$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/71571d9d-29b3-39c2-a12c-149856476098.roa File: 71571d9d-29b3-39c2-a12c-149856476098.roa (raw, json) Hash identifier: hFAxRDfD7lvovirjJ4WGfkSOFzqzHck9M4k3+Y4w2co= Subject key identifier: A6:7D:78:3F:7F:57:EE:24:13:15:3C:68:2F:BE:56:91:7F:32:08:C3 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B970CE6C7619BBCA7411B1B40 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/71571d9d-29b3-39c2-a12c-149856476098.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e6:c7:61:9b:bc:a7:41:1b:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=72fe43ef-0fb4-40b4-8e0e-6d4b83877035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0f:3d:73:6e:06:11:10:73:92:72:06:cd:f6: 99:99:1b:12:17:ee:72:5e:79:87:d6:52:cc:c8:10: 2e:00:82:32:c4:78:c6:56:de:5c:67:35:4d:64:6c: e3:fe:7b:60:94:01:b3:9a:da:c3:49:d7:59:f6:7f: 4a:87:ca:f1:ad:58:13:b8:d6:53:47:38:7b:b5:99: 7d:86:b8:5d:52:32:5c:dc:ca:97:da:fc:a8:c7:17: 28:bd:be:ec:4e:d5:5c:f0:29:29:b0:b2:9e:cf:e0: 07:d5:d1:52:03:fb:2b:cc:97:b2:d2:5a:b3:fa:f5: 43:6f:9e:12:df:77:aa:18:f9:b0:1d:ca:8f:f2:6f: 4e:06:4e:0d:43:8a:5f:91:1f:9d:2a:e1:af:4c:2a: ee:1f:9a:6b:da:a4:31:5c:86:7f:54:e0:b6:cf:26: 69:bf:90:fd:c2:86:92:5d:95:24:e0:e1:f9:58:60: 5b:5b:2d:b4:ca:59:f8:06:93:b1:4d:e9:63:80:c0: 9f:b7:55:05:71:ec:19:4b:59:94:dd:84:4b:4f:79: 8c:eb:d6:3e:a0:a1:1a:71:6d:16:e9:bb:32:eb:81: da:0a:76:fe:6f:d3:f2:92:74:ed:d5:e6:47:d2:78: 8f:10:e1:20:d3:67:46:93:1e:7f:fb:d0:50:73:da: 1a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7D:78:3F:7F:57:EE:24:13:15:3C:68:2F:BE:56:91:7F:32:08:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/71571d9d-29b3-39c2-a12c-149856476098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b8:33:39:20:9d:b6:6d:4b:9c:eb:2a:b6:e7:6a:a2:ce:c2: 52:87:54:f1:71:ac:3b:fb:c8:0c:b9:3c:28:35:b2:9a:df:cb: 1d:c5:62:5c:76:58:ac:80:71:0a:04:20:1c:52:44:16:a9:c4: 75:70:ab:58:da:cd:ea:26:ca:b2:17:26:ed:3a:d5:fe:67:ad: 8a:67:5b:78:cc:99:29:7d:d5:b4:ee:25:20:94:8f:e4:55:9f: e2:62:7f:37:df:62:92:2b:1f:cf:b0:6a:8c:9a:82:0a:00:71: 91:ea:d1:f2:af:85:8e:22:00:c5:42:c1:12:13:3c:1d:e1:6b: cf:b7:0a:29:a3:94:36:07:37:c9:d8:90:3d:aa:4d:0e:0a:13: 1f:29:d7:42:cf:6a:92:9b:17:60:63:d1:6b:cd:76:7a:14:bf: cb:e0:a4:32:8f:4c:c1:28:96:55:09:a6:27:37:aa:ac:34:e9: 48:4f:b2:ea:b2:29:1f:f7:13:46:d4:67:a2:68:e8:d1:a5:6a: ad:c8:5a:56:b1:20:5b:6f:71:fb:f2:08:17:95:be:e5:73:a1: 39:d0:94:39:97:fa:48:c5:b6:ae:0f:6a:f6:5e:f3:d6:c8:8b: eb:8f:56:a6:6f:2a:47:79:7a:fa:8e:db:a5:54:6a:35:37:e9: 20:31:6a:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDObHYZu8p0EbG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NzJmZTQzZWYtMGZiNC00MGI0LThlMGUtNmQ0YjgzODc3MDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow89c24GERBzknIGzfaZmRsSF+5yXnmH1lLM yBAuAIIyxHjGVt5cZzVNZGzj/ntglAGzmtrDSddZ9n9Kh8rxrVgTuNZTRzh7tZl9 hrhdUjJc3MqX2vyoxxcovb7sTtVc8CkpsLKez+AH1dFSA/srzJey0lqz+vVDb54S 33eqGPmwHcqP8m9OBk4NQ4pfkR+dKuGvTCruH5pr2qQxXIZ/VOC2zyZpv5D9woaS XZUk4OH5WGBbWy20yln4BpOxTeljgMCft1UFcewZS1mU3YRLT3mM69Y+oKEacW0W 6bsy64HaCnb+b9PyknTt1eZH0niPEOEg02dGkx5/+9BQc9oa+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZ9eD9/V+4kExU8aC++VpF/MgjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNzE1NzFkOWQtMjliMy0z OWMyLWExMmMtMTQ5ODU2NDc2MDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi4MzkgnbZtS5zrKrbnaqLOwlKHVPFxrDv7yAy5PCg1sprfyx3FYlx2 WKyAcQoEIBxSRBapxHVwq1jazeomyrIXJu061f5nrYpnW3jMmSl91bTuJSCUj+RV n+JifzffYpIrH8+waoyaggoAcZHq0fKvhY4iAMVCwRITPB3ha8+3CimjlDYHN8nY kD2qTQ4KEx8p10LPapKbF2Bj0WvNdnoUv8vgpDKPTMEollUJpic3qqw06UhPsuqy KR/3E0bUZ6Jo6NGlaq3IWlaxIFtvcfvyCBeVvuVzoTnQlDmX+kjFtq4PavZe89bI i+uPVqZvKkd5evqO26VUajU36SAxaiw= -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:39 2025 by rpki-client