$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d09a0e7b-61b3-33c0-b5d6-28b5300e6c6b.roa File: d09a0e7b-61b3-33c0-b5d6-28b5300e6c6b.roa (raw, json) Hash identifier: w1RSGeRwap09xn7QDeR8OP1ddCYVBVWw6t6TlpO4Gw0= Subject key identifier: DC:F8:2A:6F:B8:F0:B8:44:22:3C:9A:53:D3:BA:0F:DA:E0:30:E2:AB Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AC8764CFEB349C63FEE84A040 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d09a0e7b-61b3-33c0-b5d6-28b5300e6c6b.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 130.137.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:4c:fe:b3:49:c6:3f:ee:84:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=70b0fc50-3676-48b4-b37c-1a6700f5722a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b5:f8:44:d6:d7:24:c0:37:e3:69:5e:25:19: 86:99:6a:49:ee:0a:eb:90:49:48:d1:24:c7:09:af: ea:4b:23:34:45:3e:99:e9:50:56:99:d1:7c:c5:e3: d6:32:d4:07:77:19:e2:83:26:82:25:a8:83:d4:a2: a6:45:ee:95:e9:98:b3:a1:a7:25:43:50:21:3c:65: f2:03:3f:50:10:7a:67:f5:5f:16:59:73:86:ea:68: ae:f0:c5:bd:57:18:05:6c:b5:fc:e7:46:43:14:e2: 96:36:f1:3a:7e:15:01:4e:40:f5:55:d2:0c:c5:ed: 88:64:5f:bd:5f:0e:d9:42:df:9e:ce:d9:b3:a3:3e: 8b:95:a8:a2:0a:4d:59:e1:92:20:79:f5:dc:a1:93: 68:0d:40:bc:a2:61:67:34:3d:fc:d4:3d:ec:20:be: a7:75:19:2b:00:78:cd:fb:b2:7e:fe:fd:cc:98:c3: 7e:79:e8:a7:4a:8e:6c:c7:b2:43:01:8c:91:3e:3f: e7:68:69:d2:0d:5e:f5:94:6a:9e:30:37:7f:6c:b5: 4c:27:88:89:f1:df:7e:bc:f6:4e:14:8c:52:fb:d6: 6f:c6:ed:24:e5:67:b8:65:c5:41:52:e5:76:b7:5b: 7c:e2:ce:b3:08:33:44:3d:c7:2b:d0:d5:5b:16:86: f7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F8:2A:6F:B8:F0:B8:44:22:3C:9A:53:D3:BA:0F:DA:E0:30:E2:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d09a0e7b-61b3-33c0-b5d6-28b5300e6c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f4:9f:5b:41:81:f2:3c:07:c0:5a:d7:b2:b6:89:39:84:6f: 2d:ab:b8:84:eb:cf:6c:eb:ae:10:2a:12:48:cc:50:d9:c2:a7: e0:e8:a3:6b:2a:ea:60:88:f9:8f:36:a1:5e:ed:cf:83:7f:aa: d1:9e:20:da:3e:c3:b8:3a:36:b9:e5:7d:21:54:5f:3b:79:b8: 83:a8:55:7f:38:2e:2f:ba:ea:8f:5d:00:b1:09:7a:e6:1f:94: 5e:a9:ea:af:29:99:c4:8b:48:5d:de:91:77:2a:cd:2b:ad:9a: ea:8a:91:51:de:cb:09:18:d6:dd:bb:b9:bf:18:87:51:96:bb: 6d:a5:86:e6:56:e7:fc:4b:b8:0d:51:69:64:a7:e1:88:a0:4c: 77:f8:2d:0e:67:d4:df:51:41:5a:35:2e:3a:59:ac:98:1a:f3: e2:75:66:66:e4:c6:e9:4c:dc:ab:a5:a1:ae:45:59:df:41:61: c1:87:47:67:e9:93:e5:62:30:41:73:f0:96:dd:42:b8:5a:46: 86:ef:bb:e2:2f:e2:33:1a:02:2d:76:e5:b8:f4:a0:31:65:89: 1a:85:ea:39:67:7c:0b:0e:9e:fb:75:0a:73:bd:0d:3a:b0:37: 33:da:29:6a:9e:68:60:6d:7a:d5:89:ba:10:b5:b8:20:b5:e3: 36:c0:d1:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdkz+s0nGP+6EoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NzBiMGZjNTAtMzY3Ni00OGI0LWIzN2MtMWE2NzAwZjU3MjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17X4RNbXJMA342leJRmGmWpJ7grrkElI0STH Ca/qSyM0RT6Z6VBWmdF8xePWMtQHdxnigyaCJaiD1KKmRe6V6ZizoaclQ1AhPGXy Az9QEHpn9V8WWXOG6miu8MW9VxgFbLX850ZDFOKWNvE6fhUBTkD1VdIMxe2IZF+9 Xw7ZQt+eztmzoz6LlaiiCk1Z4ZIgefXcoZNoDUC8omFnND381D3sIL6ndRkrAHjN +7J+/v3MmMN+eeinSo5sx7JDAYyRPj/naGnSDV71lGqeMDd/bLVMJ4iJ8d9+vPZO FIxS+9Zvxu0k5We4ZcVBUuV2t1t84s6zCDNEPccr0NVbFob3DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNz4Km+48LhEIjyaU9O6D9rgMOKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDA5YTBlN2ItNjFiMy0z M2MwLWI1ZDYtMjhiNTMwMGU2YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/0n1tBgfI8B8Ba17K2iTmEby2ruITrz2zrrhAqEkjMUNnCp+Doo2sq 6mCI+Y82oV7tz4N/qtGeINo+w7g6NrnlfSFUXzt5uIOoVX84Li+66o9dALEJeuYf lF6p6q8pmcSLSF3ekXcqzSutmuqKkVHeywkY1t27ub8Yh1GWu22lhuZW5/xLuA1R aWSn4YigTHf4LQ5n1N9RQVo1LjpZrJga8+J1ZmbkxulM3Kuloa5FWd9BYcGHR2fp k+ViMEFz8JbdQrhaRobvu+Iv4jMaAi125bj0oDFliRqF6jlnfAsOnvt1CnO9DTqw NzPaKWqeaGBtetWJuhC1uCC14zbA0bk= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:09 2025 by rpki-client