:86:33: be:e9:75:7a:cc:c5:5e:21:91:4e:83:90:04:a9:d1: 14:75:fe:05:0f:63:3c:4b:e9:4f:51:52:f3:d1:e4: d6:99:2a:86:88:10:ea:44:0e:bb:23:22:1d:74:95: 9a:30:7f:1a:28:3a:1b:0a:a4:9d:dd:66:52:b5:1b: 0b:ef:1d:67:c4:cd:bb:48:5d:67:e6:05:21:40:bd: 60:9e:3c:00:ed:26:36:45:d0:d8:d0:ae:90:35:4c: cf:e4:c1:28:d7:67:bc:ad:04:57:36:8c:16:3e:e9: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:47:1F:D1:57:A8:E7:AB:7B:F7:F9:40:9A:DB:B6:02:04:61:B4:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/85b5591c-78f3-3264-a4a7-3216b1882c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f4:d6:e0:6b:05:f2:ec:85:3b:c9:6d:40:81:87:f0:9f:9f: aa:81:18:10:15:8c:92:70:24:7d:aa:60:4f:41:5f:55:09:d6: 1a:2f:73:03:68:76:78:bd:11:b1:90:a5:c6:91:3f:24:31:d3: 36:e1:f4:e7:02:df:d0:67:c0:2f:26:77:ef:11:15:42:ad:75: 69:69:b0:79:97:38:6b:75:85:e1:b5:6c:0a:8f:38:b9:dc:8a: d4:03:9f:65:33:29:d1:26:2e:ea:cb:3f:c4:2e:b9:75:be:da: 25:79:35:9f:3a:0c:f5:94:e8:3b:3c:15:f2:85:a9:ed:92:f3: 06:f9:54:ed:82:3f:00:fc:7f:14:8c:2e:4b:ca:7b:f7:b1:a2: d2:71:0f:a4:8e:7e:f3:77:f4:29:bf:c9:72:72:70:3b:cc:76: 83:8f:90:13:8c:07:c9:09:e0:0e:f6:b6:85:e1:01:b2:0c:a6: f6:8e:e1:9d:c1:1f:34:38:e1:7a:ea:3e:ad:c0:e2:42:1b:1c: d8:88:41:30:2c:23:6d:74:e5:92:8d:8c:e8:f8:24:91:29:81: 40:38:48:5b:52:50:72:0e:5c:64:78:dd:97:22:4e:27:9e:ce: 26:57:91:de:f6:ca:66:5a:93:60:ad:f8:cf:9a:a7:1f:e3:5d: fc:bf:95:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC10+7IhE42W3N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MzI5MzkyNjktNzBlOC00OTYxLThjOTctYzYwMWNjMGUyMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi4JHYd09mUHDbrbSl/tt7QEmGjfqVyT3OPu hee4f0t91+ipXx7EhrZLfvDJHS9eLT1/M6xGWZEC1Puwa65QWABBJmF2P1OKWz4T 696APug2gFQkjnU0QPz1jzkCR2jTobkHQYnBY6SduWBL8ILvcleJ+IUgC0DiwvLp XKVXRJujJMFtLoH22r4whuWxsXbCsf1dhjO+6XV6zMVeIZFOg5AEqdEUdf4FD2M8 S+lPUVLz0eTWmSqGiBDqRA67IyIddJWaMH8aKDobCqSd3WZStRsL7x1nxM27SF1n 5gUhQL1gnjwA7SY2RdDY0K6QNUzP5MEo12e8rQRXNowWPunMpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhHH9FXqOere/f5QJrbtgIEYbQaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvODViNTU5MWMtNzhmMy0z MjY0LWE0YTctMzIxNmIxODgyYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD701uBrBfLshTvJbUCBh/Cfn6qBGBAVjJJwJH2qYE9BX1UJ1hovcwNo dni9EbGQpcaRPyQx0zbh9OcC39BnwC8md+8RFUKtdWlpsHmXOGt1heG1bAqPOLnc itQDn2UzKdEmLurLP8QuuXW+2iV5NZ86DPWU6Ds8FfKFqe2S8wb5VO2CPwD8fxSM LkvKe/exotJxD6SOfvN39Cm/yXJycDvMdoOPkBOMB8kJ4A72toXhAbIMpvaO4Z3B HzQ44XrqPq3A4kIbHNiIQTAsI2105ZKNjOj4JJEpgUA4SFtSUHIOXGR43ZciTiee ziZXkd72ymZak2Ct+M+apx/jXfy/lQc= -----END CERTIFICATE-----Generated at Mon Aug 4 14:41:46 2025 by rpki-client