$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4a550428-74fe-3227-a036-ecfd9d4fd689.roa File: 4a550428-74fe-3227-a036-ecfd9d4fd689.roa (raw, json) Hash identifier: 3qA25DUPGQgutADLYXF5A3HKv/76/y/feafDRnP6Wa4= Subject key identifier: A9:C3:28:38:26:CC:38:C2:22:4A:D4:45:1E:81:B2:63:08:64:8D:E5 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBB75821BA6859B07C4FC6600 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4a550428-74fe-3227-a036-ecfd9d4fd689.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:82:1b:a6:85:9b:07:c4:fc:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=67caf3d1-2da0-47f7-b5cc-dec543fbbf71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:f9:2c:21:57:0a:78:cd:35:d4:25:a0:f6: af:8d:be:d8:a0:a8:cd:f7:94:32:26:44:6d:03:0d: 4e:9d:f1:50:27:d7:c8:56:54:c4:9d:bf:08:db:05: ed:f5:16:02:5a:72:c4:bf:32:c3:b1:ee:aa:52:55: 36:3a:f6:ee:36:a3:ee:67:ba:d2:40:78:c4:a2:bc: 3d:f5:29:59:17:76:66:fe:84:04:37:3b:57:05:a5: 85:d9:4c:33:f3:97:47:30:4c:15:7c:a9:96:0d:5d: e5:3f:d4:d4:4a:70:b2:ba:0f:65:1e:11:e6:20:25: a9:15:81:12:e3:76:ca:8b:5a:a1:1c:c3:df:74:e6: b7:47:a6:f4:70:20:85:9d:24:89:fa:63:3a:b6:a0: 0f:5b:38:6b:93:00:db:c7:16:67:83:43:00:73:9e: 23:c2:36:44:83:14:b7:b7:90:23:6c:19:89:26:c7: 29:3b:25:64:bf:52:3a:e8:60:ea:3b:cb:54:be:43: 39:01:80:8c:d2:c8:94:e1:ff:47:a0:79:4d:47:21: b8:e4:64:1b:2e:1a:d7:36:29:06:99:07:79:9b:bc: 53:0a:4c:6a:69:80:03:76:e1:63:d3:06:e5:f0:f9: 3b:fc:5b:50:d0:fc:6e:f2:83:60:91:24:6b:23:a5: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C3:28:38:26:CC:38:C2:22:4A:D4:45:1E:81:B2:63:08:64:8D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4a550428-74fe-3227-a036-ecfd9d4fd689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:bc:97:27:2a:93:72:7f:a8:b4:d7:41:ba:1c:02:8c:9d:e9: 81:2e:56:eb:df:38:f6:d3:60:4a:85:eb:1c:52:79:73:bb:f2: 11:6d:2c:0c:a9:99:89:6c:c0:43:fb:84:a2:ef:fc:6b:83:ad: 83:ea:14:4a:01:ad:58:8c:44:ee:ce:62:c9:88:61:a8:38:51: 32:52:bc:4a:70:73:95:14:78:df:cc:a7:4e:ba:c8:82:d1:d5: 43:85:75:b1:70:fa:3a:a3:0c:82:f8:55:82:f5:e1:c5:9f:d2: af:d3:c5:8d:ff:f2:11:28:db:64:ec:a5:f7:89:be:2d:61:f6: c8:7b:5a:14:a6:c6:b2:99:73:7a:7b:d8:e8:bb:c9:a7:65:08: 08:66:9f:fe:73:e2:b8:1c:fb:c5:ba:a7:7e:38:a5:32:44:4f: f7:47:e0:c1:db:06:f8:18:38:b7:ab:0d:3a:fe:30:81:76:56: 62:26:fe:91:da:89:b6:99:5c:2f:14:c7:63:87:80:52:c6:48: c2:d1:b9:ef:f3:c3:8e:99:02:e3:c4:c5:83:df:2f:a4:76:7d: 6d:aa:69:05:eb:9d:93:0c:08:56:b0:c6:bf:bc:0c:cb:de:b4: 1f:ed:6d:47:87:5a:12:91:98:4e:43:73:91:6a:b9:de:e9:52: f3:df:0a:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYIbpoWbB8T8ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NjdjYWYzZDEtMmRhMC00N2Y3LWI1Y2MtZGVjNTQzZmJiZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmb5LCFXCnjNNdQloPavjb7YoKjN95QyJkRt Aw1OnfFQJ9fIVlTEnb8I2wXt9RYCWnLEvzLDse6qUlU2OvbuNqPuZ7rSQHjEorw9 9SlZF3Zm/oQENztXBaWF2Uwz85dHMEwVfKmWDV3lP9TUSnCyug9lHhHmICWpFYES 43bKi1qhHMPfdOa3R6b0cCCFnSSJ+mM6tqAPWzhrkwDbxxZng0MAc54jwjZEgxS3 t5AjbBmJJscpOyVkv1I66GDqO8tUvkM5AYCM0siU4f9HoHlNRyG45GQbLhrXNikG mQd5m7xTCkxqaYADduFj0wbl8Pk7/FtQ0Pxu8oNgkSRrI6UrZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnDKDgmzDjCIkrURR6BsmMIZI3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNGE1NTA0MjgtNzRmZS0z MjI3LWEwMzYtZWNmZDlkNGZkNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu8lycqk3J/qLTXQbocAoyd6YEuVuvfOPbTYEqF6xxSeXO78hFtLAyp mYlswEP7hKLv/GuDrYPqFEoBrViMRO7OYsmIYag4UTJSvEpwc5UUeN/Mp066yILR 1UOFdbFw+jqjDIL4VYL14cWf0q/TxY3/8hEo22TspfeJvi1h9sh7WhSmxrKZc3p7 2Oi7yadlCAhmn/5z4rgc+8W6p344pTJET/dH4MHbBvgYOLerDTr+MIF2VmIm/pHa ibaZXC8Ux2OHgFLGSMLRue/zw46ZAuPExYPfL6R2fW2qaQXrnZMMCFawxr+8DMve tB/tbUeHWhKRmE5Dc5Fqud7pUvPfCpE= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:30 2025 by rpki-client