$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8f0f324e-d4ea-31a0-b3d8-152233d2c901.roa File: 8f0f324e-d4ea-31a0-b3d8-152233d2c901.roa (raw, json) Hash identifier: fd1FM+SA2d4bk1BSprHklPIDgVo+SwJ991mVmy2+FHA= Subject key identifier: 65:36:5E:19:79:6B:7C:54:54:7B:78:33:45:5F:48:A6:0B:5F:A0:08 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BA93252011AAFC1227F498C80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8f0f324e-d4ea-31a0-b3d8-152233d2c901.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 130.137.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:52:01:1a:af:c1:22:7f:49:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=0bf8e2a5-63c4-4ef9-be95-a59906d67e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4b:34:13:4e:0b:81:67:f3:7d:12:74:69:9d: bf:87:40:5e:8f:89:20:f9:43:2b:40:59:02:6b:b4: fe:d2:24:fc:58:52:aa:47:33:18:1b:6d:a3:98:db: 02:a6:bf:66:76:1c:1f:0c:fc:dc:97:ed:54:e2:a2: 3a:e3:11:84:7f:a6:69:8e:a4:7d:f1:22:a1:5b:f1: f8:7e:09:6a:00:9c:89:37:56:fe:eb:9d:41:c1:4e: 57:9f:4a:cc:be:24:71:c5:78:b7:d8:f2:af:a5:44: e4:e1:9e:23:f2:34:92:e9:2a:aa:0e:90:f8:67:ba: 70:9c:ea:f1:64:31:19:f7:34:79:0b:d8:a3:52:75: f8:8a:31:fe:f9:df:bf:8f:31:e9:1f:cc:f7:51:ee: e6:ad:f1:38:02:d2:9f:fb:ec:42:b9:6b:b0:d4:41: b5:98:f6:89:9b:10:99:9d:82:cc:5b:30:8e:c9:80: d3:01:50:1f:c8:eb:76:75:99:11:07:2d:a7:c0:98: 1d:25:8b:84:f5:6c:63:c0:c0:32:15:ca:ee:7f:c7: d7:8a:0c:1e:ff:d5:82:82:d6:11:d8:d2:2f:2d:37: f2:e5:28:9f:99:09:2c:21:32:e9:b0:96:3a:4c:ed: 78:00:10:d3:32:0e:89:64:05:27:09:f1:19:9f:9e: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:36:5E:19:79:6B:7C:54:54:7B:78:33:45:5F:48:A6:0B:5F:A0:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8f0f324e-d4ea-31a0-b3d8-152233d2c901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f4:6f:58:20:b5:0a:3b:b4:e3:cb:ff:00:3d:15:16:f5:89: 79:ed:8e:62:ac:f7:9b:24:41:6c:68:67:fe:93:58:fa:ec:b4: 5b:a1:0d:29:26:63:5b:56:d0:4c:ea:2b:f3:5f:32:22:d9:5d: c9:d9:67:57:56:46:5c:81:06:0f:99:1b:ac:5d:52:63:cd:d1: 2a:01:ba:83:0d:44:ff:9c:41:0c:41:e7:b7:3e:34:94:cb:8a: 95:5d:10:18:80:72:0d:21:9d:ea:e4:6d:c1:e3:ff:12:f5:67: 14:6a:b0:6f:5d:25:29:ee:c1:c5:ab:67:47:5e:3d:49:a3:49: 4c:f5:73:1a:49:d4:ba:5c:9b:9c:5f:d4:db:ae:f7:82:e3:31: 4e:a4:6c:4e:99:4b:71:f1:60:38:ca:65:6b:9d:f0:0e:56:17: 6a:92:8d:7b:d8:5b:af:8c:16:9d:aa:aa:95:33:26:da:28:94: 23:ed:39:a9:1c:51:a6:37:55:12:d6:e5:9f:56:20:e7:25:be: d1:e5:90:93:cc:c6:d4:ff:db:08:9c:6f:82:55:ae:89:f6:ea: a7:81:14:49:8f:75:67:14:b4:05:57:89:57:42:29:e7:c6:84: 17:92:d7:17:3a:49:9f:1d:e0:e4:ff:24:cc:ee:43:50:0e:50: 04:6f:c7:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlIBGq/BIn9JjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MGJmOGUyYTUtNjNjNC00ZWY5LWJlOTUtYTU5OTA2ZDY3ZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00s0E04LgWfzfRJ0aZ2/h0Bej4kg+UMrQFkC a7T+0iT8WFKqRzMYG22jmNsCpr9mdhwfDPzcl+1U4qI64xGEf6ZpjqR98SKhW/H4 fglqAJyJN1b+651BwU5Xn0rMviRxxXi32PKvpUTk4Z4j8jSS6SqqDpD4Z7pwnOrx ZDEZ9zR5C9ijUnX4ijH++d+/jzHpH8z3Ue7mrfE4AtKf++xCuWuw1EG1mPaJmxCZ nYLMWzCOyYDTAVAfyOt2dZkRBy2nwJgdJYuE9WxjwMAyFcruf8fXigwe/9WCgtYR 2NIvLTfy5SifmQksITLpsJY6TO14ABDTMg6JZAUnCfEZn577OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU2Xhl5a3xUVHt4M0VfSKYLX6AIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGYwZjMyNGUtZDRlYS0z MWEwLWIzZDgtMTUyMjMzZDJjOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr0b1ggtQo7tOPL/wA9FRb1iXntjmKs95skQWxoZ/6TWPrstFuhDSkm Y1tW0EzqK/NfMiLZXcnZZ1dWRlyBBg+ZG6xdUmPN0SoBuoMNRP+cQQxB57c+NJTL ipVdEBiAcg0hnerkbcHj/xL1ZxRqsG9dJSnuwcWrZ0dePUmjSUz1cxpJ1Lpcm5xf 1Nuu94LjMU6kbE6ZS3HxYDjKZWud8A5WF2qSjXvYW6+MFp2qqpUzJtoolCPtOakc UaY3VRLW5Z9WIOclvtHlkJPMxtT/2wicb4JVron26qeBFEmPdWcUtAVXiVdCKefG hBeS1xc6SZ8d4OT/JMzuQ1AOUARvx9w= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:26 2025 by rpki-client