$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/699e42de-25a9-3ec9-a43f-d9e1a6a13335.roa File: 699e42de-25a9-3ec9-a43f-d9e1a6a13335.roa (raw, json) Hash identifier: 1Ghl66PZ24mry+j7a7y1kQisXUZKrhn8M1MnZA/ZpUg= Subject key identifier: 21:F0:88:BB:44:59:07:96:CA:17:1D:AD:F3:8C:B8:20:C8:DE:81:D7 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBE402E7580FEB090454AB000 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/699e42de-25a9-3ec9-a43f-d9e1a6a13335.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 14618 IP address blocks: 130.137.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:2e:75:80:fe:b0:90:45:4a:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=213a63c7-a610-4df3-8e18-5a5f86239dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:e9:92:69:3f:08:98:09:a5:32:7a:01:81: 1a:e1:e2:1a:57:ae:54:bb:06:b1:ac:d3:f4:5e:1b: 0e:1e:28:76:67:79:0d:ee:d9:dc:e1:91:0c:87:de: df:93:0a:31:bf:93:b8:6c:46:ae:23:b0:fa:5e:7e: 32:4c:7a:af:1b:2a:2f:3b:9d:7c:fa:1f:e1:33:c3: 12:a9:44:d8:94:e7:20:f1:3a:e7:7d:e2:48:95:40: a5:44:df:c2:e8:b3:45:91:fd:74:f5:51:9a:eb:96: 96:b7:bd:94:91:c6:34:58:e3:e1:a0:e0:48:1f:ce: 6b:43:e5:30:b5:73:96:ac:c5:5b:ac:f6:4c:c9:59: da:2e:c4:1f:45:c7:74:e5:0f:4b:fa:41:e4:7a:af: f9:cd:c4:42:32:71:68:26:ac:5b:6b:57:f2:2e:1c: 3a:e2:76:1b:de:94:9e:44:ab:63:a7:36:d9:bc:b6: b7:1e:77:e5:0b:4b:40:7f:30:9f:dd:0e:db:7b:b4: ae:72:01:e7:3a:7e:b4:ed:24:be:1f:ed:36:5f:7a: 5f:22:63:3f:3d:44:d9:87:2d:b2:7e:0d:a4:1e:e1: c5:e1:80:eb:37:d2:0a:2a:a3:19:c9:67:db:77:fb: a3:c0:f1:c8:7f:61:ce:27:6f:c6:34:70:ae:ff:6e: e2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F0:88:BB:44:59:07:96:CA:17:1D:AD:F3:8C:B8:20:C8:DE:81:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/699e42de-25a9-3ec9-a43f-d9e1a6a13335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5a:6d:06:95:e9:b9:88:02:72:2f:95:26:b9:40:73:06:6e: 1b:e3:e0:14:ae:46:ca:4d:f4:2b:7a:5e:a2:9e:76:00:02:f0: ce:17:79:37:c9:fc:a1:cc:9c:49:73:b6:da:b1:31:53:51:4e: ff:ca:d1:65:26:52:bc:34:e4:14:b3:75:64:4f:88:ce:54:f2: 71:d0:9a:63:ac:50:a2:9d:fa:1b:b0:5b:0f:72:6f:9e:43:0a: 4b:e5:66:02:65:74:36:20:d4:f0:f8:51:a8:cc:b0:19:ed:84: 5d:1e:a4:7c:f1:69:bc:9b:86:b8:62:13:3f:b9:ab:36:82:ac: f1:2b:35:19:25:b6:2e:37:75:2a:c8:2c:61:6e:4a:ad:ce:32: 2e:84:e7:00:63:89:75:d3:c9:a6:4b:4d:0d:45:20:88:13:17: 11:31:9b:3e:46:ae:1a:e5:b2:0e:44:d0:4e:45:2a:ce:d7:5a: 97:35:1a:a5:50:47:60:b3:8d:9f:e2:79:f2:7d:5c:78:fb:66: 6e:27:a8:5c:d5:64:1d:a6:f0:18:62:32:5e:3b:ab:93:7d:49: 64:dc:60:c2:41:d2:3d:56:fd:e2:84:6b:fa:5f:9c:3d:a7:4d: 49:4c:53:17:ea:fc:33:78:1b:06:90:39:cf:86:f6:64:96:6c: 0d:d7:f4:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QC51gP6wkEVKsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MjEzYTYzYzctYTYxMC00ZGYzLThlMTgtNWE1Zjg2MjM5ZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHDpkmk/CJgJpTJ6AYEa4eIaV65UuwaxrNP0 XhsOHih2Z3kN7tnc4ZEMh97fkwoxv5O4bEauI7D6Xn4yTHqvGyovO518+h/hM8MS qUTYlOcg8TrnfeJIlUClRN/C6LNFkf109VGa65aWt72UkcY0WOPhoOBIH85rQ+Uw tXOWrMVbrPZMyVnaLsQfRcd05Q9L+kHkeq/5zcRCMnFoJqxba1fyLhw64nYb3pSe RKtjpzbZvLa3HnflC0tAfzCf3Q7be7SucgHnOn607SS+H+02X3pfImM/PUTZhy2y fg2kHuHF4YDrN9IKKqMZyWfbd/ujwPHIf2HOJ2/GNHCu/27iQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHwiLtEWQeWyhcdrfOMuCDI3oHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNjk5ZTQyZGUtMjVhOS0z ZWM5LWE0M2YtZDllMWE2YTEzMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZabQaV6bmIAnIvlSa5QHMGbhvj4BSuRspN9Ct6XqKedgAC8M4XeTfJ /KHMnElzttqxMVNRTv/K0WUmUrw05BSzdWRPiM5U8nHQmmOsUKKd+huwWw9yb55D CkvlZgJldDYg1PD4UajMsBnthF0epHzxabybhrhiEz+5qzaCrPErNRklti43dSrI LGFuSq3OMi6E5wBjiXXTyaZLTQ1FIIgTFxExmz5Grhrlsg5E0E5FKs7XWpc1GqVQ R2CzjZ/iefJ9XHj7Zm4nqFzVZB2m8BhiMl47q5N9SWTcYMJB0j1W/eKEa/pfnD2n TUlMUxfq/DN4GwaQOc+G9mSWbA3X9Hk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:26 2025 by rpki-client