$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7f4d4070-b2c7-3170-af46-f18fdbb8a84d.roa File: 7f4d4070-b2c7-3170-af46-f18fdbb8a84d.roa (raw, json) Hash identifier: wsunDwQZmipFzKuhQiln+2GRwq32pz/ZtIzEew9oePA= Subject key identifier: BF:FA:9C:0C:99:B3:B7:33:4E:7E:67:D1:F3:DA:CB:E0:06:BA:BD:D3 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ADA9BB95EC48BB00F98306650 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7f4d4070-b2c7-3170-af46-f18fdbb8a84d.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 130.137.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b9:5e:c4:8b:b0:0f:98:30:66:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=ffed0dc3-ca3d-4a22-b524-e2af47c81524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0f:e2:94:e3:88:57:4b:88:e0:bb:24:54:b2: 56:c7:81:13:3c:a9:50:18:ed:6a:ca:42:a8:57:9e: 9f:e9:08:3f:e7:c4:fb:f5:35:d4:88:f2:a1:06:97: 0d:ce:5f:7a:c9:34:a7:45:ee:63:dd:98:3e:ce:61: 83:05:53:25:75:3c:39:50:a1:03:91:33:57:27:a9: 89:b1:6f:ac:6c:e3:cd:88:48:3d:f3:fb:47:db:7d: 2f:b4:09:71:dc:a4:ac:a9:e8:ba:9a:39:1e:05:d8: d8:80:15:f7:c0:ef:2a:d9:fb:76:fc:ab:38:2e:71: 05:f9:b3:06:1b:e7:89:c5:3c:63:8a:85:ae:e4:57: 1c:d1:40:d3:f0:d1:e1:45:56:57:8a:b6:ca:e5:54: 9d:52:04:f9:7c:5e:71:92:41:a5:56:e1:60:29:41: 90:48:11:52:cf:26:d6:09:26:63:14:b2:92:0a:35: e7:fd:c9:84:38:af:15:e4:30:51:ae:a3:2e:0e:d9: f6:12:ff:af:3a:87:3a:66:93:5f:d5:01:21:45:e5: 12:93:6b:7a:3e:cc:f7:2e:99:15:92:08:cb:28:e2: 81:4c:1f:fe:66:75:d5:c1:1d:47:44:f0:f6:45:0f: dd:ee:e6:5f:fc:f9:22:96:06:bf:4e:f8:f4:dd:02: 67:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FA:9C:0C:99:B3:B7:33:4E:7E:67:D1:F3:DA:CB:E0:06:BA:BD:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7f4d4070-b2c7-3170-af46-f18fdbb8a84d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:1c:f2:6d:80:c1:dc:86:34:d4:dd:8d:92:7d:84:78:e0:80: ff:59:a3:c0:22:67:09:7b:b3:17:cb:f7:03:80:fc:c5:f3:fd: 3e:3a:3e:e0:c1:9b:d8:27:84:12:0d:05:2a:f2:29:6d:ee:d3: b9:c5:92:a3:01:c1:63:5c:0a:76:a4:16:c4:0c:bd:bb:f6:5f: 68:82:13:a7:3d:86:80:b5:19:c4:9f:eb:df:d0:72:39:30:b2: 67:62:13:e6:91:3b:b2:cc:14:8d:7a:c3:9a:a0:bd:3d:9d:b5: 7e:9d:a0:9e:f8:4c:33:f8:d7:e5:a4:e6:23:5d:51:10:e6:00: 6c:2a:c7:20:6b:f8:78:7b:bf:46:4d:d7:0e:8f:03:45:2a:ba: 71:93:22:f0:ba:df:1f:50:e1:9d:ee:0a:bb:48:a2:4f:ca:6c: 1d:5a:2e:cf:aa:df:bc:b4:79:80:96:3c:b4:01:b6:8e:14:4c: 11:77:f3:68:fa:8a:86:99:e8:00:7c:bf:2c:14:99:69:4c:5e: 77:6b:76:f1:56:2a:31:82:8a:e6:44:0d:fa:9f:25:4d:d7:cc: 96:6d:1a:24:45:a8:4f:4b:10:ad:ac:94:b8:d7:ec:f7:fb:9d: 5d:94:8c:d2:bb:80:00:9e:eb:1a:b9:5f:a7:32:41:60:0a:ef: 75:c5:ba:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram7lexIuwD5gwZlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ZmZlZDBkYzMtY2EzZC00YTIyLWI1MjQtZTJhZjQ3YzgxNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg/ilOOIV0uI4LskVLJWx4ETPKlQGO1qykKo V56f6Qg/58T79TXUiPKhBpcNzl96yTSnRe5j3Zg+zmGDBVMldTw5UKEDkTNXJ6mJ sW+sbOPNiEg98/tH230vtAlx3KSsqei6mjkeBdjYgBX3wO8q2ft2/Ks4LnEF+bMG G+eJxTxjioWu5Fcc0UDT8NHhRVZXirbK5VSdUgT5fF5xkkGlVuFgKUGQSBFSzybW CSZjFLKSCjXn/cmEOK8V5DBRrqMuDtn2Ev+vOoc6ZpNf1QEhReUSk2t6Psz3LpkV kgjLKOKBTB/+ZnXVwR1HRPD2RQ/d7uZf/Pkilga/Tvj03QJnbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/6nAyZs7czTn5n0fPay+AGur3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvN2Y0ZDQwNzAtYjJjNy0z MTcwLWFmNDYtZjE4ZmRiYjhhODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUc8m2AwdyGNNTdjZJ9hHjggP9Zo8AiZwl7sxfL9wOA/MXz/T46PuDB m9gnhBINBSryKW3u07nFkqMBwWNcCnakFsQMvbv2X2iCE6c9hoC1GcSf69/Qcjkw smdiE+aRO7LMFI16w5qgvT2dtX6doJ74TDP41+Wk5iNdURDmAGwqxyBr+Hh7v0ZN 1w6PA0UqunGTIvC63x9Q4Z3uCrtIok/KbB1aLs+q37y0eYCWPLQBto4UTBF382j6 ioaZ6AB8vywUmWlMXndrdvFWKjGCiuZEDfqfJU3XzJZtGiRFqE9LEK2slLjX7Pf7 nV2UjNK7gACe6xq5X6cyQWAK73XFugs= -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:25 2025 by rpki-client