$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3310e60e-52bc-314b-a144-102e8f1ee6d4.roa File: 3310e60e-52bc-314b-a144-102e8f1ee6d4.roa (raw, json) Hash identifier: IddytDWef5dsGWkWxO1p1KPVogU61qfWlM9CWJm1r0g= Subject key identifier: 69:6D:C2:21:F7:44:A1:35:F8:75:F5:E6:5B:A7:8A:06:E7:08:6C:1E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BB88D15D9D63F73EB55031B00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3310e60e-52bc-314b-a144-102e8f1ee6d4.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:15:d9:d6:3f:73:eb:55:03:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=e2b66d29-45bb-4cd3-9eea-dd14bd429e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:e1:df:e2:79:42:fa:e7:24:56:51:54:b0: 0a:42:e6:a8:10:bf:e5:d2:93:8a:1d:0b:f0:6d:4a: 22:49:48:a2:dd:c0:ed:ba:66:0b:73:68:6c:9c:cd: 58:e1:88:51:67:41:48:02:19:c1:2e:b5:db:ec:a0: 5b:15:ca:86:a2:a7:f9:6a:73:42:f8:a6:74:fc:30: 35:ea:4f:f7:b5:3b:ea:3b:ce:ed:78:30:1a:1f:0e: 95:ad:06:81:82:7d:67:7a:d0:d7:f1:ff:01:da:1a: ad:76:b8:0b:0a:6a:77:6b:fc:c9:d4:b8:77:ee:3b: 88:44:c2:96:e1:cb:28:1b:0e:6a:da:34:95:b7:d4: 57:7f:24:58:78:e5:45:da:ad:fe:56:3b:46:a0:05: 94:92:9f:b4:55:89:4c:4b:d5:a5:cc:08:f7:ea:0d: 04:0f:f1:79:59:b4:38:95:37:29:2a:5e:fc:98:c9: 12:35:6a:4d:d7:a2:73:50:4b:80:4f:76:7f:8a:25: 9d:22:1b:84:28:93:6f:8a:5a:71:e2:e3:ab:32:d1: 81:2f:8b:f0:fe:8c:ff:a3:13:27:8c:d8:a1:60:08: 60:80:32:47:7a:58:44:37:63:37:19:3f:de:26:03: 62:5b:27:58:14:a2:47:c8:59:b8:2e:41:20:6f:53: 32:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6D:C2:21:F7:44:A1:35:F8:75:F5:E6:5B:A7:8A:06:E7:08:6C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3310e60e-52bc-314b-a144-102e8f1ee6d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:2e:1b:d0:52:b2:aa:b2:14:09:e5:b5:19:00:dd:d3:6c:61: 8a:e1:bd:4a:d4:2b:f9:73:35:0a:74:82:fd:22:30:7b:48:75: b0:77:45:67:66:9f:e0:47:b0:90:0e:ef:f9:59:2e:9f:c7:61: 8b:d1:3e:2b:8d:a5:af:5c:a2:46:bd:81:6b:69:00:db:b8:99: 02:13:db:b8:a0:aa:81:15:e8:9c:9b:18:13:67:b7:39:2b:37: 7d:0a:f3:0c:14:0d:5e:55:2d:50:f2:f5:35:29:93:53:9a:05: a1:15:41:d4:c2:5d:9b:d5:22:59:44:77:6f:cd:1d:fb:79:09: 6c:32:f6:09:15:79:0c:fb:f7:64:3a:80:87:74:52:e8:12:7c: f4:fe:15:89:80:de:aa:22:ab:76:60:ea:e7:0b:6a:c1:13:40: 25:07:66:2a:42:65:f3:bc:fd:4a:0d:a5:19:4d:58:b6:eb:d7: 7a:b2:bd:0b:e0:59:7e:64:94:cd:20:4b:48:02:97:d9:5c:21: ef:30:7b:37:a5:02:2b:a3:72:1c:89:7a:2c:53:04:82:7c:0f: b9:16:c5:a0:f3:d7:5a:30:9d:82:88:75:06:5e:ea:51:cc:6c: 36:fe:28:ab:f3:f9:30:75:92:93:f2:fa:c4:74:0a:a0:09:f8: 60:02:39:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRXZ1j9z61UDGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTJiNjZkMjktNDViYi00Y2QzLTllZWEtZGQxNGJkNDI5ZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhXh3+J5QvrnJFZRVLAKQuaoEL/l0pOKHQvw bUoiSUii3cDtumYLc2hsnM1Y4YhRZ0FIAhnBLrXb7KBbFcqGoqf5anNC+KZ0/DA1 6k/3tTvqO87teDAaHw6VrQaBgn1netDX8f8B2hqtdrgLCmp3a/zJ1Lh37juIRMKW 4csoGw5q2jSVt9RXfyRYeOVF2q3+VjtGoAWUkp+0VYlMS9WlzAj36g0ED/F5WbQ4 lTcpKl78mMkSNWpN16JzUEuAT3Z/iiWdIhuEKJNvilpx4uOrMtGBL4vw/oz/oxMn jNihYAhggDJHelhEN2M3GT/eJgNiWydYFKJHyFm4LkEgb1MyKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGltwiH3RKE1+HX15lunigbnCGweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMzMxMGU2MGUtNTJiYy0z MTRiLWExNDQtMTAyZThmMWVlNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEguG9BSsqqyFAnltRkA3dNsYYrhvUrUK/lzNQp0gv0iMHtIdbB3RWdm n+BHsJAO7/lZLp/HYYvRPiuNpa9coka9gWtpANu4mQIT27igqoEV6JybGBNntzkr N30K8wwUDV5VLVDy9TUpk1OaBaEVQdTCXZvVIllEd2/NHft5CWwy9gkVeQz792Q6 gId0UugSfPT+FYmA3qoiq3Zg6ucLasETQCUHZipCZfO8/UoNpRlNWLbr13qyvQvg WX5klM0gS0gCl9lcIe8wezelAiujchyJeixTBIJ8D7kWxaDz11ownYKIdQZe6lHM bDb+KKvz+TB1kpPy+sR0CqAJ+GACOTA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:01 2025 by rpki-client