$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/999a1641-de76-3fbb-8fe1-f227dd2d0279.roa File: 999a1641-de76-3fbb-8fe1-f227dd2d0279.roa (raw, json) Hash identifier: 1yWbptUsyHYehkM+Nx1WVoh8IO4GtiC9lXvzSn3LxWQ= Subject key identifier: 68:E0:2A:DD:32:94:A8:73:61:DF:7D:09:16:ED:74:12:BC:CC:6C:B2 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584A9636899D1974DE22C2A51F80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/999a1641-de76-3fbb-8fe1-f227dd2d0279.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 14618 IP address blocks: 130.137.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:89:9d:19:74:de:22:c2:a5:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=e727c23a-5cf0-44e8-a1a4-35c06c4626fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:ad:a6:4d:29:31:ee:d1:91:01:45:60:da: ca:32:7f:84:45:ea:a0:ef:39:e7:84:9d:06:63:3c: e5:e8:ff:2e:45:6a:4e:f4:7e:29:dd:66:f5:76:0f: 33:07:ce:34:3f:61:a6:f9:63:31:27:b1:fe:d5:0c: 05:10:09:6c:c5:1b:c9:ae:ba:d8:e1:da:1f:d8:b1: 91:34:3e:af:14:19:15:cd:f8:d3:4f:5e:b4:57:62: 24:7d:7d:ba:45:52:59:d8:e3:e0:90:54:70:78:c8: b1:00:70:2c:6e:61:38:49:a1:76:4b:b9:2e:36:39: ca:ef:a6:da:2c:c5:3e:0d:8c:47:3a:dd:57:30:88: a9:ef:30:0d:e8:f1:55:e2:ac:a3:6d:b8:28:7e:50: ca:39:82:22:cf:e4:0d:93:f3:54:95:a9:dd:ea:7a: 29:4d:0e:dd:ec:0c:2d:4c:4b:53:67:d9:18:b9:9d: ef:2d:6b:41:36:63:b1:0c:b7:06:67:2c:d2:24:73: c3:d4:75:b4:64:b5:04:e5:44:5c:43:02:96:11:25: 95:7c:99:a2:ef:07:c5:73:8c:98:d3:2d:46:88:40: 6f:ec:1a:e7:54:8b:bf:f7:a9:37:73:52:a3:21:32: 35:00:2a:d4:b2:15:11:5a:20:97:19:47:7c:68:68: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E0:2A:DD:32:94:A8:73:61:DF:7D:09:16:ED:74:12:BC:CC:6C:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/999a1641-de76-3fbb-8fe1-f227dd2d0279.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:0e:9f:3f:dd:96:22:8e:a1:f2:e9:b0:3f:7b:e7:b5:80:c1: 70:0a:5b:a3:dc:c3:7a:a7:c8:2c:c2:c3:6a:e6:1e:48:cd:69: 4c:11:d4:6b:ed:99:59:b8:c0:e8:c4:84:6e:37:76:a0:98:85: 25:d5:6c:35:19:40:da:d4:a8:c9:82:41:ae:ce:92:cb:25:a8: cf:6f:c4:75:93:9a:9c:4e:a8:03:c6:0c:15:50:c7:90:31:17: 24:5b:04:21:75:32:69:0b:94:06:c0:58:3d:58:a0:d6:e7:db: 8c:d3:61:b0:68:be:3a:2a:cc:77:2b:c4:98:49:91:af:b6:e8: b3:c8:98:bd:8c:df:f6:12:ca:d6:b6:12:90:9a:34:ce:8d:9a: 9c:81:83:29:fb:ef:70:3b:4a:29:80:09:b2:c3:86:a7:96:4c: fb:e8:54:23:8f:d8:f2:45:eb:0d:ca:14:d8:92:09:33:c5:3a: 51:ae:7a:6c:37:91:e0:54:75:6c:6e:e0:d7:cd:87:3c:a3:1c: d7:91:ad:f0:5c:2b:22:c4:d1:be:b2:f4:09:2b:62:24:bf:36: 62:f2:1f:55:d9:25:f7:b4:2c:3e:e0:41:53:a9:ab:99:94:9f: 9e:5d:e1:23:30:4d:1e:82:a5:de:f0:32:2a:dc:fa:fb:21:18: 32:86:5c:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNomdGXTeIsKlH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZTcyN2MyM2EtNWNmMC00NGU4LWExYTQtMzVjMDZjNDYyNmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvWtpk0pMe7RkQFFYNrKMn+EReqg7znnhJ0G Yzzl6P8uRWpO9H4p3Wb1dg8zB840P2Gm+WMxJ7H+1QwFEAlsxRvJrrrY4dof2LGR ND6vFBkVzfjTT160V2IkfX26RVJZ2OPgkFRweMixAHAsbmE4SaF2S7kuNjnK76ba LMU+DYxHOt1XMIip7zAN6PFV4qyjbbgoflDKOYIiz+QNk/NUland6nopTQ7d7Awt TEtTZ9kYuZ3vLWtBNmOxDLcGZyzSJHPD1HW0ZLUE5URcQwKWESWVfJmi7wfFc4yY 0y1GiEBv7BrnVIu/96k3c1KjITI1ACrUshURWiCXGUd8aGi6nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjgKt0ylKhzYd99CRbtdBK8zGyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTk5YTE2NDEtZGU3Ni0z ZmJiLThmZTEtZjIyN2RkMmQwMjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0Onz/dliKOofLpsD9757WAwXAKW6Pcw3qnyCzCw2rmHkjNaUwR1Gvt mVm4wOjEhG43dqCYhSXVbDUZQNrUqMmCQa7OksslqM9vxHWTmpxOqAPGDBVQx5Ax FyRbBCF1MmkLlAbAWD1YoNbn24zTYbBovjoqzHcrxJhJka+26LPImL2M3/YSyta2 EpCaNM6NmpyBgyn773A7SimACbLDhqeWTPvoVCOP2PJF6w3KFNiSCTPFOlGuemw3 keBUdWxu4NfNhzyjHNeRrfBcKyLE0b6y9AkrYiS/NmLyH1XZJfe0LD7gQVOpq5mU n55d4SMwTR6Cpd7wMirc+vshGDKGXPg= -----END CERTIFICATE-----Generated at Mon Aug 4 15:01:56 2025 by rpki-client