$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d3153884-6160-3477-8099-9c495c124829.roa File: d3153884-6160-3477-8099-9c495c124829.roa (raw, json) Hash identifier: +qa2oYbdXQP6/Tynk/j8mj7zkPukqJ6vRmzEkAT22uE= Subject key identifier: 8D:6E:99:4D:AD:1E:1C:3E:A1:3E:DD:64:8F:69:DA:6B:37:1C:73:0F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AA85BABF54EECE06A427CC000 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d3153884-6160-3477-8099-9c495c124829.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 130.137.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:ab:f5:4e:ec:e0:6a:42:7c:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=02a16c86-a42e-4ff3-b242-4e96b8028f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:05:6a:90:24:7c:50:22:6a:3d:2d:56:60: 6e:2b:57:6c:14:83:5e:64:50:b3:79:fa:e2:2f:40: c9:6f:1f:fc:cc:00:e4:4e:9f:da:41:54:af:6c:59: ad:c2:95:ed:e8:a2:a6:51:b7:d9:47:52:54:88:8e: 62:de:11:cd:13:14:96:cb:93:97:33:76:b1:c3:5a: e6:38:9e:7e:8f:65:9b:62:27:2f:38:5c:c4:00:fc: 40:03:67:51:9b:e9:7f:5a:9d:f4:ea:e5:36:cd:11: 10:2d:52:11:4d:2c:7e:03:d2:04:e2:75:a0:70:c1: 3e:03:f7:be:80:9f:ee:6f:f3:59:47:3d:cb:2a:d2: 89:af:b8:e7:5d:d2:8f:05:61:60:ea:49:55:ab:34: bf:9f:e6:5d:50:39:14:6b:0a:25:cd:50:9a:79:ee: 14:83:2f:f2:6d:07:75:23:e4:24:b0:09:63:db:34: 6d:c5:55:5d:f9:8e:a0:02:bd:19:16:56:c3:63:63: 99:07:c0:c5:d6:cb:dd:f2:36:ff:ae:bb:ec:58:6b: 11:da:cd:0b:e0:6d:e6:83:fe:5e:5f:70:cf:c8:99: af:61:de:01:0d:44:3c:41:3d:02:4e:6f:d8:ad:a3: dd:88:7b:be:54:70:0f:1f:aa:0a:e3:62:a6:34:1d: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6E:99:4D:AD:1E:1C:3E:A1:3E:DD:64:8F:69:DA:6B:37:1C:73:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d3153884-6160-3477-8099-9c495c124829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:3e:c4:3d:f9:40:90:b7:d1:2c:b6:f0:47:22:4e:a8:f0:1c: 39:68:98:fc:e0:6a:05:f6:fd:d0:8d:ce:a1:92:13:41:05:19: bc:96:fa:b5:9e:40:1c:d0:82:eb:e9:02:df:68:60:52:ba:6b: 72:a2:6f:8b:69:04:3d:2f:5c:87:50:b2:8e:7e:2a:a5:41:88: ab:36:71:94:3a:c0:d6:79:e8:05:87:fa:b4:50:41:7c:8d:82: 1b:d5:1c:4d:eb:06:e3:6e:e8:92:f4:19:f0:60:4f:4f:69:6d: 08:f0:ef:af:29:34:df:04:7d:5f:89:8d:c4:a7:9d:3a:d2:e3: ef:7d:f3:34:e4:2a:d7:39:f4:70:0f:8d:2a:73:16:69:7a:cc: 1d:c5:14:1b:2e:ed:0e:54:7e:53:29:af:5c:45:be:03:13:b6: a5:e6:06:b7:f8:35:c7:7d:b1:b3:09:84:52:05:a1:04:fe:57: a2:26:94:83:99:16:91:9a:07:80:b1:da:30:f1:08:a9:7a:ee: e1:db:a6:71:bb:fe:ad:77:7d:ee:74:a1:73:33:56:a9:7e:00: 87:4e:e5:b0:86:fa:92:28:97:71:8e:dc:ef:b0:e0:93:e3:53: 99:71:c0:25:30:a9:25:f9:30:2a:2c:a6:7c:b0:9d:90:70:3c: 66:63:ff:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW6v1TuzgakJ8wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MDJhMTZjODYtYTQyZS00ZmYzLWIyNDItNGU5NmI4MDI4ZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNEFapAkfFAiaj0tVmBuK1dsFINeZFCzefri L0DJbx/8zADkTp/aQVSvbFmtwpXt6KKmUbfZR1JUiI5i3hHNExSWy5OXM3axw1rm OJ5+j2WbYicvOFzEAPxAA2dRm+l/Wp306uU2zREQLVIRTSx+A9IE4nWgcME+A/e+ gJ/ub/NZRz3LKtKJr7jnXdKPBWFg6klVqzS/n+ZdUDkUawolzVCaee4Ugy/ybQd1 I+QksAlj2zRtxVVd+Y6gAr0ZFlbDY2OZB8DF1svd8jb/rrvsWGsR2s0L4G3mg/5e X3DPyJmvYd4BDUQ8QT0CTm/YraPdiHu+VHAPH6oK42KmNB1wFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1umU2tHhw+oT7dZI9p2ms3HHMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDMxNTM4ODQtNjE2MC0z NDc3LTgwOTktOWM0OTVjMTI0ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE+xD35QJC30Sy28EciTqjwHDlomPzgagX2/dCNzqGSE0EFGbyW+rWe QBzQguvpAt9oYFK6a3Kib4tpBD0vXIdQso5+KqVBiKs2cZQ6wNZ56AWH+rRQQXyN ghvVHE3rBuNu6JL0GfBgT09pbQjw768pNN8EfV+JjcSnnTrS4+998zTkKtc59HAP jSpzFml6zB3FFBsu7Q5UflMpr1xFvgMTtqXmBrf4Ncd9sbMJhFIFoQT+V6ImlIOZ FpGaB4Cx2jDxCKl67uHbpnG7/q13fe50oXMzVql+AIdO5bCG+pIol3GO3O+w4JPj U5lxwCUwqSX5MCospnywnZBwPGZj/+o= -----END CERTIFICATE-----Generated at Wed Aug 6 07:57:21 2025 by rpki-client