$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19c7da6f-0b63-3e7f-9ee5-04cc2bce160c.roa File: 19c7da6f-0b63-3e7f-9ee5-04cc2bce160c.roa (raw, json) Hash identifier: i3uyI7SLS91NWcTRJwvHxdoSFiVKZZaBB9KDnxnXoHg= Subject key identifier: 6A:27:47:78:C5:B8:C1:11:5D:9A:9C:9A:B1:2A:EA:C9:65:0F:BF:40 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBFA5A47A03AC33394D870F00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19c7da6f-0b63-3e7f-9ee5-04cc2bce160c.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 14618 IP address blocks: 130.137.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a4:7a:03:ac:33:39:4d:87:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=06813aa6-da8e-4603-95f1-6c69979f7010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:98:b9:91:54:91:59:05:ff:f0:88:80:e5:6d: 2a:03:80:fc:c1:83:2a:33:73:65:5d:49:af:e8:6c: fc:a2:5b:01:d8:55:a6:87:42:98:84:3c:61:f8:ce: 1b:f3:81:10:e9:12:ec:41:14:77:ec:83:63:cd:95: a4:1f:55:c9:1d:b5:84:4c:56:9a:2c:ff:f4:aa:1f: b0:b5:1c:29:18:be:09:97:9d:8d:e9:e9:e8:b7:bc: 4f:31:63:d9:7e:12:fb:55:b0:d3:42:5d:02:eb:25: f9:55:bb:c9:af:79:9a:e1:0d:3c:3c:d0:73:8c:0c: 55:fd:8b:51:a6:84:b3:4b:5b:12:11:3c:32:cf:99: 80:c6:b2:ac:86:89:65:ed:f4:0b:b1:e5:a3:df:e2: 67:22:6b:93:7c:f1:db:a0:a9:e4:ee:a9:8a:17:84: d0:8a:5d:d0:72:84:55:e2:83:ef:b3:43:31:a6:0b: 75:76:8a:01:47:2f:8f:9a:08:e7:18:b1:fd:e7:73: 1d:aa:e9:93:89:39:8d:fc:ac:30:ec:65:53:2e:9d: 94:06:9e:58:62:75:af:14:a2:b7:c0:b5:ab:90:50: a4:36:c2:c3:44:ee:95:5b:99:44:ad:3e:36:6c:4d: f8:04:f3:28:73:08:87:2f:06:49:70:ad:46:6c:e3: b1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:27:47:78:C5:B8:C1:11:5D:9A:9C:9A:B1:2A:EA:C9:65:0F:BF:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19c7da6f-0b63-3e7f-9ee5-04cc2bce160c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d4:16:73:da:3f:3b:1f:51:0f:91:96:39:e1:92:58:8f:d7: 88:7f:a5:38:ba:5b:0b:63:9d:f4:b0:55:f3:08:f6:90:22:88: 3d:03:40:96:fa:75:d8:95:88:e4:b6:79:aa:6e:2c:4a:f3:59: ee:aa:61:7d:de:09:e6:fd:14:99:30:66:6b:45:90:bb:ae:c2: e6:10:7f:97:74:6f:11:c5:10:64:c7:04:47:9d:fa:9b:ae:7e: 16:07:7a:be:93:f6:34:08:64:c3:8a:8a:d8:8f:57:1c:4c:f8: f4:ac:60:4a:35:08:58:a9:43:ed:9e:4f:05:c9:12:ed:ed:92: c3:c0:e4:84:57:db:28:7a:42:ef:28:fd:f0:5e:fa:c3:df:6f: 45:54:bc:e6:9e:80:ea:d0:58:9f:7a:d6:96:13:40:13:74:6e: e2:94:27:33:a7:68:5c:08:f5:04:ae:6b:38:6b:0b:8e:f7:70: 6f:4c:67:74:1f:9c:1b:53:06:19:88:87:c2:bd:05:40:fa:59: a9:6f:76:1d:ca:27:13:57:71:4c:52:67:a4:14:e6:18:b0:77: 2e:f4:8b:ba:89:72:a1:2c:e3:90:4b:17:3e:1b:00:87:ba:aa: 19:37:7c:bf:b5:11:a6:b4:31:51:1d:7c:0e:67:ce:f3:48:27: 57:4b:68:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/paR6A6wzOU2HDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MDY4MTNhYTYtZGE4ZS00NjAzLTk1ZjEtNmM2OTk3OWY3MDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5i5kVSRWQX/8IiA5W0qA4D8wYMqM3NlXUmv 6Gz8olsB2FWmh0KYhDxh+M4b84EQ6RLsQRR37INjzZWkH1XJHbWETFaaLP/0qh+w tRwpGL4Jl52N6enot7xPMWPZfhL7VbDTQl0C6yX5VbvJr3ma4Q08PNBzjAxV/YtR poSzS1sSETwyz5mAxrKsholl7fQLseWj3+JnImuTfPHboKnk7qmKF4TQil3QcoRV 4oPvs0Mxpgt1dooBRy+PmgjnGLH953MdqumTiTmN/Kww7GVTLp2UBp5YYnWvFKK3 wLWrkFCkNsLDRO6VW5lErT42bE34BPMocwiHLwZJcK1GbOOxbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGonR3jFuMERXZqcmrEq6sllD79AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMTljN2RhNmYtMGI2My0z ZTdmLTllZTUtMDRjYzJiY2UxNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPUFnPaPzsfUQ+RljnhkliP14h/pTi6WwtjnfSwVfMI9pAiiD0DQJb6 ddiViOS2eapuLErzWe6qYX3eCeb9FJkwZmtFkLuuwuYQf5d0bxHFEGTHBEed+puu fhYHer6T9jQIZMOKitiPVxxM+PSsYEo1CFipQ+2eTwXJEu3tksPA5IRX2yh6Qu8o /fBe+sPfb0VUvOaegOrQWJ961pYTQBN0buKUJzOnaFwI9QSuazhrC473cG9MZ3Qf nBtTBhmIh8K9BUD6Walvdh3KJxNXcUxSZ6QU5hiwdy70i7qJcqEs45BLFz4bAIe6 qhk3fL+1Eaa0MVEdfA5nzvNIJ1dLaEk= -----END CERTIFICATE-----Generated at Wed Nov 5 14:07:06 2025 by rpki-client