$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ac6c5b1-6113-336e-9800-aec40e75f251.roa File: 2ac6c5b1-6113-336e-9800-aec40e75f251.roa (raw, json) Hash identifier: Pd2k/kAYIy/W/zWWMrxBq9j8OQAZHY0hr0hThHjH87E= Subject key identifier: 91:75:B7:F4:60:1B:FE:1A:E3:8F:D5:72:5A:77:C5:14:B0:0F:05:55 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B13D6AF52E8944B05865F5E00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ac6c5b1-6113-336e-9800-aec40e75f251.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:af:52:e8:94:4b:05:86:5f:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=df2214a3-5090-4a52-83cd-70638096299c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:6e:68:92:94:b2:c6:20:3a:63:d5:f8:94: 78:96:ec:6c:78:79:62:c0:22:83:22:72:e1:bb:8a: 7c:72:a7:0c:82:95:0b:e4:c4:47:59:3c:af:ee:c5: eb:6e:54:87:23:42:0d:71:96:43:42:09:88:e4:4c: 61:f1:4e:04:fd:c8:4a:e2:34:be:1e:22:65:bf:e7: 11:08:a5:32:08:a4:9e:1c:bd:66:da:33:a7:76:5d: 6e:93:59:84:4e:b9:97:70:58:97:7b:0d:a5:b0:a4: da:70:9f:d1:56:91:c6:e4:6a:84:92:35:99:73:cc: fc:37:07:16:70:9a:13:79:1a:6b:b3:19:5f:38:e1: d3:09:f6:c5:94:cc:26:18:b0:76:7a:c5:7a:5e:3c: 97:7f:b8:cd:ad:da:a7:a9:e8:03:17:3c:35:30:ee: 7d:7c:30:47:4a:93:5b:a9:0b:4c:d8:aa:fc:bc:77: 9d:b7:42:05:21:77:bf:70:3b:fa:2b:28:78:b8:c9: 9a:77:48:4a:d7:4a:7f:ac:8d:7c:1b:4a:47:f4:3f: f4:99:a9:0e:36:7d:74:7f:e8:03:dc:b2:26:5a:ad: fa:11:47:56:12:04:91:36:15:9b:8c:92:f4:9f:97: 89:87:81:c7:95:b3:1d:2b:f7:1d:48:04:6a:d7:95: 80:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:75:B7:F4:60:1B:FE:1A:E3:8F:D5:72:5A:77:C5:14:B0:0F:05:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ac6c5b1-6113-336e-9800-aec40e75f251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:26:b7:9f:b4:0b:af:e6:8b:69:e5:31:fa:87:56:2f:74:37: 7d:ba:48:90:c3:77:b9:2f:d1:43:9b:01:c9:cb:64:92:1a:37: dd:e1:de:6a:3e:b7:26:63:46:ff:6f:7e:95:dc:c6:7a:44:55: ef:df:1f:42:40:16:38:7e:9d:97:ef:b5:0c:85:69:b2:e2:75: e0:cd:14:38:04:d8:13:21:b3:b0:f0:fd:8c:e0:86:76:70:6e: 3f:6f:84:35:21:bf:84:30:da:6c:47:d7:db:a3:69:3c:55:7f: 6c:1f:22:4a:07:7c:89:0d:86:97:72:27:6b:f4:6e:31:ba:f3: 7b:7a:ba:cc:03:1d:94:15:7c:9f:e2:de:38:87:55:92:6c:3d: d8:a1:e1:85:d2:9c:8f:e6:d7:c9:5b:9d:24:9c:97:56:54:80: d5:f2:08:ad:1d:d4:13:fc:18:b4:41:82:5b:d8:47:44:cc:b0: 4d:54:fb:cb:1e:04:da:9c:6b:26:a0:0c:92:bc:ec:73:94:a6: 21:e5:36:4f:31:82:e1:23:64:72:b0:a8:19:b3:90:8e:7b:08: ab:66:b2:4f:b5:4e:0d:49:f9:64:ca:5f:c3:0e:1b:1c:ee:3e: 61:ab:21:c6:92:19:2a:ed:2f:6c:f9:0a:63:80:3d:9a:64:84: 31:93:d8:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1q9S6JRLBYZfXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZGYyMjE0YTMtNTA5MC00YTUyLTgzY2QtNzA2MzgwOTYyOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAluaJKUssYgOmPV+JR4luxseHliwCKDInLh u4p8cqcMgpUL5MRHWTyv7sXrblSHI0INcZZDQgmI5Exh8U4E/chK4jS+HiJlv+cR CKUyCKSeHL1m2jOndl1uk1mETrmXcFiXew2lsKTacJ/RVpHG5GqEkjWZc8z8NwcW cJoTeRprsxlfOOHTCfbFlMwmGLB2esV6XjyXf7jNrdqnqegDFzw1MO59fDBHSpNb qQtM2Kr8vHedt0IFIXe/cDv6Kyh4uMmad0hK10p/rI18G0pH9D/0makONn10f+gD 3LImWq36EUdWEgSRNhWbjJL0n5eJh4HHlbMdK/cdSARq15WA3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJF1t/RgG/4a44/Vclp3xRSwDwVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmFjNmM1YjEtNjExMy0z MzZlLTk4MDAtYWVjNDBlNzVmMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgmt5+0C6/mi2nlMfqHVi90N326SJDDd7kv0UObAcnLZJIaN93h3mo+ tyZjRv9vfpXcxnpEVe/fH0JAFjh+nZfvtQyFabLideDNFDgE2BMhs7Dw/YzghnZw bj9vhDUhv4Qw2mxH19ujaTxVf2wfIkoHfIkNhpdyJ2v0bjG683t6uswDHZQVfJ/i 3jiHVZJsPdih4YXSnI/m18lbnSScl1ZUgNXyCK0d1BP8GLRBglvYR0TMsE1U+8se BNqcayagDJK87HOUpiHlNk8xguEjZHKwqBmzkI57CKtmsk+1Tg1J+WTKX8MOGxzu PmGrIcaSGSrtL2z5CmOAPZpkhDGT2Ac= -----END CERTIFICATE-----Generated at Thu Sep 18 05:24:56 2025 by rpki-client