$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fd620fd2-2523-3659-87b8-bc7628c247fe.roa File: fd620fd2-2523-3659-87b8-bc7628c247fe.roa (raw, json) Hash identifier: NgGR8JLlJa+Td8RgZsAUVCbvaI3URJ9VGVHx3OgTmqI= Subject key identifier: CA:AD:8A:77:14:90:65:23:E4:0D:E0:6A:B1:34:E9:16:2A:C3:24:96 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AB650E8D462F3A08DE5BD8080 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fd620fd2-2523-3659-87b8-bc7628c247fe.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 16509 IP address blocks: 130.137.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:e8:d4:62:f3:a0:8d:e5:bd:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=d0c5881b-2242-41ed-a345-cb83926e6a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:c3:66:f4:15:06:d5:e3:6f:55:b3:62:a0: 07:06:a6:be:86:cb:1a:8a:81:f3:58:f1:c7:9c:6e: ae:b4:32:a8:a9:1c:9b:33:69:cd:57:22:2b:d0:da: 4b:b8:16:db:42:b2:04:4e:dc:68:a4:ed:02:02:84: 5c:e4:6f:ca:4d:3b:29:89:9b:2d:9f:92:84:58:52: d0:ea:49:d2:f4:99:b8:66:d9:cb:55:76:13:a2:89: e5:6f:98:45:5a:f6:c1:79:0b:f2:c9:0a:c7:18:83: e0:ce:86:93:4c:dc:20:c8:41:65:c3:cf:ac:0b:fe: e7:3d:0f:d9:7e:fb:cb:cb:34:01:fd:38:8c:ea:14: 3b:a2:a6:15:ae:f0:88:cc:bf:c2:18:d2:fc:ab:ed: 42:27:1d:05:31:8c:85:63:78:cf:e4:ad:35:9a:f3: 32:40:42:54:0b:d0:b1:8c:1c:c5:eb:00:fd:db:4c: 84:c6:44:56:1e:cc:d1:a4:36:f5:dc:45:6f:51:47: eb:56:00:10:f0:52:b4:73:dd:f3:d0:65:5a:55:df: cc:c2:01:46:0e:c3:7f:47:de:7c:45:7e:c3:19:36: 38:07:56:b8:e4:9e:a3:a9:09:be:ff:db:82:26:df: c1:86:d1:3e:ea:9a:6f:30:17:e9:f3:84:91:42:62: 19:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AD:8A:77:14:90:65:23:E4:0D:E0:6A:B1:34:E9:16:2A:C3:24:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fd620fd2-2523-3659-87b8-bc7628c247fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:68:4c:1e:99:52:56:19:05:c0:a2:ea:c8:24:c4:37:0a:95: 59:4a:ed:b5:a7:e7:b2:fc:b5:0f:b1:89:7e:0f:ff:cc:3b:35: 1b:26:f2:bf:04:46:22:ce:99:b1:70:a9:81:e8:df:89:dc:18: 93:de:38:13:7f:1a:29:8b:22:74:58:dd:76:4a:ee:72:3a:b4: 1c:5b:8c:9e:02:99:47:4b:51:fb:6b:94:c1:6c:0e:29:5c:82: 84:d2:80:e5:2c:15:c8:dc:58:27:58:94:5a:bd:c9:d7:6a:9f: 08:35:41:aa:b4:5d:ce:d8:ba:24:46:0d:da:8d:c2:c8:2c:04: 9e:b4:60:2c:4b:9e:d5:11:0c:25:7e:bf:ba:7f:5f:ab:72:27: a8:54:a6:a8:11:b7:10:fd:bc:e9:47:8e:d5:0a:e3:11:09:87: f5:17:48:99:69:fc:35:e1:77:e7:c2:50:29:aa:1e:93:58:2c: 90:f4:2a:77:62:11:96:52:1e:c3:36:01:5f:22:20:d4:01:e6: 58:cb:a8:c4:b5:7b:f5:89:ee:f0:67:51:2f:16:03:8e:41:39: 37:87:35:e8:d9:91:fc:f5:4f:60:25:f6:21:5b:06:3a:84:45: 70:03:b0:02:48:60:e3:a3:c9:70:10:33:3c:9a:12:68:bd:8d: ea:32:3e:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UOjUYvOgjeW9gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDBjNTg4MWItMjI0Mi00MWVkLWEzNDUtY2I4MzkyNmU2YTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh7DZvQVBtXjb1WzYqAHBqa+hssaioHzWPHH nG6utDKoqRybM2nNVyIr0NpLuBbbQrIETtxopO0CAoRc5G/KTTspiZstn5KEWFLQ 6knS9Jm4ZtnLVXYToonlb5hFWvbBeQvyyQrHGIPgzoaTTNwgyEFlw8+sC/7nPQ/Z fvvLyzQB/TiM6hQ7oqYVrvCIzL/CGNL8q+1CJx0FMYyFY3jP5K01mvMyQEJUC9Cx jBzF6wD920yExkRWHszRpDb13EVvUUfrVgAQ8FK0c93z0GVaVd/MwgFGDsN/R958 RX7DGTY4B1a45J6jqQm+/9uCJt/BhtE+6ppvMBfp84SRQmIZgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqtincUkGUj5A3garE06RYqwySWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZmQ2MjBmZDItMjUyMy0z NjU5LTg3YjgtYmM3NjI4YzI0N2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFoTB6ZUlYZBcCi6sgkxDcKlVlK7bWn57L8tQ+xiX4P/8w7NRsm8r8E RiLOmbFwqYHo34ncGJPeOBN/GimLInRY3XZK7nI6tBxbjJ4CmUdLUftrlMFsDilc goTSgOUsFcjcWCdYlFq9yddqnwg1Qaq0Xc7YuiRGDdqNwsgsBJ60YCxLntURDCV+ v7p/X6tyJ6hUpqgRtxD9vOlHjtUK4xEJh/UXSJlp/DXhd+fCUCmqHpNYLJD0Kndi EZZSHsM2AV8iINQB5ljLqMS1e/WJ7vBnUS8WA45BOTeHNejZkfz1T2Al9iFbBjqE RXADsAJIYOOjyXAQMzyaEmi9jeoyPtc= -----END CERTIFICATE-----Generated at Mon Aug 4 14:59:01 2025 by rpki-client