$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b078c3d5-b609-372c-80ae-caf4e8a0cafa.roa File: b078c3d5-b609-372c-80ae-caf4e8a0cafa.roa (raw, json) Hash identifier: zUEKRJuhhrF5hnoB0qYMbh/wb7CBI13vs7CK9cOdFM8= Subject key identifier: 96:BE:53:4E:82:14:D2:3F:C3:05:96:DC:49:C2:5C:2D:E7:60:3A:12 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AA85BA03EF4C0BAC9418A2B80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b078c3d5-b609-372c-80ae-caf4e8a0cafa.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 130.137.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:a0:3e:f4:c0:ba:c9:41:8a:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=36d05fa0-5419-4fb1-ac10-d87a85b35331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c3:54:6c:99:51:b8:71:c6:ec:1f:04:16:f8: 38:42:e0:2d:98:fd:d0:3c:0f:7a:79:06:b0:6d:35: a3:62:87:58:b6:e1:80:0b:c6:6f:ae:20:1a:f4:e9: 93:59:18:bf:0c:a6:58:21:33:6c:d7:1d:78:dc:b3: be:0b:6c:73:e3:9f:1b:c4:ba:dd:98:f4:5e:a1:83: 61:72:73:c1:17:18:59:ba:69:f4:b2:d4:58:b8:77: 42:57:91:41:93:46:29:38:a4:eb:15:65:75:f6:6c: ea:b4:2b:c2:c1:f9:a7:cf:39:4e:e6:1d:b6:59:b7: 2c:7f:04:2b:aa:6f:0e:fc:b2:c8:ca:df:c1:e3:82: 25:da:c9:32:dd:b1:c9:07:47:96:90:26:0b:55:55: a4:40:42:f1:9a:de:3c:2b:49:67:7d:81:05:0a:f6: 51:d3:59:34:da:e0:40:1f:38:5c:84:a7:3f:34:13: 01:7e:d1:ae:2d:e2:2c:25:cf:d2:53:b0:2b:e9:a0: 13:42:7e:67:ce:3f:f7:39:6b:3b:13:6e:ec:b2:31: a7:72:da:d6:b0:ad:97:23:8b:8c:03:ad:b5:62:10: 04:45:9d:eb:1f:77:dd:74:e0:96:02:37:33:e5:53: 1e:d8:c9:a0:f6:b8:57:01:5e:30:83:bb:67:5c:f5: ba:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BE:53:4E:82:14:D2:3F:C3:05:96:DC:49:C2:5C:2D:E7:60:3A:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b078c3d5-b609-372c-80ae-caf4e8a0cafa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:95:5f:5b:fe:8a:01:be:49:b4:b8:a2:63:4b:32:72:64:7b: 45:1f:92:0c:88:83:42:95:f6:1f:53:51:2f:96:bb:90:b0:88: fc:b3:0a:ec:3e:11:30:f4:47:41:1c:9f:30:7f:55:97:5b:7d: 92:e0:c9:24:4a:9d:70:b3:58:da:b9:03:39:f0:d4:bc:ec:f6: 31:fb:d2:21:65:e1:32:cd:10:a6:54:8f:f9:42:6d:e6:45:c9: 3b:0a:fd:7e:82:08:a1:78:9c:83:53:e4:ee:8d:0d:af:86:82: 46:a6:a3:f6:8b:eb:59:b2:6c:36:53:08:78:36:86:63:10:15: 70:9e:b5:f8:b7:35:a5:18:e9:d7:d3:cc:9e:da:d4:a4:62:dd: 14:9a:c3:4c:21:0c:de:ff:56:21:54:74:c1:cb:09:e3:37:8f: be:b4:b6:65:4c:eb:a6:66:d1:26:67:e3:f6:bb:b8:2e:d3:47: 4f:3a:eb:3e:ba:3c:a0:6e:de:da:a8:e9:ff:07:32:a2:19:c7: 29:9c:26:6a:60:e8:de:1f:b2:76:f8:ec:c3:8c:da:be:7a:90: c8:03:3b:d4:ae:18:58:6e:dc:c2:7d:c6:93:6c:6a:7c:75:ce: bf:84:93:dd:93:35:6c:7a:ff:94:45:e2:ff:0c:bc:c7:b8:e2: 97:40:11:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW6A+9MC6yUGKK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MzZkMDVmYTAtNTQxOS00ZmIxLWFjMTAtZDg3YTg1YjM1MzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisNUbJlRuHHG7B8EFvg4QuAtmP3QPA96eQaw bTWjYodYtuGAC8ZvriAa9OmTWRi/DKZYITNs1x143LO+C2xz458bxLrdmPReoYNh cnPBFxhZumn0stRYuHdCV5FBk0YpOKTrFWV19mzqtCvCwfmnzzlO5h22WbcsfwQr qm8O/LLIyt/B44Il2sky3bHJB0eWkCYLVVWkQELxmt48K0lnfYEFCvZR01k02uBA HzhchKc/NBMBftGuLeIsJc/SU7Ar6aATQn5nzj/3OWs7E27ssjGnctrWsK2XI4uM A621YhAERZ3rH3fddOCWAjcz5VMe2Mmg9rhXAV4wg7tnXPW67QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa+U06CFNI/wwWW3EnCXC3nYDoSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjA3OGMzZDUtYjYwOS0z NzJjLTgwYWUtY2FmNGU4YTBjYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuVX1v+igG+SbS4omNLMnJke0UfkgyIg0KV9h9TUS+Wu5CwiPyzCuw+ ETD0R0EcnzB/VZdbfZLgySRKnXCzWNq5Aznw1Lzs9jH70iFl4TLNEKZUj/lCbeZF yTsK/X6CCKF4nINT5O6NDa+Ggkamo/aL61mybDZTCHg2hmMQFXCetfi3NaUY6dfT zJ7a1KRi3RSaw0whDN7/ViFUdMHLCeM3j760tmVM66Zm0SZn4/a7uC7TR0866z66 PKBu3tqo6f8HMqIZxymcJmpg6N4fsnb47MOM2r56kMgDO9SuGFhu3MJ9xpNsanx1 zr+Ek92TNWx6/5RF4v8MvMe44pdAEck= -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:55 2025 by rpki-client