$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa File: 5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa (raw, json) Hash identifier: ubpE54smVBqxWd/dbsmjLbXaq7CK9KbspIDcE4QXhe8= Subject key identifier: 52:73:96:CC:E6:F6:84:20:7F:A6:CD:D6:9F:FC:F2:C9:0B:AC:A7:72 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBB75811E789B0DD293E2C3E0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 8987 IP address blocks: 130.137.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:81:1e:78:9b:0d:d2:93:e2:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=704a5925-05e7-4ae6-9b35-daf5d5180dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b2:6a:02:96:77:25:02:b8:43:c4:b5:0a:95: d6:93:04:85:01:7f:6c:6d:0c:24:e9:ca:54:c5:6f: ee:49:3f:91:a1:06:83:31:1d:11:62:d9:ee:18:1f: db:52:46:8e:60:b9:b3:b1:6a:66:e5:1a:72:b1:f2: a6:4b:c6:3a:0d:79:e6:75:c0:0a:4f:e2:b2:9d:d5: b1:e1:2e:96:59:91:a6:e3:5f:fe:fe:d1:ab:fb:7a: 10:e8:3a:ff:09:f6:66:54:47:22:96:6a:9a:4f:97: 06:50:58:e8:68:d8:da:84:1e:1f:58:b4:e4:6b:ca: b0:66:27:6e:fa:ed:36:cf:a4:b0:10:1e:58:fc:8e: c3:79:2d:fd:78:d5:71:33:08:a4:d7:4b:0b:cc:f0: 96:1f:a9:52:fe:81:b9:a4:04:89:ed:73:67:20:43: 57:28:6a:2b:95:e4:3d:c4:da:49:db:6c:c4:42:95: 42:e7:17:e2:a4:9f:a6:a1:76:82:ad:3c:99:99:bc: 58:dc:f1:e0:ff:c2:13:82:50:99:85:68:d9:dc:c5: d5:c3:e6:92:ec:7a:28:d1:49:72:f1:f0:35:b6:96: a7:5a:75:d7:e5:c7:4b:69:cc:4a:4b:60:66:49:4a: 4c:f4:9b:2c:13:b3:f2:be:f5:3a:4b:5f:74:23:a9: 82:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:73:96:CC:E6:F6:84:20:7F:A6:CD:D6:9F:FC:F2:C9:0B:AC:A7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:92:d4:d3:07:57:ac:8a:69:dc:4a:24:11:a5:32:00:05:2a: 4b:66:31:b7:9f:88:a0:f0:46:90:89:c9:61:01:2d:88:90:e4: 90:93:10:3c:5c:84:bc:bf:6b:ab:d6:52:02:d0:d1:1d:87:45: 27:cc:1c:03:4d:6c:60:c8:93:b5:89:38:f1:7f:05:81:2d:42: 3d:c8:1b:5b:f9:73:43:dd:f2:b5:7b:90:1a:4d:0e:21:a7:30: 51:ea:79:d6:74:6f:20:d2:3a:3e:4a:f2:15:87:09:e8:06:b1: 3a:bc:e7:12:45:2f:7b:40:ea:f9:ff:47:51:d7:59:9b:37:7f: 66:f4:15:18:82:74:e6:ff:d9:5f:b9:36:ad:6a:13:c0:c0:86: a8:30:6d:fe:d0:b2:a1:7b:f7:74:ce:78:99:30:3a:35:46:46: 81:fc:15:d8:c3:04:f0:b4:67:ea:20:c9:7f:a7:e9:5d:90:e7: 1f:ea:e8:b9:28:43:02:e3:68:62:41:81:f1:a5:ed:d0:48:53: 29:9b:8b:e8:28:da:e9:a3:3a:95:86:25:db:ed:99:10:9e:6c: 14:40:78:1a:0c:6d:91:02:90:8c:2b:00:3a:7e:3c:c5:04:11: 3e:29:db:76:d8:bf:30:5f:3c:02:38:2b:84:57:9f:43:cf:33: cc:ed:bd:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYEeeJsN0pPiw+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NzA0YTU5MjUtMDVlNy00YWU2LTliMzUtZGFmNWQ1MTgwZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7JqApZ3JQK4Q8S1CpXWkwSFAX9sbQwk6cpU xW/uST+RoQaDMR0RYtnuGB/bUkaOYLmzsWpm5RpysfKmS8Y6DXnmdcAKT+KyndWx 4S6WWZGm41/+/tGr+3oQ6Dr/CfZmVEcilmqaT5cGUFjoaNjahB4fWLTka8qwZidu +u02z6SwEB5Y/I7DeS39eNVxMwik10sLzPCWH6lS/oG5pASJ7XNnIENXKGorleQ9 xNpJ22zEQpVC5xfipJ+moXaCrTyZmbxY3PHg/8ITglCZhWjZ3MXVw+aS7Hoo0Uly 8fA1tpanWnXX5cdLacxKS2BmSUpM9JssE7PyvvU6S190I6mC5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJzlszm9oQgf6bN1p/88skLrKdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWEyNWQ3YjEtZThiOS0z MzVmLTlhMmMtOWEzYmYzZGFjMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+S1NMHV6yKadxKJBGlMgAFKktmMbefiKDwRpCJyWEBLYiQ5JCTEDxc hLy/a6vWUgLQ0R2HRSfMHANNbGDIk7WJOPF/BYEtQj3IG1v5c0Pd8rV7kBpNDiGn MFHqedZ0byDSOj5K8hWHCegGsTq85xJFL3tA6vn/R1HXWZs3f2b0FRiCdOb/2V+5 Nq1qE8DAhqgwbf7QsqF793TOeJkwOjVGRoH8FdjDBPC0Z+ogyX+n6V2Q5x/q6Lko QwLjaGJBgfGl7dBIUymbi+go2umjOpWGJdvtmRCebBRAeBoMbZECkIwrADp+PMUE ET4p23bYvzBfPAI4K4RXn0PPM8ztvSo= -----END CERTIFICATE-----Generated at Wed Nov 5 01:30:02 2025 by rpki-client