$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/efb0b9fa-f7ca-3fc3-9780-3b4225cdc896.roa File: efb0b9fa-f7ca-3fc3-9780-3b4225cdc896.roa (raw, json) Hash identifier: KMx88w5DKrAVPEAntuSqY/64oLI4lhpgt4OnZ2GbeHU= Subject key identifier: BE:DF:15:BF:B2:B9:28:EC:A1:28:8F:40:71:CD:E4:20:D4:71:22:97 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AD3A0EE331A92DAA9FE8AC680 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/efb0b9fa-f7ca-3fc3-9780-3b4225cdc896.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 130.137.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:ee:33:1a:92:da:a9:fe:8a:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=313e17d3-1e7a-471e-92c3-ae193d8f7ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:e5:8c:5b:45:0b:0f:ea:83:ee:d3:fe:4d: 19:09:c7:54:0e:55:81:90:be:96:51:0e:e3:20:4c: 45:96:d3:28:2d:25:d9:af:7a:f6:66:2a:fc:cd:3f: 86:34:10:21:20:5b:a1:aa:5a:4d:41:bd:7a:7c:b7: 13:11:58:16:4f:90:b0:ba:cb:46:00:fc:54:b2:8b: bf:a4:fa:a3:1a:04:c9:2a:40:af:27:b7:49:2d:fe: 45:fd:04:41:c8:74:2b:5f:b5:4a:3a:e7:ee:cc:19: 7a:c9:21:3b:06:18:e2:01:31:b7:94:d0:6f:73:50: 29:cc:e9:9e:13:a4:0b:85:87:b7:8c:20:a9:c3:a9: 5c:e6:ae:94:db:75:3f:fe:a3:0b:f3:8d:f2:4b:a5: 1d:c4:e4:3a:f3:d4:ef:21:9c:62:4d:f2:85:14:13: d3:1a:d6:b8:a4:95:5e:99:3e:d7:10:55:ca:4d:fd: 3d:a6:36:f1:54:28:a0:36:a6:22:7f:a4:3c:15:e0: 5f:ae:dd:b7:7b:c4:2f:e9:fc:3d:63:34:eb:ad:c7: 9a:c9:0c:7e:6f:e9:f4:2f:69:29:16:16:ba:e4:58: 84:87:08:23:64:7b:ae:b8:ad:59:fc:7d:95:c0:ed: 21:f2:4c:ec:d4:b1:00:b6:a6:a7:ad:9a:ea:17:12: 22:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DF:15:BF:B2:B9:28:EC:A1:28:8F:40:71:CD:E4:20:D4:71:22:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/efb0b9fa-f7ca-3fc3-9780-3b4225cdc896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4d:a1:88:34:45:fc:f5:22:90:3c:ee:92:64:76:f2:0b:58: e7:f4:80:99:79:dd:9a:39:1c:82:71:ae:93:dc:18:3d:e1:e8: 5c:88:c9:80:80:d9:a1:ff:cc:93:d5:63:ea:ab:c6:83:43:44: 31:85:2f:29:a0:10:78:fa:1a:73:d8:27:4b:5f:09:8d:dd:6f: c3:c1:a6:84:29:ef:ba:82:2c:0b:a1:3d:72:b5:18:9a:65:3a: 04:a9:77:7d:8b:74:12:1a:39:d5:95:09:12:4b:21:b9:69:74: 2c:69:07:26:70:fc:cb:ba:79:d4:26:a0:e0:6a:93:5d:f9:03: 94:3b:87:60:8b:13:3d:cd:47:3e:97:24:18:69:33:39:0f:c7: b4:c9:c7:69:b0:fd:28:e2:68:6f:b3:5b:75:d6:11:ca:1f:2c: f0:81:09:8e:65:10:f5:a2:da:b5:6a:fa:ee:1c:aa:34:28:2f: 9f:85:4c:5e:ed:48:f0:6e:c7:5a:02:c9:6f:c0:77:f9:4d:b4: b0:d0:57:76:da:e2:54:94:7f:1d:c1:c6:9d:fb:e2:8c:1d:d7: e9:cc:0e:5b:1b:0a:c7:0f:e7:48:22:fa:97:1e:86:9d:db:45: 0b:89:7a:ee:d9:57:37:8e:52:c8:a8:c8:88:e1:39:2b:62:49: 5b:a4:f5:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToO4zGpLaqf6KxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MzEzZTE3ZDMtMWU3YS00NzFlLTkyYzMtYWUxOTNkOGY3ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFHljFtFCw/qg+7T/k0ZCcdUDlWBkL6WUQ7j IExFltMoLSXZr3r2Zir8zT+GNBAhIFuhqlpNQb16fLcTEVgWT5CwustGAPxUsou/ pPqjGgTJKkCvJ7dJLf5F/QRByHQrX7VKOufuzBl6ySE7BhjiATG3lNBvc1ApzOme E6QLhYe3jCCpw6lc5q6U23U//qML843yS6UdxOQ689TvIZxiTfKFFBPTGta4pJVe mT7XEFXKTf09pjbxVCigNqYif6Q8FeBfrt23e8Qv6fw9YzTrrceayQx+b+n0L2kp Fha65FiEhwgjZHuuuK1Z/H2VwO0h8kzs1LEAtqanrZrqFxIi6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7fFb+yuSjsoSiPQHHN5CDUcSKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZWZiMGI5ZmEtZjdjYS0z ZmMzLTk3ODAtM2I0MjI1Y2RjODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9NoYg0Rfz1IpA87pJkdvILWOf0gJl53Zo5HIJxrpPcGD3h6FyIyYCA 2aH/zJPVY+qrxoNDRDGFLymgEHj6GnPYJ0tfCY3db8PBpoQp77qCLAuhPXK1GJpl OgSpd32LdBIaOdWVCRJLIblpdCxpByZw/Mu6edQmoOBqk135A5Q7h2CLEz3NRz6X JBhpMzkPx7TJx2mw/SjiaG+zW3XWEcofLPCBCY5lEPWi2rVq+u4cqjQoL5+FTF7t SPBux1oCyW/Ad/lNtLDQV3ba4lSUfx3Bxp374owd1+nMDlsbCscP50gi+pcehp3b RQuJeu7ZVzeOUsioyIjhOStiSVuk9eg= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:49 2025 by rpki-client