$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e892f0a-0935-3e59-bd12-3f0547f44c55.roa File: 2e892f0a-0935-3e59-bd12-3f0547f44c55.roa (raw, json) Hash identifier: j2wJ7U+JhT6+I2bMvaOyy+PTAt2WW8rwXxa7HPSU04c= Subject key identifier: ED:07:2F:31:E7:56:8E:7D:EB:93:BE:09:D4:B0:B2:C7:1B:DB:E6:C6 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBE4028F86700345BF9773500 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e892f0a-0935-3e59-bd12-3f0547f44c55.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 14618 IP address blocks: 130.137.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:28:f8:67:00:34:5b:f9:77:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=dddf4f66-f48e-434a-99b4-ab74a670cac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:95:e9:24:1b:40:76:9f:3d:77:bd:67:1d:a5: e0:a0:a2:36:5b:6b:c6:57:ac:a9:e1:51:d7:0e:4c: a4:c0:e5:a8:6a:db:84:9a:07:f2:a4:e2:c3:c7:e2: 8b:08:1d:26:68:b0:a4:19:6c:c5:67:ca:54:18:85: 12:4a:ed:17:8f:28:e3:b5:2b:81:ed:df:68:1c:b4: 44:2c:23:35:f2:e4:d5:be:2a:41:a7:df:65:c7:83: 7c:ab:11:f5:55:6d:1f:08:01:7d:c0:9f:6f:3b:a5: 5e:04:0a:24:3f:ea:65:50:90:38:85:ac:7a:ba:50: 9d:ba:7e:48:71:5d:7a:50:73:c8:34:f6:1c:46:d3: 97:ca:67:26:a6:5d:e6:3e:f2:f4:f0:2d:ba:ff:4f: 8b:00:e4:ac:6a:e6:a2:73:aa:72:5c:e7:5e:31:d5: 0f:70:11:be:4c:53:4e:a7:7a:a7:87:4f:14:f2:54: d6:1c:14:27:35:ce:ea:b9:1e:72:e4:9f:94:85:e5: 33:00:e3:8c:ae:fc:ae:61:b3:4a:63:8e:d4:d1:b1: e0:75:d1:54:b6:03:9a:21:28:63:ef:7c:4b:95:83: 65:41:e0:44:99:dc:54:5d:61:76:03:f6:5f:0d:d2: 12:cd:5b:e7:ae:cc:cb:e2:ee:d2:86:92:71:6c:9b: 2c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:07:2F:31:E7:56:8E:7D:EB:93:BE:09:D4:B0:B2:C7:1B:DB:E6:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e892f0a-0935-3e59-bd12-3f0547f44c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:14:ec:ff:a7:52:64:f1:dd:46:0e:fc:95:32:4c:a6:4f:9b: 3a:5f:90:18:20:0a:8e:06:4e:98:78:90:0b:61:69:82:7e:e3: c2:72:e7:b4:b3:2e:a8:f1:9c:ea:32:43:17:26:46:65:16:2a: c8:40:44:1d:36:6c:68:00:b3:15:05:72:05:07:a9:82:fb:89: 54:e6:27:80:74:72:d5:32:c1:34:94:cc:31:e6:ed:eb:40:59: 7f:85:2f:81:28:f6:fe:d3:87:93:86:b9:63:09:4d:b3:50:24: 3f:ea:1d:a5:c9:46:0d:8c:54:da:f5:6e:b0:01:1b:10:7c:0a: d8:92:d0:86:e7:38:cd:5a:48:7b:f5:f5:40:99:03:ad:71:4b: 93:e4:65:5f:6e:b3:81:7d:79:ca:35:9d:b9:83:e7:82:47:73: e0:24:69:59:eb:36:b4:30:a1:a4:a9:86:76:82:35:64:33:5f: d3:36:73:53:70:85:14:51:c9:8f:d7:32:08:4d:a7:f9:7c:36: 2d:53:fe:57:65:ff:a2:f4:11:1a:64:5a:ee:23:4e:de:b8:df: 93:18:c3:32:1c:95:50:6a:74:63:45:08:07:aa:bc:a4:a6:6b: c5:3e:10:98:3c:66:eb:7d:fc:84:fe:6c:a7:4b:0a:42:1a:94: 9d:fc:88:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QCj4ZwA0W/l3NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZGRkZjRmNjYtZjQ4ZS00MzRhLTk5YjQtYWI3NGE2NzBjYWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35XpJBtAdp89d71nHaXgoKI2W2vGV6yp4VHX DkykwOWoatuEmgfypOLDx+KLCB0maLCkGWzFZ8pUGIUSSu0XjyjjtSuB7d9oHLRE LCM18uTVvipBp99lx4N8qxH1VW0fCAF9wJ9vO6VeBAokP+plUJA4hax6ulCdun5I cV16UHPINPYcRtOXymcmpl3mPvL08C26/0+LAOSsauaic6pyXOdeMdUPcBG+TFNO p3qnh08U8lTWHBQnNc7quR5y5J+UheUzAOOMrvyuYbNKY47U0bHgddFUtgOaIShj 73xLlYNlQeBEmdxUXWF2A/ZfDdISzVvnrszL4u7ShpJxbJsspwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0HLzHnVo5965O+CdSwsscb2+bGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmU4OTJmMGEtMDkzNS0z ZTU5LWJkMTItM2YwNTQ3ZjQ0YzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkU7P+nUmTx3UYO/JUyTKZPmzpfkBggCo4GTph4kAthaYJ+48Jy57Sz LqjxnOoyQxcmRmUWKshARB02bGgAsxUFcgUHqYL7iVTmJ4B0ctUywTSUzDHm7etA WX+FL4Eo9v7Th5OGuWMJTbNQJD/qHaXJRg2MVNr1brABGxB8CtiS0IbnOM1aSHv1 9UCZA61xS5PkZV9us4F9eco1nbmD54JHc+AkaVnrNrQwoaSphnaCNWQzX9M2c1Nw hRRRyY/XMghNp/l8Ni1T/ldl/6L0ERpkWu4jTt6435MYwzIclVBqdGNFCAeqvKSm a8U+EJg8Zut9/IT+bKdLCkIalJ38iH0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:05:56 2025 by rpki-client