$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d7a89449-9bc1-3044-8983-45d70bf07899.roa File: d7a89449-9bc1-3044-8983-45d70bf07899.roa (raw, json) Hash identifier: qRhSwEOnH3Q2sJLQN8QUcYUDscxgBnb/HG5vEvgVqCs= Subject key identifier: 50:F8:96:86:6C:F5:9D:3D:70:80:FB:6E:51:7C:37:C5:19:89:44:04 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584A9636897C0947322BF4C0BA80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d7a89449-9bc1-3044-8983-45d70bf07899.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 14618 IP address blocks: 130.137.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:89:7c:09:47:32:2b:f4:c0:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=fd598200-92c1-468e-af5a-7a4266d405f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:aa:25:91:70:6d:59:06:e3:ae:68:59:8c: 03:49:f0:74:41:5e:cf:2d:85:a8:14:d6:5c:54:01: 14:62:64:36:c5:96:4e:52:fe:92:e5:9d:cd:b4:93: f2:92:80:6c:cc:5e:1a:18:2b:1a:6c:e5:89:b3:3a: 7f:fe:07:0c:a4:b8:7c:1b:19:5f:8b:3c:b8:37:ed: 1e:a6:1e:ec:f6:f6:a8:82:76:6b:bc:06:ee:b7:9f: 70:73:d7:f1:db:63:5c:1c:4b:f4:38:29:9e:08:dd: f4:e8:b2:5d:18:4e:6a:32:15:a8:76:ca:29:b7:6b: 70:e5:be:88:38:5d:b6:8e:fd:8e:e9:30:9d:fc:ff: a1:82:c6:5d:f1:29:a0:26:19:f3:2c:f8:83:13:94: 46:de:9f:f2:37:a1:c8:8d:93:60:44:ba:9c:7d:d2: 12:b8:38:2f:b7:a6:85:8c:63:9e:4d:f3:6e:6b:b5: cc:86:3a:98:81:23:03:5d:52:bd:1e:29:99:0c:62: 0c:90:61:e9:b8:81:bb:ed:a8:f8:55:07:86:18:9c: a4:f1:03:8d:c2:e7:39:06:2e:08:13:02:18:a7:22: b2:d6:d1:84:43:96:dd:5a:05:84:5b:87:19:13:91: 65:6c:af:d5:99:76:dc:b1:84:f5:13:80:5a:21:2d: 2f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F8:96:86:6C:F5:9D:3D:70:80:FB:6E:51:7C:37:C5:19:89:44:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d7a89449-9bc1-3044-8983-45d70bf07899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a2:c0:d3:b7:63:7a:df:b1:f8:da:31:63:72:15:45:9d:3f: ff:fc:d1:ec:36:7d:94:a2:ca:f9:52:1a:ad:19:32:7d:f4:d0: 60:ba:7e:6a:9e:e7:04:b4:47:2b:86:22:f1:98:29:2c:68:6f: 77:f3:da:55:f9:09:91:6e:10:0f:a6:e1:7b:43:58:2d:83:b9: fa:05:9f:db:0d:48:bb:ab:a8:7e:3e:3d:85:fc:dc:dd:cf:a9: ea:18:2a:e5:6c:f5:db:1b:c2:06:93:62:56:79:ce:79:18:98: bb:af:5a:6f:f7:7b:75:c1:c5:19:6d:8d:a9:67:87:9f:a6:ac: 32:9b:ac:6c:36:05:c9:ef:54:1f:92:95:eb:cf:e8:ef:95:ef: 08:92:70:5f:98:93:47:b3:4f:a8:18:fc:26:05:21:1f:06:e1: 41:ea:1b:e7:c5:6c:f0:b9:3d:ed:1b:58:1a:0b:57:9a:3b:eb: 18:72:d5:ed:d6:22:a8:ab:38:e3:98:ed:d0:98:07:dd:ed:28: c7:33:d2:a0:28:14:56:12:cb:8a:f0:89:5e:02:b0:b9:03:18: 33:f7:0f:bb:34:dc:9e:74:b8:5e:9f:67:05:ba:ae:84:76:e6: eb:10:48:50:be:b7:ac:ed:2a:ac:6c:c7:35:7f:1f:e8:70:2c: 4e:35:bc:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNol8CUcyK/TAuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZmQ1OTgyMDAtOTJjMS00NjhlLWFmNWEtN2E0MjY2ZDQwNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsGqJZFwbVkG465oWYwDSfB0QV7PLYWoFNZc VAEUYmQ2xZZOUv6S5Z3NtJPykoBszF4aGCsabOWJszp//gcMpLh8Gxlfizy4N+0e ph7s9vaognZrvAbut59wc9fx22NcHEv0OCmeCN306LJdGE5qMhWodsopt2tw5b6I OF22jv2O6TCd/P+hgsZd8SmgJhnzLPiDE5RG3p/yN6HIjZNgRLqcfdISuDgvt6aF jGOeTfNua7XMhjqYgSMDXVK9HimZDGIMkGHpuIG77aj4VQeGGJyk8QONwuc5Bi4I EwIYpyKy1tGEQ5bdWgWEW4cZE5FlbK/VmXbcsYT1E4BaIS0vLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFD4loZs9Z09cID7blF8N8UZiUQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDdhODk0NDktOWJjMS0z MDQ0LTg5ODMtNDVkNzBiZjA3ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOiwNO3Y3rfsfjaMWNyFUWdP//80ew2fZSiyvlSGq0ZMn300GC6fmqe 5wS0RyuGIvGYKSxob3fz2lX5CZFuEA+m4XtDWC2DufoFn9sNSLurqH4+PYX83N3P qeoYKuVs9dsbwgaTYlZ5znkYmLuvWm/3e3XBxRltjalnh5+mrDKbrGw2BcnvVB+S levP6O+V7wiScF+Yk0ezT6gY/CYFIR8G4UHqG+fFbPC5Pe0bWBoLV5o76xhy1e3W IqirOOOY7dCYB93tKMcz0qAoFFYSy4rwiV4CsLkDGDP3D7s03J50uF6fZwW6roR2 5usQSFC+t6ztKqxsxzV/H+hwLE41vEk= -----END CERTIFICATE-----Generated at Mon Aug 4 16:11:50 2025 by rpki-client