$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/76de275e-a4fa-3704-8a8f-bc3d6f07f960.roa File: 76de275e-a4fa-3704-8a8f-bc3d6f07f960.roa (raw, json) Hash identifier: 1bJxeYnc35jpN+kY08TjG9kJD2nJYt2YZs5DjulwS6U= Subject key identifier: 3D:44:A6:73:BB:B4:CB:A8:C3:78:83:5E:52:9E:40:78:CF:36:10:25 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF5212C616CA46D16FD5B0480 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/76de275e-a4fa-3704-8a8f-bc3d6f07f960.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2c:61:6c:a4:6d:16:fd:5b:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=25b11c6a-ca0e-4c45-b60e-f0d103b53ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:60:be:71:e1:fb:bb:d4:7c:a6:22:6c:a6:1e: b7:0b:ac:c6:bf:57:3a:33:05:cc:01:68:cf:5a:61: 46:7d:51:93:7e:6d:a9:15:1e:19:cf:e3:70:3b:c5: 5b:94:18:d8:6b:7c:5b:80:7d:3e:68:eb:d6:12:93: e0:ab:48:5c:08:de:53:ce:e9:e2:72:38:b4:9b:0b: 89:85:d9:4c:51:7b:70:c9:ea:e3:db:45:63:6f:ff: eb:88:f5:10:e0:65:45:ce:29:40:a7:b1:ee:6e:44: b7:02:af:87:c1:5d:36:e5:8f:68:1f:30:01:43:5b: 21:4e:c2:82:23:4b:c5:ce:24:20:86:ac:2c:56:7d: e9:39:07:d3:08:cc:fd:e6:4d:43:87:52:88:fa:00: d5:bc:b0:c4:f6:e1:04:68:f9:e2:3a:93:00:21:cf: 75:90:69:e1:28:c2:e9:d0:39:9a:e2:92:a6:e8:76: 00:17:b5:2e:a4:c1:97:41:c1:03:c5:94:17:a2:40: 6f:16:02:40:97:b1:61:79:6c:32:61:b8:ab:6f:9a: 54:48:45:ee:f6:6a:c8:7d:57:f3:f6:0d:d1:51:26: 17:62:8c:83:f1:d3:04:49:c8:fa:3a:6e:66:3d:07: 36:89:f8:ef:9d:52:71:51:91:df:c8:d5:18:e7:9b: 84:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:44:A6:73:BB:B4:CB:A8:C3:78:83:5E:52:9E:40:78:CF:36:10:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/76de275e-a4fa-3704-8a8f-bc3d6f07f960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:97:a4:71:54:b8:63:65:34:8b:72:c9:a6:b6:94:0a:5b:7f: c7:0b:b0:e7:97:1f:5f:5a:c0:6f:09:a0:c9:2b:4b:a6:14:59: 6a:5a:11:d3:58:aa:1e:10:fc:bd:a3:f7:2e:09:de:5f:09:0d: 43:73:cc:cf:70:f6:51:d9:b1:91:b5:bd:d7:f0:93:ae:8b:5f: 67:b6:13:11:8c:3b:8c:c6:3b:ab:99:dd:5f:94:bd:4e:03:9b: 6e:70:88:ec:2e:2e:af:3f:c1:8c:67:f5:bf:4e:bb:6e:06:df: a5:16:1e:74:fb:50:8a:0e:c5:3b:70:d2:40:c5:29:5d:dd:cf: 5a:9b:99:e2:cc:93:1c:d8:48:2d:c2:ea:86:78:ab:de:fb:47: 33:99:0e:3e:32:c6:5f:19:95:94:d8:b4:3b:40:a6:69:75:80: 96:b9:66:7e:ea:c6:d8:20:d0:0d:d8:da:40:45:12:f6:10:d3: 98:48:f9:69:45:1b:b0:a4:60:59:2f:0a:17:5b:21:44:52:19: 84:8c:48:1e:9a:ed:a0:d6:a6:62:58:3d:1e:10:72:49:f1:e7: af:53:43:13:a2:8b:f5:a2:cc:29:4b:09:8a:d3:fb:01:ad:4e: 2c:55:a6:fa:c1:c8:4f:db:86:63:d5:05:75:be:1e:f4:c6:0e: cb:cd:57:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ISxhbKRtFv1bBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjViMTFjNmEtY2EwZS00YzQ1LWI2MGUtZjBkMTAzYjUzZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmC+ceH7u9R8piJsph63C6zGv1c6MwXMAWjP WmFGfVGTfm2pFR4Zz+NwO8VblBjYa3xbgH0+aOvWEpPgq0hcCN5Tzunicji0mwuJ hdlMUXtwyerj20Vjb//riPUQ4GVFzilAp7HubkS3Aq+HwV025Y9oHzABQ1shTsKC I0vFziQghqwsVn3pOQfTCMz95k1Dh1KI+gDVvLDE9uEEaPniOpMAIc91kGnhKMLp 0Dma4pKm6HYAF7UupMGXQcEDxZQXokBvFgJAl7FheWwyYbirb5pUSEXu9mrIfVfz 9g3RUSYXYoyD8dMEScj6Om5mPQc2ifjvnVJxUZHfyNUY55uErwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1EpnO7tMuow3iDXlKeQHjPNhAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNzZkZTI3NWUtYTRmYS0z NzA0LThhOGYtYmMzZDZmMDdmOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgon8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSXpHFUuGNlNItyyaa2lApbf8cLsOeXH19awG8JoMkrS6YUWWpaEdNY qh4Q/L2j9y4J3l8JDUNzzM9w9lHZsZG1vdfwk66LX2e2ExGMO4zGO6uZ3V+UvU4D m25wiOwuLq8/wYxn9b9Ou24G36UWHnT7UIoOxTtw0kDFKV3dz1qbmeLMkxzYSC3C 6oZ4q977RzOZDj4yxl8ZlZTYtDtApml1gJa5Zn7qxtgg0A3Y2kBFEvYQ05hI+WlF G7CkYFkvChdbIURSGYSMSB6a7aDWpmJYPR4Qcknx569TQxOii/WizClLCYrT+wGt TixVpvrByE/bhmPVBXW+HvTGDsvNV84= -----END CERTIFICATE-----Generated at Wed Nov 5 04:31:01 2025 by rpki-client