$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b08c318-5db7-308c-86b2-5b5466ad5b0d.roa File: 2b08c318-5db7-308c-86b2-5b5466ad5b0d.roa (raw, json) Hash identifier: cW+3dcFJ/82q4ntsO2P/hHCFMIDPqaUEAHyeDgSMBj8= Subject key identifier: 14:85:DA:6C:A3:DB:5A:24:78:1C:6C:6E:29:57:9F:49:D3:05:9D:CF Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B715CB630C06F4E8FA5606740 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b08c318-5db7-308c-86b2-5b5466ad5b0d.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 130.137.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b6:30:c0:6f:4e:8f:a5:60:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=8b888532-f550-413e-801d-d40fc6fc821d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1e:57:c1:85:6e:ec:7a:40:59:46:9e:a8:c4: c9:30:dd:af:90:bc:d2:dc:61:91:42:5b:d4:0c:1d: 7f:38:64:cd:64:dd:bc:f2:a2:92:4a:93:69:b4:5c: ab:25:8e:26:8f:37:c7:b9:4a:87:ee:dd:fb:9f:c6: 0f:b5:cd:3a:13:48:ac:a6:6e:67:ba:04:1f:76:0e: 2d:45:6b:0a:18:23:4c:6e:9e:1c:55:e7:24:ad:00: b9:5b:bf:b5:71:4b:2b:ef:4f:55:c8:42:a1:b2:c4: 9a:a1:95:1a:81:1b:7f:e4:96:d9:a5:1d:4f:d9:66: 16:0b:6a:24:67:35:d0:b1:3b:f7:0c:13:9e:2a:ab: 76:ee:75:25:19:f2:04:b4:4c:6d:14:9c:b1:50:da: 07:1a:e7:33:9e:cc:c4:b6:c4:30:a2:fd:f3:fe:12: d5:59:79:72:8b:37:3e:be:eb:4e:0f:a4:b1:48:9f: aa:f5:87:07:80:14:ce:56:d9:6a:8b:f1:f1:3b:0c: 60:02:49:9c:42:15:cb:fa:3c:88:81:2b:18:b2:b8: 27:6b:45:c7:76:14:ca:30:e2:94:82:27:8c:b1:bb: 67:f2:5c:1d:b9:a6:41:3b:b2:88:32:06:63:c3:88: a1:f7:6a:4a:63:9d:d3:e1:f1:c3:bc:24:c1:32:6b: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:85:DA:6C:A3:DB:5A:24:78:1C:6C:6E:29:57:9F:49:D3:05:9D:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b08c318-5db7-308c-86b2-5b5466ad5b0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d6:00:48:d7:9d:31:55:80:b9:37:fd:c3:d1:71:42:c1:35: bb:2c:66:3d:0a:01:f5:43:9d:9e:af:f3:cc:79:a9:73:2c:e8: 52:d7:08:da:f4:ef:ed:bd:5e:30:2f:36:93:e9:20:78:cb:bf: a1:81:05:b2:6c:05:56:3e:e0:21:02:81:d5:61:93:62:94:d9: 42:fa:9b:a4:71:76:17:31:75:aa:a9:f5:1e:9c:c4:bc:16:ad: d3:81:1d:8a:01:08:7a:9e:0d:b6:19:88:c6:84:36:44:c9:2a: d6:bc:53:46:6d:9e:85:10:62:fd:a1:4f:a2:b8:ee:a3:7d:d9: 5c:08:0c:39:f1:f0:fa:5a:fd:73:96:94:f9:f6:63:d7:af:2c: 28:f1:b9:39:1e:82:52:3a:d8:5f:1e:08:12:f3:9b:0a:3f:74: 7f:2e:9d:45:52:d0:68:6c:df:87:81:4c:8c:8b:d6:a2:d8:a7: 8d:41:8d:0d:5d:de:15:a7:91:b2:3f:42:af:95:88:4d:ae:02: e1:ef:35:e8:99:97:6a:80:d3:b4:26:7a:47:5a:60:46:68:64: 0d:74:bb:c6:a6:59:bc:5d:66:df:b2:ba:06:ea:35:14:e2:c6: 55:e4:20:c9:6f:9b:6c:de:1f:f0:1d:aa:3f:dd:1a:8d:35:35: ee:61:09:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLYwwG9Oj6VgZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OGI4ODg1MzItZjU1MC00MTNlLTgwMWQtZDQwZmM2ZmM4MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR5XwYVu7HpAWUaeqMTJMN2vkLzS3GGRQlvU DB1/OGTNZN288qKSSpNptFyrJY4mjzfHuUqH7t37n8YPtc06E0ispm5nugQfdg4t RWsKGCNMbp4cVeckrQC5W7+1cUsr709VyEKhssSaoZUagRt/5JbZpR1P2WYWC2ok ZzXQsTv3DBOeKqt27nUlGfIEtExtFJyxUNoHGucznszEtsQwov3z/hLVWXlyizc+ vutOD6SxSJ+q9YcHgBTOVtlqi/HxOwxgAkmcQhXL+jyIgSsYsrgna0XHdhTKMOKU gieMsbtn8lwduaZBO7KIMgZjw4ih92pKY53T4fHDvCTBMmssVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSF2myj21okeBxsbilXn0nTBZ3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmIwOGMzMTgtNWRiNy0z MDhjLTg2YjItNWI1NDY2YWQ1YjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPWAEjXnTFVgLk3/cPRcULBNbssZj0KAfVDnZ6v88x5qXMs6FLXCNr0 7+29XjAvNpPpIHjLv6GBBbJsBVY+4CECgdVhk2KU2UL6m6Rxdhcxdaqp9R6cxLwW rdOBHYoBCHqeDbYZiMaENkTJKta8U0ZtnoUQYv2hT6K47qN92VwIDDnx8Ppa/XOW lPn2Y9evLCjxuTkeglI62F8eCBLzmwo/dH8unUVS0Ghs34eBTIyL1qLYp41BjQ1d 3hWnkbI/Qq+ViE2uAuHvNeiZl2qA07QmekdaYEZoZA10u8amWbxdZt+yugbqNRTi xlXkIMlvm2zeH/Adqj/dGo01Ne5hCV0= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:53 2025 by rpki-client