$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5698d02a-cc23-3f5f-8cac-15c79e91d9a2.roa File: 5698d02a-cc23-3f5f-8cac-15c79e91d9a2.roa (raw, json) Hash identifier: PY8FnyYjgZJ1Xj0gPbfC4El/3R3vMiKJ2bZ/94BSA68= Subject key identifier: 49:98:9F:48:73:0E:59:93:3B:45:3E:D6:69:32:3A:3B:CA:A0:7D:42 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ACB40E4B4BCCC83AE02F92200 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5698d02a-cc23-3f5f-8cac-15c79e91d9a2.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 130.137.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:e4:b4:bc:cc:83:ae:02:f9:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=f311d4a6-7c62-4aa8-a16c-60218bb711c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8e:3e:59:d8:7a:43:a4:38:68:ad:a3:84:d5: dc:34:63:14:1f:2e:6f:30:6d:e2:78:46:09:03:89: d3:44:b3:10:4d:01:ee:7d:a1:21:15:0b:f0:33:aa: fe:9c:d9:7a:24:05:7a:95:fc:5b:51:e7:0c:e2:72: 02:0c:92:31:f3:58:5d:6b:55:49:92:17:b3:9d:cd: 61:65:79:2b:87:46:cb:94:4f:fa:81:1e:be:7c:6b: d5:b6:bc:ee:14:a6:17:96:fc:ac:82:d0:87:7d:71: 81:fe:f3:9e:4a:60:3b:e1:eb:9a:55:20:b0:38:a5: 7d:ce:8f:cd:e4:a2:22:87:b8:98:59:35:1c:19:1e: e3:cb:90:0c:fc:a4:3b:cf:38:9c:00:2b:87:68:fe: ea:22:11:8a:b8:90:39:2f:88:b8:68:d9:53:9d:65: 9a:c6:3c:d6:ec:23:9b:19:0c:d6:5a:39:8d:53:aa: 7d:cb:7b:18:1d:36:70:15:b1:a0:7c:33:1e:dc:1e: 2b:db:ee:37:e9:45:24:95:da:1e:17:83:3e:18:c8: e3:f3:95:a7:c0:d6:f5:36:86:af:09:1d:01:df:a1: cf:b3:dc:ca:1b:9b:f4:3b:67:6e:37:86:7e:2f:21: d2:20:12:80:aa:7a:97:74:91:54:90:a5:51:68:98: b8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:98:9F:48:73:0E:59:93:3B:45:3E:D6:69:32:3A:3B:CA:A0:7D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5698d02a-cc23-3f5f-8cac-15c79e91d9a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:68:c1:eb:f7:40:a3:b0:f2:62:7f:0b:36:15:0f:89:c0:fb: c5:3c:62:13:c6:fd:2c:d8:0b:15:49:33:f0:f8:6f:23:1b:d6: a9:c5:0a:63:38:63:4d:73:0f:41:5d:3f:44:26:83:26:16:9b: 59:58:16:9b:f5:5a:dd:05:be:84:d7:53:65:c3:29:83:6b:44: 17:1c:f1:af:a8:a3:4a:b1:97:05:8c:2a:c7:32:6b:e1:55:97: be:9c:ab:46:66:e9:3f:21:f3:80:f9:42:eb:57:8c:77:15:f0: 5c:12:1d:b9:86:54:4c:63:0c:db:8e:e5:e1:17:c7:3a:27:40: 9b:2f:fd:6c:1f:2b:0b:1f:4f:ee:12:ae:56:eb:c7:33:e9:53: f9:cf:a8:1d:07:b3:28:6f:7f:42:be:c6:27:da:6a:4f:b0:0d: f3:a7:8a:3c:7b:8d:d5:a1:ef:f4:eb:82:d4:cc:06:e0:e6:f4: 98:6c:be:5b:dd:c3:2d:0b:21:33:d1:3d:10:49:25:fd:1e:c3: 20:91:fc:33:9b:d6:73:06:3c:2c:b5:f2:1e:25:15:7f:5d:09: d7:7c:d9:99:07:97:2d:9d:7c:2d:01:d4:30:bb:a2:8a:be:0f: 0f:51:4f:c3:b7:d5:ad:38:ee:d2:3c:53:83:fa:4d:cd:4f:02: 40:a1:05:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQOS0vMyDrgL5IgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjMxMWQ0YTYtN2M2Mi00YWE4LWExNmMtNjAyMThiYjcxMWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm44+Wdh6Q6Q4aK2jhNXcNGMUHy5vMG3ieEYJ A4nTRLMQTQHufaEhFQvwM6r+nNl6JAV6lfxbUecM4nICDJIx81hda1VJkheznc1h ZXkrh0bLlE/6gR6+fGvVtrzuFKYXlvysgtCHfXGB/vOeSmA74euaVSCwOKV9zo/N 5KIih7iYWTUcGR7jy5AM/KQ7zzicACuHaP7qIhGKuJA5L4i4aNlTnWWaxjzW7COb GQzWWjmNU6p9y3sYHTZwFbGgfDMe3B4r2+436UUkldoeF4M+GMjj85WnwNb1Noav CR0B36HPs9zKG5v0O2duN4Z+LyHSIBKAqnqXdJFUkKVRaJi4DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmYn0hzDlmTO0U+1mkyOjvKoH1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTY5OGQwMmEtY2MyMy0z ZjVmLThjYWMtMTVjNzllOTFkOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhowev3QKOw8mJ/CzYVD4nA+8U8YhPG/SzYCxVJM/D4byMb1qnFCmM4 Y01zD0FdP0QmgyYWm1lYFpv1Wt0FvoTXU2XDKYNrRBcc8a+oo0qxlwWMKscya+FV l76cq0Zm6T8h84D5QutXjHcV8FwSHbmGVExjDNuO5eEXxzonQJsv/WwfKwsfT+4S rlbrxzPpU/nPqB0Hsyhvf0K+xifaak+wDfOnijx7jdWh7/TrgtTMBuDm9Jhsvlvd wy0LITPRPRBJJf0ewyCR/DOb1nMGPCy18h4lFX9dCdd82ZkHly2dfC0B1DC7ooq+ Dw9RT8O31a047tI8U4P6Tc1PAkChBfo= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:09 2025 by rpki-client