$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa File: b8891b9b-22d6-354f-9592-c7a2be892635.roa (raw, json) Hash identifier: NXDZ3PXPrWQwtfWtfVEpgmlB6KmTv1tYySVvE2Y99ro= Subject key identifier: 16:BB:59:D9:91:DC:C0:27:EC:C4:60:8D:8A:1E:C6:54:39:AD:27:9D Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AA85BA00F41F6EDBE1222E680 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 130.137.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:a0:0f:41:f6:ed:be:12:22:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=c6bf6ec9-9c92-42ad-9958-9d9f8395f9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:4d:82:d7:09:95:bd:3b:0d:08:e4:9f:74: 74:a1:78:d2:db:8c:4b:0e:cd:23:02:ed:30:3e:64: ed:3c:f2:22:21:78:9d:ce:53:4e:68:5d:e4:55:ae: 29:4a:96:0b:a5:c9:e5:5a:5b:55:2f:2f:bf:48:0a: c7:06:1e:4a:b0:35:98:79:9c:4a:63:5a:a4:90:81: f7:cf:f6:90:5f:b2:b5:91:c2:7c:62:99:32:fd:36: 27:e3:6d:d8:d9:2d:d2:13:ec:a0:5a:30:f4:f3:24: b8:a0:30:4b:25:e9:6b:00:a9:4e:ac:33:2a:89:51: ed:59:5f:f6:76:03:c2:a4:c1:20:a4:e5:7e:18:50: 8b:cc:1f:58:d6:42:1a:aa:49:cd:46:cb:31:c4:25: 78:92:4f:64:17:1f:9a:45:fd:8d:e9:4f:7d:27:41: fa:3a:55:cc:35:23:2b:5e:c5:23:c1:dc:9a:26:ce: b1:67:44:1e:e1:8a:4b:7c:6e:5e:24:b8:fe:44:7a: 40:40:7c:f1:fa:55:e5:17:29:23:a8:a2:66:57:c7: c8:16:ec:40:7b:3f:d6:5f:ea:10:3a:e8:00:60:94: f3:96:cb:ee:b9:65:3b:65:b3:6b:04:28:62:fe:10: 73:57:3a:80:77:91:ab:67:1d:09:6a:db:f9:7f:88: 04:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BB:59:D9:91:DC:C0:27:EC:C4:60:8D:8A:1E:C6:54:39:AD:27:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b3:96:e5:71:46:4e:d1:bd:01:9e:a9:70:ce:11:e7:0c:42: 99:26:f8:19:ff:0f:db:ac:03:2b:47:7e:7d:39:cc:ca:9a:84: f5:eb:0e:1c:0c:c8:50:3d:68:66:15:1f:7a:31:a2:24:03:4a: 63:4e:67:1a:49:ad:00:eb:e6:ab:3c:1f:f9:37:d4:6c:86:fb: 13:d8:5f:48:0a:ec:f6:3c:64:f4:32:ee:03:23:5b:03:6d:9b: 43:7f:17:d4:4a:5b:15:cb:f3:c6:f8:93:4f:39:65:6f:dc:7a: 35:fc:3a:97:a4:11:d7:6e:32:e1:8d:fa:94:8a:33:a2:36:55: 34:99:51:2a:32:58:a0:ac:5a:e5:ed:88:0a:9a:99:db:96:58: 1d:49:b9:6b:6c:90:ff:e4:4b:fc:9d:eb:7f:b8:ef:ed:b5:d9: 69:f4:ce:46:71:63:66:87:2d:35:1a:62:eb:a3:7f:d4:de:60: 71:89:df:6a:f0:d8:78:07:79:f3:3d:08:9d:f7:78:6d:53:3a: 08:78:f3:03:c4:84:b4:8d:4c:2a:85:ef:26:72:21:55:64:85: 72:3b:3a:1e:5f:ff:22:48:22:05:2b:e1:b3:2c:29:8d:00:0a: ef:70:7f:eb:63:71:b2:6c:c8:92:40:45:0b:7b:70:d5:29:77: 18:ed:3a:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW6APQfbtvhIi5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk YzZiZjZlYzktOWM5Mi00MmFkLTk5NTgtOWQ5ZjgzOTVmOWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEVNgtcJlb07DQjkn3R0oXjS24xLDs0jAu0w PmTtPPIiIXidzlNOaF3kVa4pSpYLpcnlWltVLy+/SArHBh5KsDWYeZxKY1qkkIH3 z/aQX7K1kcJ8Ypky/TYn423Y2S3SE+ygWjD08yS4oDBLJelrAKlOrDMqiVHtWV/2 dgPCpMEgpOV+GFCLzB9Y1kIaqknNRssxxCV4kk9kFx+aRf2N6U99J0H6OlXMNSMr XsUjwdyaJs6xZ0Qe4YpLfG5eJLj+RHpAQHzx+lXlFykjqKJmV8fIFuxAez/WX+oQ OugAYJTzlsvuuWU7ZbNrBChi/hBzVzqAd5GrZx0Jatv5f4gEawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa7WdmR3MAn7MRgjYoexlQ5rSedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjg4OTFiOWItMjJkNi0z NTRmLTk1OTItYzdhMmJlODkyNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6zluVxRk7RvQGeqXDOEecMQpkm+Bn/D9usAytHfn05zMqahPXrDhwM yFA9aGYVH3oxoiQDSmNOZxpJrQDr5qs8H/k31GyG+xPYX0gK7PY8ZPQy7gMjWwNt m0N/F9RKWxXL88b4k085ZW/cejX8OpekEdduMuGN+pSKM6I2VTSZUSoyWKCsWuXt iAqamduWWB1JuWtskP/kS/yd63+47+212Wn0zkZxY2aHLTUaYuujf9TeYHGJ32rw 2HgHefM9CJ33eG1TOgh48wPEhLSNTCqF7yZyIVVkhXI7Oh5f/yJIIgUr4bMsKY0A Cu9wf+tjcbJsyJJARQt7cNUpdxjtOlg= -----END CERTIFICATE-----Generated at Mon Aug 4 15:36:16 2025 by rpki-client