$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa File: 0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa (raw, json) Hash identifier: D5+uQBkfxnKtS/Dgcn54YR9gsLw4FNu6cYk/Vn315h0= Subject key identifier: 4E:08:7F:B7:2F:E1:54:9F:76:56:D6:86:00:D5:19:0B:C8:52:28:D2 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BB88D16C3FBCF453BAF112A20 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:16:c3:fb:cf:45:3b:af:11:2a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=490c2a2b-9d9b-441b-8c35-0070ca4be25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1f:d2:e4:2f:3d:e6:42:57:97:dd:72:45:85: a7:b8:d3:f1:fd:14:62:d1:cc:a2:f8:84:46:46:6b: 16:4e:8c:1a:82:12:12:b6:85:0e:04:ca:44:05:f7: 7a:3d:95:b6:a4:b3:26:e8:9e:3d:8d:76:46:83:5a: 3a:71:17:e0:d2:f0:b8:6f:a2:ea:fa:dc:98:b4:a7: ad:93:ec:6a:0f:ce:8c:fa:7a:e6:ca:25:5e:e1:cf: 83:21:ba:42:39:33:9d:c1:13:fa:b7:e1:28:35:6e: ca:c0:26:a9:b9:b4:be:11:99:24:bc:15:e8:1d:04: 21:3d:b7:8a:6f:0c:b2:a4:12:b4:b9:bf:ba:09:b0: 5a:35:16:a4:4c:9c:dd:b1:ad:b4:04:26:cc:bf:07: 6c:7c:47:5d:be:bc:d0:be:dd:c0:c3:90:9a:77:1c: 3e:67:7f:69:e2:f4:d6:1d:0b:64:e3:56:7c:94:c9: 5a:bd:51:ec:28:9c:4e:ca:db:4d:1e:56:05:b2:ea: e2:62:43:10:f6:8e:d9:76:90:02:fc:de:4b:64:cd: 41:dc:ee:91:f0:46:49:98:c9:ac:6d:24:d7:ac:97: 9c:e0:d0:d8:56:91:2b:81:52:10:d0:b7:ef:52:75: 9a:3f:fe:8d:29:30:00:34:8a:9e:df:de:96:f8:af: f6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:08:7F:B7:2F:E1:54:9F:76:56:D6:86:00:D5:19:0B:C8:52:28:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:fd:47:f6:1b:0b:93:8d:b5:be:11:42:37:32:9e:cd:80:f3: 8f:24:98:2c:af:60:47:45:31:44:ef:cd:29:3c:4e:9e:b7:5e: 03:8e:b5:88:e7:df:81:5e:82:7e:90:63:5f:6f:46:ee:b1:ad: 11:48:da:08:17:8f:bb:7c:61:3b:f4:e8:8e:90:33:34:a8:85: 09:cb:b7:7b:f1:01:58:6e:5d:4b:fc:a8:f3:71:5b:a4:d5:bc: 04:e6:f0:c2:da:2e:8d:fe:18:48:f5:c3:13:72:e2:8d:aa:ad: e9:33:34:93:9b:ad:33:7c:af:d3:66:f2:c7:b8:00:c5:36:0d: f2:c1:3a:27:ea:48:95:9a:12:3c:8d:3a:5e:7d:af:a1:0b:b7: 98:86:98:cd:1e:82:6d:74:30:b0:f3:51:6b:7d:1e:21:c5:6b: 1d:53:53:f5:62:4b:64:96:0a:bc:a2:a5:ad:e4:cf:04:40:93: 3e:67:b7:29:8d:1a:4c:f0:a6:e0:15:0b:e4:54:bd:12:f9:7f: 31:15:0e:99:e9:ef:19:56:a2:00:3b:13:78:b3:c5:b0:bc:06: 2b:cd:ed:47:ea:85:e8:bf:e5:6c:74:8f:d0:ab:f2:b4:6d:76: 2b:ac:e7:7f:06:05:fa:dc:8c:3a:30:aa:c1:81:a4:b7:66:4c: f5:02:f6:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRbD+89FO68RKiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDkwYzJhMmItOWQ5Yi00NDFiLThjMzUtMDA3MGNhNGJlMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR/S5C895kJXl91yRYWnuNPx/RRi0cyi+IRG RmsWTowaghIStoUOBMpEBfd6PZW2pLMm6J49jXZGg1o6cRfg0vC4b6Lq+tyYtKet k+xqD86M+nrmyiVe4c+DIbpCOTOdwRP6t+EoNW7KwCapubS+EZkkvBXoHQQhPbeK bwyypBK0ub+6CbBaNRakTJzdsa20BCbMvwdsfEddvrzQvt3Aw5Cadxw+Z39p4vTW HQtk41Z8lMlavVHsKJxOyttNHlYFsuriYkMQ9o7ZdpAC/N5LZM1B3O6R8EZJmMms bSTXrJec4NDYVpErgVIQ0LfvUnWaP/6NKTAANIqe396W+K/2eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4If7cv4VSfdlbWhgDVGQvIUijSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMGY4ODcxYjQtYjdjOS0z OTE2LThlMzYtNGRlYWJhYjRjMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT9R/YbC5ONtb4RQjcyns2A848kmCyvYEdFMUTvzSk8Tp63XgOOtYjn 34Fegn6QY19vRu6xrRFI2ggXj7t8YTv06I6QMzSohQnLt3vxAVhuXUv8qPNxW6TV vATm8MLaLo3+GEj1wxNy4o2qrekzNJObrTN8r9Nm8se4AMU2DfLBOifqSJWaEjyN Ol59r6ELt5iGmM0egm10MLDzUWt9HiHFax1TU/ViS2SWCryipa3kzwRAkz5ntymN GkzwpuAVC+RUvRL5fzEVDpnp7xlWogA7E3izxbC8BivN7Ufqhei/5Wx0j9Cr8rRt dius538GBfrcjDowqsGBpLdmTPUC9q8= -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:22 2025 by rpki-client