$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa File: 3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa (raw, json) Hash identifier: SIZT45WZWEg9zkCXGHx67m0JexBiDOcdX02T01TrOmI= Subject key identifier: 2E:B8:04:70:30:3A:05:89:DA:BA:34:D0:EE:A3:44:A0:3F:29:8B:30 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBE402977C57183B78AF881A0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:29:77:c5:71:83:b7:8a:f8:81:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=e2519929-b10e-4b4a-b64c-b8598160b02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:96:16:c3:db:de:f5:ab:06:92:f4:fd:73:d4: 72:ba:ef:61:50:18:2e:9d:73:a0:db:cc:84:16:e5: 7b:40:d4:15:3f:61:0a:9f:13:23:3f:e6:2e:f1:21: 2c:e0:91:4e:59:e6:9b:80:47:03:08:e3:a8:0d:c4: ec:dc:a6:00:36:f7:00:4c:56:48:1e:29:dd:c3:f2: 95:80:cd:ca:53:8d:e0:ba:d3:c2:0c:74:47:e6:e8: b2:b0:2f:c4:45:22:bb:8b:93:ce:c9:73:2f:98:2b: e1:b2:39:82:10:8a:78:e1:72:dc:0a:9b:70:35:4f: c7:fe:ca:4b:ca:d3:0e:f4:92:76:4d:c2:4f:e5:3a: d6:8b:5b:81:1c:ce:fe:0b:61:6f:77:f1:7b:c6:9a: 2b:ea:48:e3:32:ae:fe:58:5a:a8:b6:d9:40:71:ae: aa:28:91:02:fd:86:c5:3b:cf:75:42:6f:96:cd:40: e8:75:0a:59:08:ab:16:16:a4:b7:80:bc:15:08:0c: a2:88:c8:97:54:b9:8d:95:d3:e3:33:44:36:0b:a9: 74:72:91:8f:0f:df:d0:51:e1:1c:54:06:e6:bf:e2: 50:3a:6d:02:31:fd:3b:7d:9a:d8:6a:4b:fb:e3:72: 15:dd:63:4a:bb:6e:ea:96:50:ca:cf:11:2b:31:4e: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B8:04:70:30:3A:05:89:DA:BA:34:D0:EE:A3:44:A0:3F:29:8B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0f:12:d5:2a:69:2b:77:95:19:3b:f5:fa:77:fb:71:e5:09: 95:e7:0d:72:f7:a3:ec:72:e0:13:0b:5d:18:89:80:d7:1e:f8: 0a:52:2a:a7:09:96:70:65:58:ca:6a:4d:89:95:99:4a:0d:a0: b9:86:ab:36:d0:75:41:1c:04:b0:ae:17:e9:22:ae:2f:b0:91: 61:47:60:c4:e6:38:4f:29:e4:a4:ab:8f:26:45:5c:1d:f3:a6: b2:25:47:fc:43:f7:85:b0:20:bb:bb:72:ff:34:e6:da:e3:0c: 08:7d:44:4a:c4:8d:f4:d5:91:b6:e3:78:ed:28:e6:86:26:88: 79:31:42:72:7e:56:93:78:2d:a9:dd:80:e1:1a:78:41:ba:fa: e7:3b:b5:e8:f4:e2:0b:53:28:ab:c6:dd:d5:27:73:4c:cc:d7: fb:b0:b8:28:3f:11:8d:9e:28:06:21:90:c1:11:2d:a6:7f:d5: 73:83:ef:d7:b9:3d:a8:94:8d:a8:f9:ba:27:8c:6a:6e:cf:b9: df:23:08:d3:e4:5f:6c:88:08:6c:cb:69:74:e3:83:f1:10:e7: ff:c3:dc:7a:75:76:e9:ca:b9:bf:27:ba:4e:65:8d:cd:5c:15: d9:5f:8f:f3:91:b3:a4:60:6f:6f:18:ad:04:91:4f:21:c2:b3: 9a:9e:d6:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QCl3xXGDt4r4gaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZTI1MTk5MjktYjEwZS00YjRhLWI2NGMtYjg1OTgxNjBiMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5YWw9ve9asGkvT9c9Ryuu9hUBgunXOg28yE FuV7QNQVP2EKnxMjP+Yu8SEs4JFOWeabgEcDCOOoDcTs3KYANvcATFZIHindw/KV gM3KU43gutPCDHRH5uiysC/ERSK7i5POyXMvmCvhsjmCEIp44XLcCptwNU/H/spL ytMO9JJ2TcJP5TrWi1uBHM7+C2Fvd/F7xpor6kjjMq7+WFqottlAca6qKJEC/YbF O891Qm+WzUDodQpZCKsWFqS3gLwVCAyiiMiXVLmNldPjM0Q2C6l0cpGPD9/QUeEc VAbmv+JQOm0CMf07fZrYakv743IV3WNKu27qllDKzxErMU4ZcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC64BHAwOgWJ2ro00O6jRKA/KYswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvM2MyZDAwNjQtOWEwZi0z M2MxLTkzOTEtOGU5MWUzZjFhNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkPEtUqaSt3lRk79fp3+3HlCZXnDXL3o+xy4BMLXRiJgNce+ApSKqcJ lnBlWMpqTYmVmUoNoLmGqzbQdUEcBLCuF+kiri+wkWFHYMTmOE8p5KSrjyZFXB3z prIlR/xD94WwILu7cv805trjDAh9RErEjfTVkbbjeO0o5oYmiHkxQnJ+VpN4Land gOEaeEG6+uc7tej04gtTKKvG3dUnc0zM1/uwuCg/EY2eKAYhkMERLaZ/1XOD79e5 PaiUjaj5uieMam7Pud8jCNPkX2yICGzLaXTjg/EQ5//D3Hp1dunKub8nuk5ljc1c Fdlfj/ORs6Rgb28YrQSRTyHCs5qe1jE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:20 2025 by rpki-client