$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa File: 3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa (raw, json) Hash identifier: awm9Xbdc5dnk+V7/jzomlqQCSM3IgLYm61piyj/qwwc= Subject key identifier: 51:56:7A:32:AA:4B:F2:45:80:E5:58:25:78:A0:64:78:48:EB:A0:D0 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADD666829B7C2ADE1CB06C800 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 130.137.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:68:29:b7:c2:ad:e1:cb:06:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=122b7c44-08c0-436c-b172-f2e1be4bf34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:0c:56:ae:2d:d1:dd:ab:6b:7f:a7:ee:10: bd:08:c5:cc:22:a2:75:f6:7a:7f:ee:db:b1:53:7e: 37:6c:df:a1:41:76:65:28:14:c5:be:90:b8:09:d4: 14:88:c2:aa:ba:87:8c:17:3a:19:73:d8:f6:7e:f2: 5a:ef:5f:a8:bc:71:49:e2:e7:0d:61:44:40:66:02: 66:c9:70:dd:24:2b:08:91:60:ce:26:c8:85:cd:a4: 23:77:fa:03:e6:8c:06:97:6b:0d:85:80:e8:45:c2: 77:aa:a1:d1:da:d0:b6:ae:4f:74:41:bb:bc:6b:de: 60:7c:01:e2:f7:75:8d:a1:c9:14:91:e0:3b:63:ec: a8:94:b9:97:02:88:a2:40:5c:26:a3:f9:6d:67:69: ff:2f:e3:a4:9e:f0:bf:d1:a7:be:96:51:7c:3a:2d: 6c:c6:81:1a:c8:5f:7f:5a:9d:56:0d:ef:ce:61:5a: aa:25:c3:de:d0:9c:56:f6:82:88:26:04:54:88:7f: 58:15:04:60:b1:de:d6:6b:4b:6e:ca:4c:19:d4:e1: 1f:ba:f6:2f:c0:1d:18:3c:43:42:7f:a0:11:60:2d: 07:a4:b7:88:70:ec:43:7f:f6:26:bb:e6:5e:1f:a9: ea:c4:97:3e:5f:bc:ef:fd:87:c7:35:4b:bf:a5:20: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:56:7A:32:AA:4B:F2:45:80:E5:58:25:78:A0:64:78:48:EB:A0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b4:18:19:05:08:7f:d1:c5:0d:a6:1d:4d:d7:44:ab:9b:69: 1e:81:cf:fd:06:0c:9c:12:41:36:71:90:e6:82:36:14:f8:32: 97:4d:a7:1e:94:7f:72:fb:65:de:10:de:ee:0d:5d:15:b1:ee: 0a:30:62:71:61:4a:40:92:cd:cd:71:dd:90:0f:59:0a:f9:cf: e5:1f:6a:bf:ae:12:c9:8c:68:8d:a1:b1:46:2d:5d:5a:17:33: c2:eb:f2:2d:5b:04:52:dd:da:73:46:8f:c1:51:ad:cd:ba:e4: a2:50:1e:8d:8f:b3:72:55:ac:98:cc:f9:6c:be:cd:73:82:b0: ab:c9:59:e2:af:a4:8f:89:3e:12:e1:32:c7:d6:57:72:03:c4: f5:ae:4f:29:68:de:dd:35:9d:ed:5b:e0:ca:16:4b:77:05:d8: 83:7f:ed:22:5e:50:fe:00:a6:27:27:3a:5a:9f:d6:6c:5a:03: 7a:af:85:3e:03:6b:20:0c:ff:57:3e:bc:53:14:4c:80:2d:5e: f7:39:4d:fb:32:9e:8b:ca:9c:b8:5f:b6:9f:2a:7b:69:a2:e2: 36:9e:c4:d2:db:b4:55:be:d6:e1:43:cb:36:8c:6e:3f:01:79: 66:89:2e:b2:e0:1a:74:10:ea:57:01:de:61:c2:67:dd:9f:97: 73:b3:b0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZmgpt8Kt4csGyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MTIyYjdjNDQtMDhjMC00MzZjLWIxNzItZjJlMWJlNGJmMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C8MVq4t0d2ra3+n7hC9CMXMIqJ19np/7tux U343bN+hQXZlKBTFvpC4CdQUiMKquoeMFzoZc9j2fvJa71+ovHFJ4ucNYURAZgJm yXDdJCsIkWDOJsiFzaQjd/oD5owGl2sNhYDoRcJ3qqHR2tC2rk90Qbu8a95gfAHi 93WNockUkeA7Y+yolLmXAoiiQFwmo/ltZ2n/L+OknvC/0ae+llF8Oi1sxoEayF9/ Wp1WDe/OYVqqJcPe0JxW9oKIJgRUiH9YFQRgsd7Wa0tuykwZ1OEfuvYvwB0YPENC f6ARYC0HpLeIcOxDf/Ymu+ZeH6nqxJc+X7zv/YfHNUu/pSAo0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFWejKqS/JFgOVYJXigZHhI66DQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvM2MyZDAwNjQtOWEwZi0z M2MxLTkzOTEtOGU5MWUzZjFhNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu0GBkFCH/RxQ2mHU3XRKubaR6Bz/0GDJwSQTZxkOaCNhT4MpdNpx6U f3L7Zd4Q3u4NXRWx7gowYnFhSkCSzc1x3ZAPWQr5z+Ufar+uEsmMaI2hsUYtXVoX M8Lr8i1bBFLd2nNGj8FRrc265KJQHo2Ps3JVrJjM+Wy+zXOCsKvJWeKvpI+JPhLh MsfWV3IDxPWuTylo3t01ne1b4MoWS3cF2IN/7SJeUP4ApicnOlqf1mxaA3qvhT4D ayAM/1c+vFMUTIAtXvc5TfsynovKnLhftp8qe2mi4jaexNLbtFW+1uFDyzaMbj8B eWaJLrLgGnQQ6lcB3mHCZ92fl3OzsGo= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:00 2025 by rpki-client