$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/58e4bc18-396e-39fd-8d90-ea8a3759108d.roa File: 58e4bc18-396e-39fd-8d90-ea8a3759108d.roa (raw, json) Hash identifier: xLnQWuzgp0kDqVMniN6xPIlqIojYrD7eJAj0VGh7C0A= Subject key identifier: 38:AA:93:5E:C5:B0:F8:43:FD:1A:51:FE:87:46:1E:13:B5:9E:4F:67 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B0746AFF9A0D75FD802271000 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/58e4bc18-396e-39fd-8d90-ea8a3759108d.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 16509 IP address blocks: 130.137.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:af:f9:a0:d7:5f:d8:02:27:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=f2555024-4ecc-434c-95d2-ee96eea0a3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:8b:8d:eb:fa:4a:c8:8f:e9:49:0f:dd:51: a0:c1:08:0d:fe:75:30:be:6f:03:49:55:1d:cf:9d: 30:95:67:c1:8f:7f:bb:f0:ad:e0:7e:e2:84:2a:b2: 61:92:b7:57:68:a2:0b:e0:20:f8:cc:b2:2c:e3:3a: df:b9:02:0e:d2:48:af:c3:13:41:af:11:b0:0a:1f: 96:df:bc:77:9a:84:b1:20:ed:ab:b9:f0:99:81:72: 6f:69:ad:07:f1:0b:a0:06:54:12:0f:53:90:45:0e: 5c:f8:99:c6:eb:27:09:fd:d5:bb:59:e0:76:fa:96: cc:41:a4:4f:3a:4c:ff:e0:4f:6f:bf:a6:80:0e:8d: 42:ef:ab:b8:c7:3f:cd:d7:d1:21:d8:12:a4:9f:e3: 02:1f:d0:ac:98:1a:2d:e6:e7:94:ad:55:91:bc:07: 24:0d:f0:fa:17:20:7a:e4:f0:55:c5:49:23:07:7f: 7f:64:38:9b:95:f6:0f:bb:5e:71:ed:3d:d4:e2:93: dc:af:e6:27:ad:d4:8d:11:3a:14:8c:2c:49:bf:26: fc:c7:40:08:37:37:fa:b4:8f:de:8e:04:80:4d:5a: b7:f4:42:60:4e:a3:65:af:10:44:de:84:bb:5d:f0: fd:98:5b:ac:73:12:43:72:98:41:7a:3c:64:a4:06: 6a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AA:93:5E:C5:B0:F8:43:FD:1A:51:FE:87:46:1E:13:B5:9E:4F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/58e4bc18-396e-39fd-8d90-ea8a3759108d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b3:68:a3:31:f5:fd:36:49:39:e4:e6:1d:7d:7f:d3:ab:91: de:cc:84:75:e6:17:49:1c:6a:6a:15:61:72:d2:d4:83:12:ba: 3d:1f:ae:70:8f:70:f6:9d:d3:82:d8:75:b5:2e:80:0e:26:a3: d1:8f:32:3b:5d:65:39:13:ca:f3:cf:0e:d4:37:55:7b:7d:56: d6:0b:82:23:a8:e4:3f:2e:57:2e:60:2c:2f:91:79:07:80:bb: 81:68:b3:d8:5a:29:75:b0:d6:8e:6d:db:38:fa:44:5b:c6:b1: 41:74:b2:d8:76:a6:fa:47:8b:a5:a4:2e:f3:1d:13:95:24:22: 1b:05:02:23:9e:f2:95:2e:d0:47:35:69:88:7c:cb:e3:aa:9d: 99:8b:4a:52:b4:67:c6:38:b0:7a:49:00:cd:ba:42:ec:03:50: f4:59:61:a4:d8:5b:13:c7:ea:76:80:1f:6f:2e:9a:00:c3:c6: e8:ef:34:e5:c9:16:aa:84:35:04:26:73:35:af:72:82:ed:8a: d2:8a:92:72:47:c0:fd:77:fd:f2:dd:c6:ee:ca:67:f0:14:f9: c7:5d:c1:7b:f2:7a:d5:95:75:e2:a4:68:10:67:66:e5:48:a9: 48:3d:40:1b:17:0b:bb:0d:0d:02:e2:93:53:42:83:11:72:7b: a4:1f:e2:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRq/5oNdf2AInEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZjI1NTUwMjQtNGVjYy00MzRjLTk1ZDItZWU5NmVlYTBhM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySCLjev6SsiP6UkP3VGgwQgN/nUwvm8DSVUd z50wlWfBj3+78K3gfuKEKrJhkrdXaKIL4CD4zLIs4zrfuQIO0kivwxNBrxGwCh+W 37x3moSxIO2rufCZgXJvaa0H8QugBlQSD1OQRQ5c+JnG6ycJ/dW7WeB2+pbMQaRP Okz/4E9vv6aADo1C76u4xz/N19Eh2BKkn+MCH9CsmBot5ueUrVWRvAckDfD6FyB6 5PBVxUkjB39/ZDiblfYPu15x7T3U4pPcr+YnrdSNEToUjCxJvyb8x0AINzf6tI/e jgSATVq39EJgTqNlrxBE3oS7XfD9mFuscxJDcphBejxkpAZq0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiqk17FsPhD/RpR/odGHhO1nk9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNThlNGJjMTgtMzk2ZS0z OWZkLThkOTAtZWE4YTM3NTkxMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFizaKMx9f02STnk5h19f9Orkd7MhHXmF0kcamoVYXLS1IMSuj0frnCP cPad04LYdbUugA4mo9GPMjtdZTkTyvPPDtQ3VXt9VtYLgiOo5D8uVy5gLC+ReQeA u4Fos9haKXWw1o5t2zj6RFvGsUF0sth2pvpHi6WkLvMdE5UkIhsFAiOe8pUu0Ec1 aYh8y+OqnZmLSlK0Z8Y4sHpJAM26QuwDUPRZYaTYWxPH6naAH28umgDDxujvNOXJ FqqENQQmczWvcoLtitKKknJHwP13/fLdxu7KZ/AU+cddwXvyetWVdeKkaBBnZuVI qUg9QBsXC7sNDQLik1NCgxFye6Qf4hE= -----END CERTIFICATE-----Generated at Wed Sep 3 19:19:32 2025 by rpki-client