$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3bb3e20f-00e6-37fe-ba30-5a49ac29c508.roa File: 3bb3e20f-00e6-37fe-ba30-5a49ac29c508.roa (raw, json) Hash identifier: ciSnc4bkez8qKlqQJ1lvZPt29TF9cgN9VteYLCyPdow= Subject key identifier: 8D:91:D8:1B:2A:C8:38:75:21:E2:27:37:E6:B9:D5:DC:0A:6C:88:CB Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADA9BB86C7CCECD6C66332C80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3bb3e20f-00e6-37fe-ba30-5a49ac29c508.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 8987 IP address blocks: 130.137.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b8:6c:7c:ce:cd:6c:66:33:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=5c5b2a4c-667e-431e-be94-64c980041a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:8b:fa:de:a0:2f:e4:f2:76:01:3b:72:7d: 06:42:bb:24:31:a0:ed:c4:47:bc:ee:b5:c8:48:bd: af:cf:b2:4e:49:ed:ea:b8:66:57:92:7a:c3:cf:93: aa:28:5d:fb:e0:0c:05:e4:86:90:2b:3f:7d:1b:38: 4b:04:63:3e:0a:0b:5e:cd:ca:47:a4:f1:64:38:b8: 3d:55:75:1b:f1:c6:c0:1c:b3:0e:fb:2e:35:46:61: 6f:a3:cb:be:6f:18:06:32:19:cb:a7:2b:05:06:4d: 8a:91:f4:bc:bc:78:d6:ef:07:91:4b:cd:89:13:e2: cb:83:91:1d:36:bd:21:c5:d8:61:4b:3a:eb:2b:17: 77:f2:88:d9:18:18:c1:d1:5b:24:7d:0f:60:85:f3: f8:17:56:76:13:36:10:7e:ac:00:e8:e9:6c:6a:13: 85:7b:b7:91:dc:bf:27:76:73:df:3f:14:24:d7:e0: 48:f4:d7:64:ab:e8:fc:58:c5:51:bd:15:34:bd:af: 8a:7f:e6:4e:53:94:13:ba:42:5b:e8:f3:e9:f3:02: aa:19:fc:ac:05:94:a1:95:e5:2f:7c:42:53:75:36: 62:db:34:f5:4d:6a:13:62:21:09:02:30:7d:2e:7b: d4:ae:ef:18:ec:41:66:4d:d6:e1:57:60:63:4b:b0: 5c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:91:D8:1B:2A:C8:38:75:21:E2:27:37:E6:B9:D5:DC:0A:6C:88:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3bb3e20f-00e6-37fe-ba30-5a49ac29c508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d4:8e:e6:0c:53:b4:99:b5:a8:2e:2a:3a:f6:76:41:3e:00: 36:b6:43:37:b7:35:1a:f0:b0:03:77:b2:cd:ef:a8:e3:d0:dd: eb:31:5b:71:b1:1d:d8:d4:2c:38:ca:11:76:80:9b:13:31:d4: e2:19:b5:70:8f:3a:5d:66:be:48:56:0e:11:3c:47:af:a8:7d: e8:e5:3e:fd:4d:84:07:b4:7c:09:2d:1a:13:b7:19:c4:9c:4a: ed:98:ba:2e:99:75:ff:66:13:99:ba:81:53:b0:ee:c6:fe:07: eb:58:78:64:6a:c3:87:55:52:27:ea:5d:f0:02:2c:84:f1:97: b4:d9:bb:2d:1f:02:2e:10:27:ed:29:ae:7a:de:a4:5f:a4:7c: 49:bc:52:8a:b3:51:ac:b8:9f:8d:29:91:8f:b8:cc:71:c4:fb: d7:28:e0:db:c1:9c:37:29:e3:cd:28:fc:2b:88:b4:a9:20:6f: a6:28:c2:3f:2d:6c:88:87:6b:33:31:4d:25:2d:14:97:c1:cc: 13:cd:5f:36:78:b1:26:52:9a:d5:9e:ce:03:e9:29:39:b4:89: 68:13:4c:8d:72:77:45:85:ce:b4:c0:88:e4:d4:8e:47:fb:ce: 0c:d5:60:98:96:5e:be:57:96:08:f4:3b:23:d9:1f:9b:6e:4f: a0:90:66:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram7hsfM7NbGYzLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk NWM1YjJhNGMtNjY3ZS00MzFlLWJlOTQtNjRjOTgwMDQxYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRWL+t6gL+TydgE7cn0GQrskMaDtxEe87rXI SL2vz7JOSe3quGZXknrDz5OqKF374AwF5IaQKz99GzhLBGM+CgtezcpHpPFkOLg9 VXUb8cbAHLMO+y41RmFvo8u+bxgGMhnLpysFBk2KkfS8vHjW7weRS82JE+LLg5Ed Nr0hxdhhSzrrKxd38ojZGBjB0VskfQ9ghfP4F1Z2EzYQfqwA6OlsahOFe7eR3L8n dnPfPxQk1+BI9Ndkq+j8WMVRvRU0va+Kf+ZOU5QTukJb6PPp8wKqGfysBZShleUv fEJTdTZi2zT1TWoTYiEJAjB9LnvUru8Y7EFmTdbhV2BjS7Bc0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2R2BsqyDh1IeInN+a51dwKbIjLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvM2JiM2UyMGYtMDBlNi0z N2ZlLWJhMzAtNWE0OWFjMjljNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnUjuYMU7SZtaguKjr2dkE+ADa2Qze3NRrwsAN3ss3vqOPQ3esxW3Gx HdjULDjKEXaAmxMx1OIZtXCPOl1mvkhWDhE8R6+ofejlPv1NhAe0fAktGhO3GcSc Su2Yui6Zdf9mE5m6gVOw7sb+B+tYeGRqw4dVUifqXfACLITxl7TZuy0fAi4QJ+0p rnrepF+kfEm8UoqzUay4n40pkY+4zHHE+9co4NvBnDcp480o/CuItKkgb6Yowj8t bIiHazMxTSUtFJfBzBPNXzZ4sSZSmtWezgPpKTm0iWgTTI1yd0WFzrTAiOTUjkf7 zgzVYJiWXr5Xlgj0OyPZH5tuT6CQZmg= -----END CERTIFICATE-----Generated at Wed Oct 29 17:00:03 2025 by rpki-client