$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42b750e0-5512-308a-aa01-d35e2ed177a1.roa File: 42b750e0-5512-308a-aa01-d35e2ed177a1.roa (raw, json) Hash identifier: X1mEWPhCWNEVakfXa3GBD8t8FGG8mH6LEpPe3VsSHLM= Subject key identifier: 29:C2:7F:23:D8:63:FE:D9:8B:F3:6C:94:70:0A:94:C9:21:23:A8:7B Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBE402A4905378093758C9CA0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42b750e0-5512-308a-aa01-d35e2ed177a1.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:2a:49:05:37:80:93:75:8c:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=3c897ba0-efb6-4123-8899-26ce667e7a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:39:82:83:5f:99:54:34:d2:aa:94:57:37: a1:2e:5d:41:fc:fa:80:8e:ab:8b:56:fc:82:90:e4: 41:0b:9c:ec:ff:17:32:0b:a0:94:d6:9b:93:06:c5: 48:2e:64:c9:3b:bb:94:e9:5d:85:2b:9f:86:2b:24: 94:67:dc:c6:65:2c:ef:e2:60:dd:d7:40:51:8e:fc: ea:87:0d:a1:92:d1:38:9e:ba:c9:44:52:61:c6:04: 46:e5:e9:89:ea:89:93:46:99:35:7e:23:34:d9:7e: b0:18:ec:ef:da:51:45:40:10:94:96:99:d0:81:1a: 87:f2:ff:23:48:89:13:6c:be:54:03:c4:50:74:4b: 8e:d5:4b:b1:27:01:79:da:1a:57:92:cf:75:2f:af: 96:90:23:c3:83:65:9c:4d:6b:25:a0:4c:4b:18:64: e1:2a:98:42:c8:62:f2:a1:df:e2:7b:89:51:81:75: a9:a1:5c:8e:c8:fd:7d:93:bf:81:9a:43:1d:f4:b0: 65:55:c5:03:00:06:41:50:e4:fc:a0:94:1e:93:d8: af:62:7b:6b:c8:6e:6a:3f:dd:ae:c9:fc:0e:06:86: ee:86:92:83:1f:34:60:6c:96:dd:9d:ff:c0:11:29: 37:6b:e0:59:dd:4d:85:53:64:da:be:fa:6c:7d:cd: 0c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C2:7F:23:D8:63:FE:D9:8B:F3:6C:94:70:0A:94:C9:21:23:A8:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42b750e0-5512-308a-aa01-d35e2ed177a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:8c:81:e5:da:96:90:4d:31:ab:c3:08:b1:81:60:57:25:09: 2c:67:40:ae:97:66:e6:3a:08:49:76:e0:0d:08:5d:fa:05:08: 19:ac:86:12:e0:ab:0e:a5:20:66:95:b0:04:d8:74:60:f1:41: ed:92:0c:41:45:7a:d5:be:d0:31:67:d1:b6:1d:f9:02:75:df: b7:16:e3:4e:2c:be:dd:d1:0b:7d:e4:1e:63:12:c1:37:ae:a2: dd:05:ec:cb:99:d2:b9:7d:6b:57:38:42:ca:c1:c3:61:ef:02: bd:74:53:6b:3b:a4:3b:94:60:26:67:54:48:cd:01:b7:07:c6: d4:81:0c:2e:4b:a8:d6:fe:54:c2:d5:7b:a8:8f:16:c2:24:f1: e6:af:62:59:64:d1:66:03:fe:04:e3:e5:81:fb:b8:cc:36:7b: 19:a8:4f:30:a2:f9:04:6a:bc:31:7e:bd:c8:d8:6c:1d:0b:cf: 12:fc:0d:31:88:e6:af:95:48:cc:f3:4b:f1:72:65:9a:35:fb: 16:f4:80:17:4c:c2:43:c0:3d:27:f6:17:19:d9:84:aa:bd:75: c0:47:e2:f3:7d:89:fd:e9:dd:fd:32:a8:d7:38:97:6e:6d:31: c4:09:b2:67:7b:5b:ca:9e:ea:0e:e4:d3:63:22:2c:13:7e:9b: ec:b9:ac:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QCpJBTeAk3WMnKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk M2M4OTdiYTAtZWZiNi00MTIzLTg4OTktMjZjZTY2N2U3YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hA5goNfmVQ00qqUVzehLl1B/PqAjquLVvyC kORBC5zs/xcyC6CU1puTBsVILmTJO7uU6V2FK5+GKySUZ9zGZSzv4mDd10BRjvzq hw2hktE4nrrJRFJhxgRG5emJ6omTRpk1fiM02X6wGOzv2lFFQBCUlpnQgRqH8v8j SIkTbL5UA8RQdEuO1UuxJwF52hpXks91L6+WkCPDg2WcTWsloExLGGThKphCyGLy od/ie4lRgXWpoVyOyP19k7+BmkMd9LBlVcUDAAZBUOT8oJQek9ivYntryG5qP92u yfwOBobuhpKDHzRgbJbdnf/AESk3a+BZ3U2FU2Tavvpsfc0MUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnCfyPYY/7Zi/NslHAKlMkhI6h7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDJiNzUwZTAtNTUxMi0z MDhhLWFhMDEtZDM1ZTJlZDE3N2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6MgeXalpBNMavDCLGBYFclCSxnQK6XZuY6CEl24A0IXfoFCBmshhLg qw6lIGaVsATYdGDxQe2SDEFFetW+0DFn0bYd+QJ137cW404svt3RC33kHmMSwTeu ot0F7MuZ0rl9a1c4QsrBw2HvAr10U2s7pDuUYCZnVEjNAbcHxtSBDC5LqNb+VMLV e6iPFsIk8eavYllk0WYD/gTj5YH7uMw2exmoTzCi+QRqvDF+vcjYbB0LzxL8DTGI 5q+VSMzzS/FyZZo1+xb0gBdMwkPAPSf2FxnZhKq9dcBH4vN9if3p3f0yqNc4l25t McQJsmd7W8qe6g7k02MiLBN+m+y5rKU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:49 2025 by rpki-client