$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/384990ca-07ff-377a-8550-89ab3a8dc100.roa File: 384990ca-07ff-377a-8550-89ab3a8dc100.roa (raw, json) Hash identifier: ZPJxiiR0lYwhbuBadiHQwP+PVwYBX+I6czR8MQWLUFg= Subject key identifier: 99:1F:8C:DD:D3:5C:04:BC:0E:B7:77:01:0E:87:F1:6A:BE:38:7E:A8 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BB88D16792E0154CA727D1AC0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/384990ca-07ff-377a-8550-89ab3a8dc100.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 130.137.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:16:79:2e:01:54:ca:72:7d:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=16dfb0dd-104d-4200-918b-421d9e157054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:6a:8f:3e:c9:61:bc:ef:0f:f9:ae:10:db: 24:d5:73:c0:c0:80:d9:73:e7:e3:db:f1:d2:31:b3: 89:47:42:66:f0:74:18:37:dd:b0:7b:5a:4a:20:2b: 4a:ac:c0:d2:f9:6a:61:f2:cd:e8:8a:14:71:b2:49: 47:d3:1b:62:aa:9d:91:a4:52:fe:a1:4a:40:f5:db: 6a:8b:27:d0:99:1a:82:0e:96:0b:44:64:80:2b:5a: 54:1b:8b:61:a3:81:99:51:a2:6c:db:43:6b:7b:8c: 88:56:d8:48:8e:53:4a:7b:97:47:54:aa:09:4f:4d: 78:19:d2:a6:24:88:ae:f5:ac:89:4a:59:a0:75:cd: f0:c5:bb:0a:95:2d:0b:9c:08:09:70:2a:34:fc:ec: 81:72:01:7e:67:10:21:bc:a8:43:39:f0:f1:04:70: d3:4f:48:5d:12:ac:e8:28:c4:7f:a9:d3:74:31:b2: 2a:59:1c:6c:d2:6d:c9:ba:e9:18:1d:50:91:55:07: ef:f1:9f:c9:f8:98:7d:30:10:5c:3c:40:90:ec:68: c4:94:99:3e:d5:a7:9a:37:48:e5:87:bb:eb:bb:e2: 26:ed:7d:e6:d8:9c:a2:14:e2:a4:d6:58:9d:b1:8c: 54:56:02:64:fe:40:ba:d6:94:96:1c:7c:20:6d:5e: 39:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1F:8C:DD:D3:5C:04:BC:0E:B7:77:01:0E:87:F1:6A:BE:38:7E:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/384990ca-07ff-377a-8550-89ab3a8dc100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:24:46:7e:d9:62:bd:73:05:5b:76:d8:cc:a6:b9:00:f3:75: 38:ad:70:60:0d:80:84:d3:40:d9:0d:0c:37:71:32:fc:ca:b8: 0b:e9:9d:c9:54:e2:c8:a0:4b:68:8d:9d:48:43:de:20:b8:49: 52:28:71:9d:88:e8:b1:03:4f:86:f7:55:30:3c:b9:eb:77:e1: 6f:b2:7e:2a:72:ec:c1:29:f1:c7:71:28:4e:5a:e0:32:43:4f: e7:09:7f:c6:3c:f5:0c:ca:f5:c9:e1:ee:8b:4e:71:d6:aa:59: 9e:ac:25:4d:16:41:42:80:1a:c9:ed:06:70:ce:e0:cb:54:94: c8:a6:8c:d9:4d:86:3e:07:13:bd:1d:1a:1e:bb:36:7b:c5:bc: 24:ca:b4:ca:c6:88:54:e2:c0:c7:a7:6d:82:94:bf:7a:cb:bc: 5d:91:6d:51:db:f8:6a:65:0e:4a:a5:e1:f4:56:34:b0:86:2d: ed:de:3a:ec:d7:84:64:8e:23:58:6e:dc:df:96:b3:13:8e:36: 3f:99:4f:7f:71:fe:68:c5:95:9f:ca:b3:6c:f0:df:b3:96:41: 0d:87:e2:7e:b7:1b:07:f7:01:2e:31:24:6c:11:2d:7c:00:0f: dc:c2:02:c1:25:35:b8:83:07:e4:85:af:e3:53:3d:d7:d8:21: f9:06:5e:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRZ5LgFUynJ9GsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MTZkZmIwZGQtMTA0ZC00MjAwLTkxOGItNDIxZDllMTU3MDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCpqjz7JYbzvD/muENsk1XPAwIDZc+fj2/HS MbOJR0Jm8HQYN92we1pKICtKrMDS+Wph8s3oihRxsklH0xtiqp2RpFL+oUpA9dtq iyfQmRqCDpYLRGSAK1pUG4tho4GZUaJs20Nre4yIVthIjlNKe5dHVKoJT014GdKm JIiu9ayJSlmgdc3wxbsKlS0LnAgJcCo0/OyBcgF+ZxAhvKhDOfDxBHDTT0hdEqzo KMR/qdN0MbIqWRxs0m3JuukYHVCRVQfv8Z/J+Jh9MBBcPECQ7GjElJk+1aeaN0jl h7vru+Im7X3m2JyiFOKk1lidsYxUVgJk/kC61pSWHHwgbV45qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkfjN3TXAS8Drd3AQ6H8Wq+OH6oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMzg0OTkwY2EtMDdmZi0z NzdhLTg1NTAtODlhYjNhOGRjMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQkRn7ZYr1zBVt22MymuQDzdTitcGANgITTQNkNDDdxMvzKuAvpnclU 4sigS2iNnUhD3iC4SVIocZ2I6LEDT4b3VTA8uet34W+yfipy7MEp8cdxKE5a4DJD T+cJf8Y89QzK9cnh7otOcdaqWZ6sJU0WQUKAGsntBnDO4MtUlMimjNlNhj4HE70d Gh67NnvFvCTKtMrGiFTiwMenbYKUv3rLvF2RbVHb+GplDkql4fRWNLCGLe3eOuzX hGSOI1hu3N+WsxOONj+ZT39x/mjFlZ/Ks2zw37OWQQ2H4n63Gwf3AS4xJGwRLXwA D9zCAsElNbiDB+SFr+NTPdfYIfkGXhM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:24 2025 by rpki-client