$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/69a247de-515a-36b4-8928-8d0f74a87a65.roa File: 69a247de-515a-36b4-8928-8d0f74a87a65.roa (raw, json) Hash identifier: fmDMbv9bKzYaZGiEOepq8Xefy7usgWaKCnmKzyBeTCo= Subject key identifier: DE:C1:4E:61:4E:BC:E5:15:E2:3B:E6:CA:F2:C8:25:18:EA:7D:11:19 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AD3A0EE062321C1CE1E4D0C00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/69a247de-515a-36b4-8928-8d0f74a87a65.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 130.137.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:ee:06:23:21:c1:ce:1e:4d:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=152824a7-911d-4a85-a784-5f8bc040bd56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:42:47:32:9d:5b:38:25:a1:c7:91:a9:83:98: d9:f0:f6:e3:dd:80:42:55:38:d2:3e:0b:12:6f:af: f7:55:37:77:4c:49:85:45:fd:32:5d:23:6b:ad:33: 54:b1:95:ad:d5:ce:ab:01:d2:af:97:bf:92:55:11: 72:41:84:ef:1d:8c:5b:92:8a:30:91:b8:42:1d:21: 25:76:e2:ea:81:9e:a1:e7:11:4f:76:b7:d9:a8:a5: 84:a2:db:f4:74:3e:aa:57:71:d4:95:73:a5:14:54: 1f:b8:03:90:9f:b6:fb:69:93:00:c9:31:b5:04:3b: fd:c8:46:78:05:31:83:c4:08:61:ed:87:c6:12:55: 06:1c:87:37:52:cf:03:6a:87:b6:6f:a3:33:38:a9: 56:ef:80:95:40:5c:20:bb:79:e1:3f:81:c2:2a:31: a5:f0:db:c6:10:76:0f:15:f9:0c:86:11:3b:41:83: 90:9b:13:fe:ce:ec:3f:11:48:22:e8:9f:ad:b6:a7: 95:dd:6c:72:9f:2d:d6:42:5e:9e:20:f4:e3:27:cc: 9b:00:59:a1:34:8b:7b:4e:03:72:33:e2:d9:0f:08: b4:57:e5:68:06:b0:c7:d0:cd:a9:a8:77:2f:46:15: 20:25:ed:1a:da:a0:90:2a:97:5e:b2:24:e0:d8:16: ae:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C1:4E:61:4E:BC:E5:15:E2:3B:E6:CA:F2:C8:25:18:EA:7D:11:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/69a247de-515a-36b4-8928-8d0f74a87a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ed:2d:19:72:4f:b5:26:e7:7a:93:72:0a:09:fa:4e:bb:82: 67:0f:59:a0:39:cb:42:e1:2f:b4:b3:67:6f:1b:62:ac:20:01: 50:41:53:23:94:8f:af:79:76:3b:69:bc:4d:c6:44:b7:93:25: 4e:fb:9a:1d:dd:08:ed:29:49:78:4b:0a:f7:75:81:6d:75:50: 71:8c:4e:02:a3:ce:c9:a0:a6:45:2e:77:db:df:b2:9f:31:f4: 9e:3d:60:2a:d4:45:b3:b9:54:30:71:4c:fa:64:1c:6d:47:8b: 67:cf:f0:49:64:74:b2:a3:54:e1:67:bc:c0:c7:5d:e3:1e:20: 99:b3:ea:01:c8:55:94:c9:79:50:f7:4f:32:20:e0:be:9d:ee: 89:f5:7e:5a:4c:a5:c8:22:b5:1b:73:c5:7f:2a:1f:63:c9:f5: a9:4c:b3:a2:30:14:2d:d0:2d:d1:c1:ab:d4:23:fd:07:22:85: 84:d6:25:35:a7:6c:b1:5a:fe:bd:b1:93:82:dd:68:04:b6:36: 83:8a:6a:35:49:5d:b4:6c:77:78:e4:de:a6:80:ea:aa:86:b1: 82:68:5c:0a:66:c0:ec:98:74:84:f6:20:4d:3e:a3:f7:5b:8a: 52:08:4e:7d:68:87:9a:2c:77:ea:94:5b:bd:5d:62:3f:81:7d: 8f:d6:28:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToO4GIyHBzh5NDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MTUyODI0YTctOTExZC00YTg1LWE3ODQtNWY4YmMwNDBiZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkJHMp1bOCWhx5Gpg5jZ8Pbj3YBCVTjSPgsS b6/3VTd3TEmFRf0yXSNrrTNUsZWt1c6rAdKvl7+SVRFyQYTvHYxbkoowkbhCHSEl duLqgZ6h5xFPdrfZqKWEotv0dD6qV3HUlXOlFFQfuAOQn7b7aZMAyTG1BDv9yEZ4 BTGDxAhh7YfGElUGHIc3Us8Daoe2b6MzOKlW74CVQFwgu3nhP4HCKjGl8NvGEHYP FfkMhhE7QYOQmxP+zuw/EUgi6J+ttqeV3Wxyny3WQl6eIPTjJ8ybAFmhNIt7TgNy M+LZDwi0V+VoBrDH0M2pqHcvRhUgJe0a2qCQKpdesiTg2BauPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7BTmFOvOUV4jvmyvLIJRjqfREZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNjlhMjQ3ZGUtNTE1YS0z NmI0LTg5MjgtOGQwZjc0YTg3YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABntLRlyT7Um53qTcgoJ+k67gmcPWaA5y0LhL7SzZ28bYqwgAVBBUyOU j695djtpvE3GRLeTJU77mh3dCO0pSXhLCvd1gW11UHGMTgKjzsmgpkUud9vfsp8x 9J49YCrURbO5VDBxTPpkHG1Hi2fP8ElkdLKjVOFnvMDHXeMeIJmz6gHIVZTJeVD3 TzIg4L6d7on1flpMpcgitRtzxX8qH2PJ9alMs6IwFC3QLdHBq9Qj/QcihYTWJTWn bLFa/r2xk4LdaAS2NoOKajVJXbRsd3jk3qaA6qqGsYJoXApmwOyYdIT2IE0+o/db ilIITn1oh5osd+qUW71dYj+BfY/WKAI= -----END CERTIFICATE-----Generated at Wed Aug 20 13:12:58 2025 by rpki-client