$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d6f68e2-ec00-3459-a53e-7ad919136068.roa File: 2d6f68e2-ec00-3459-a53e-7ad919136068.roa (raw, json) Hash identifier: iTsi/qM0NoR0nBzYdQ2QHSGmcCfcNhdkJFqTFp+IxBM= Subject key identifier: 68:BA:40:E8:86:F7:2A:C1:21:21:69:DE:3F:F4:F0:52:43:DF:F2:68 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BB88D16E9F524523CA00A8380 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d6f68e2-ec00-3459-a53e-7ad919136068.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:16:e9:f5:24:52:3c:a0:0a:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=db2a1946-f66d-4ad2-a476-defe6b1e6ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:be:b1:7f:a2:ca:4d:3a:ac:8f:83:92:0a:07: ce:82:30:50:1a:04:c9:24:01:da:20:52:40:b0:10: a5:26:1d:62:65:bb:19:63:82:2a:27:09:8e:b7:2d: 23:74:5a:c4:6e:5e:f9:72:82:c3:2a:71:8e:32:39: c7:0a:7c:a8:d6:b4:d9:5b:77:09:55:56:e7:fa:35: a4:f9:8c:68:6c:bf:ea:83:d3:3e:d2:d8:85:a5:30: de:0a:cf:31:da:8a:b6:08:dc:b9:99:b2:d1:f2:0c: e2:b6:e3:27:87:3d:9f:8a:b6:f9:76:c9:76:6f:e7: c7:18:03:6c:56:08:43:70:1b:93:db:8b:7b:00:0b: d3:ae:89:82:34:02:52:f0:63:b8:1e:6c:c7:33:9a: 75:67:45:85:1f:59:ca:ca:29:93:d2:44:30:18:55: c8:0c:7f:58:91:79:fb:30:58:cd:1b:cc:49:a8:4e: 04:36:64:51:fe:c9:53:7e:0d:b6:58:d1:79:ee:09: b3:8b:93:7c:5d:d2:a4:09:00:51:ce:cf:31:ea:d7: 6a:ee:94:ac:7b:c1:61:23:03:32:24:5f:3c:4c:84: 95:f5:54:36:ac:7c:82:d3:66:aa:d9:42:2a:df:ea: cf:29:70:03:cf:24:38:42:ac:fe:b1:1e:5f:c1:10: 46:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BA:40:E8:86:F7:2A:C1:21:21:69:DE:3F:F4:F0:52:43:DF:F2:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d6f68e2-ec00-3459-a53e-7ad919136068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:09:d1:f4:01:c8:1b:74:c4:aa:fd:3c:b5:7e:88:65:04:18: 0b:60:ab:b5:10:39:68:c0:86:25:59:1f:f6:eb:07:f2:87:8f: 14:91:aa:bf:d3:7f:96:8f:82:22:fa:cc:0f:8c:d2:9f:94:9f: b5:8a:eb:3e:c0:2f:f1:bd:54:8e:1f:97:7d:6d:5f:2a:93:e4: 90:10:14:6e:ea:5c:46:f4:33:79:51:bf:60:db:0a:88:aa:0a: 08:f1:1d:5b:7c:64:b7:39:c6:8c:38:67:78:09:5c:b1:61:c6: 03:62:d7:9b:b7:d4:a9:d1:b0:ae:dc:46:93:c5:08:c8:1d:d2: b7:d4:53:8f:b7:d6:ee:b1:07:2b:b2:33:82:be:3c:15:2c:dc: a9:32:6c:af:07:c0:86:1e:bc:3e:27:fd:6c:2d:68:af:38:0c: bc:d7:67:4a:89:16:9a:f0:c7:ee:33:7c:e6:37:10:bf:4d:4e: 28:22:f7:22:b3:fa:a0:19:d2:ce:62:5f:ba:89:27:9f:24:3f: 51:f2:2d:84:da:cc:39:a8:d6:ec:d4:b7:86:66:22:51:4d:76: 9d:e2:5c:a4:ce:45:a0:83:50:5b:25:45:6d:12:93:6f:40:22: 30:9f:d5:92:f8:dd:85:19:a7:c1:ae:4c:66:40:8c:cc:f5:bd: e4:e1:bc:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRbp9SRSPKAKg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZGIyYTE5NDYtZjY2ZC00YWQyLWE0NzYtZGVmZTZiMWU2YWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh76xf6LKTTqsj4OSCgfOgjBQGgTJJAHaIFJA sBClJh1iZbsZY4IqJwmOty0jdFrEbl75coLDKnGOMjnHCnyo1rTZW3cJVVbn+jWk +YxobL/qg9M+0tiFpTDeCs8x2oq2CNy5mbLR8gzituMnhz2firb5dsl2b+fHGANs VghDcBuT24t7AAvTromCNAJS8GO4HmzHM5p1Z0WFH1nKyimT0kQwGFXIDH9YkXn7 MFjNG8xJqE4ENmRR/slTfg22WNF57gmzi5N8XdKkCQBRzs8x6tdq7pSse8FhIwMy JF88TISV9VQ2rHyC02aq2UIq3+rPKXADzyQ4Qqz+sR5fwRBG7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGi6QOiG9yrBISFp3j/08FJD3/JoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmQ2ZjY4ZTItZWMwMC0z NDU5LWE1M2UtN2FkOTE5MTM2MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYJ0fQByBt0xKr9PLV+iGUEGAtgq7UQOWjAhiVZH/brB/KHjxSRqr/T f5aPgiL6zA+M0p+Un7WK6z7AL/G9VI4fl31tXyqT5JAQFG7qXEb0M3lRv2DbCoiq CgjxHVt8ZLc5xow4Z3gJXLFhxgNi15u31KnRsK7cRpPFCMgd0rfUU4+31u6xByuy M4K+PBUs3KkybK8HwIYevD4n/WwtaK84DLzXZ0qJFprwx+4zfOY3EL9NTigi9yKz +qAZ0s5iX7qJJ58kP1HyLYTazDmo1uzUt4ZmIlFNdp3iXKTORaCDUFslRW0Sk29A IjCf1ZL43YUZp8GuTGZAjMz1veThvHk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:32 2025 by rpki-client