$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa File: 2df51bd2-8f35-3784-a672-9288ad204a5e.roa (raw, json) Hash identifier: wtjzeii3g5YSS/5FoTNJ/2XhoWrUfM/uX1MWbe1For8= Subject key identifier: 27:BC:AF:41:2F:93:68:92:B5:03:33:4D:BC:D2:93:5B:C6:9E:AD:1F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBB758107315A9DC28868A500 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 14618 IP address blocks: 130.137.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:81:07:31:5a:9d:c2:88:68:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=212c8942-acc5-4c05-9457-4b50871bcb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:7c:0f:15:9b:3c:5b:a8:bb:25:1a:a1:c8: a1:57:85:9b:a7:95:f0:ac:50:57:1a:6e:b2:53:ea: 62:40:cd:24:ac:78:95:c5:94:59:bc:e4:8b:8f:16: 90:93:86:64:8b:7f:ba:09:b0:1a:49:b1:df:99:0f: 43:77:4a:27:a9:7f:6c:d1:18:76:e0:30:88:2f:51: 63:c1:09:1c:d4:0a:6d:c6:c4:e6:bf:c9:f1:1c:b4: 42:d9:53:04:0e:a1:ea:74:a5:7a:76:c0:6f:00:d5: 41:ad:36:1c:c6:7a:cf:97:df:1a:26:41:5a:fd:df: b2:c6:02:49:5e:f4:e5:9c:d0:1c:4f:6c:f6:44:bb: 6e:56:bb:6a:9c:51:20:c3:b9:ab:25:2a:58:c8:62: 39:e9:83:14:25:a1:2a:bd:e8:74:29:31:09:3a:d1: 84:f0:21:f5:83:b8:4d:0b:3d:45:16:ae:f7:b0:91: e3:66:2e:33:91:1b:5e:4f:c9:07:ae:d2:4f:e8:96: 41:87:f2:c6:16:b5:87:c8:af:62:11:50:eb:96:86: bb:3a:1a:fe:96:1c:67:49:df:1c:c8:b2:70:7b:3b: 0b:ba:59:d7:e0:51:8a:5b:42:85:51:a5:ec:08:98: 35:ff:6f:37:42:fb:e8:66:62:6c:5a:91:da:5e:e5: 5f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BC:AF:41:2F:93:68:92:B5:03:33:4D:BC:D2:93:5B:C6:9E:AD:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:46:22:30:cb:1a:e2:41:8f:9e:7e:9a:9c:de:5e:20:4e:61: 79:1c:e3:d0:d6:34:dc:04:c7:d1:f7:e5:a0:b9:fd:37:77:2e: 45:64:e8:30:d8:70:b3:ce:ac:2f:83:ec:36:29:5e:5e:d9:f7: bb:9c:fc:3a:86:58:ce:1f:8b:85:ec:f5:21:98:da:bd:c9:2b: 60:91:7d:b8:25:09:16:6d:07:e6:b1:86:c2:e0:06:c9:89:a2: ce:28:82:5d:dc:b0:63:04:0a:58:7b:ee:5d:ac:3b:ec:59:97: 55:76:48:bb:1c:d0:91:8c:77:4d:41:13:54:d5:f3:14:03:2b: 6b:fc:d7:01:4e:a5:a8:be:41:fb:a4:9d:36:d3:2e:3a:d6:55: cf:96:a2:15:f8:ed:8e:b3:26:18:d1:94:1e:53:ea:b3:d2:60: 94:ee:2c:20:e6:6c:49:0a:ae:0e:7b:2a:c8:16:78:df:3f:50: 96:63:58:24:36:52:cb:47:76:c9:a5:c4:56:67:89:03:4a:b2: ce:01:82:34:a4:e4:d0:0a:2c:07:29:93:8b:c7:73:2c:e6:80: 38:3b:3c:0e:1e:4f:19:95:e5:da:7f:a2:f3:4a:af:8e:c3:00: ab:eb:ae:ec:dd:e3:1f:88:23:c1:c5:25:25:d2:1f:b3:9d:ea: ee:60:fe:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYEHMVqdwohopQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MjEyYzg5NDItYWNjNS00YzA1LTk0NTctNGI1MDg3MWJjYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaB8DxWbPFuouyUaocihV4Wbp5XwrFBXGm6y U+piQM0krHiVxZRZvOSLjxaQk4Zki3+6CbAaSbHfmQ9Dd0onqX9s0Rh24DCIL1Fj wQkc1AptxsTmv8nxHLRC2VMEDqHqdKV6dsBvANVBrTYcxnrPl98aJkFa/d+yxgJJ XvTlnNAcT2z2RLtuVrtqnFEgw7mrJSpYyGI56YMUJaEqveh0KTEJOtGE8CH1g7hN Cz1FFq73sJHjZi4zkRteT8kHrtJP6JZBh/LGFrWHyK9iEVDrloa7Ohr+lhxnSd8c yLJwezsLulnX4FGKW0KFUaXsCJg1/283QvvoZmJsWpHaXuVfAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe8r0Evk2iStQMzTbzSk1vGnq0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmRmNTFiZDItOGYzNS0z Nzg0LWE2NzItOTI4OGFkMjA0YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZGIjDLGuJBj55+mpzeXiBOYXkc49DWNNwEx9H35aC5/Td3LkVk6DDY cLPOrC+D7DYpXl7Z97uc/DqGWM4fi4Xs9SGY2r3JK2CRfbglCRZtB+axhsLgBsmJ os4ogl3csGMEClh77l2sO+xZl1V2SLsc0JGMd01BE1TV8xQDK2v81wFOpai+Qfuk nTbTLjrWVc+WohX47Y6zJhjRlB5T6rPSYJTuLCDmbEkKrg57KsgWeN8/UJZjWCQ2 UstHdsmlxFZniQNKss4BgjSk5NAKLAcpk4vHcyzmgDg7PA4eTxmV5dp/ovNKr47D AKvrruzd4x+II8HFJSXSH7Od6u5g/lk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:11 2025 by rpki-client