$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/97c9e838-6675-3d04-ac69-51572cb4e303.roa File: 97c9e838-6675-3d04-ac69-51572cb4e303.roa (raw, json) Hash identifier: sh93/XvRTmy7yR6cTpTb2BDnSzzuklU9G5zlpOsOAkY= Subject key identifier: 4F:82:86:F2:AC:02:39:9D:B6:99:6F:AE:34:E3:E5:50:16:D4:28:C7 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBB7582363BEEE586995C3180 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/97c9e838-6675-3d04-ac69-51572cb4e303.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 8987 IP address blocks: 130.137.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:82:36:3b:ee:e5:86:99:5c:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=6aad3a8b-13a4-431c-8e8e-a1263ccb02b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:1f:fb:11:27:28:77:44:a5:8c:2b:2b:fa: 19:b3:ab:8f:ae:65:fc:c8:a6:9d:e1:b5:4a:9c:c3: 1d:d5:53:4e:a5:81:ad:b4:04:2e:d5:7f:dc:e0:ca: f0:47:92:20:59:33:ff:03:20:62:02:6e:bc:18:14: 25:b0:ee:12:b9:96:ff:0a:66:db:1d:a7:6d:d5:b6: a9:07:c6:bd:a6:93:ae:6b:47:6a:3a:5d:2b:2e:f9: f7:2f:f3:b3:b4:c0:2b:2d:a1:cc:ca:8a:42:03:65: ff:1a:15:e6:ad:25:37:0f:12:d8:7d:50:7f:b9:13: 85:2e:08:ee:22:25:f7:58:0b:9c:09:60:f8:eb:1f: 87:30:b2:ed:ec:ca:c9:a9:9f:cd:8f:3d:4a:33:b7: 87:d7:49:0a:c6:8f:eb:92:ad:5f:48:e9:b4:25:f6: 0a:e4:b4:ca:26:8c:f4:49:c0:c2:a6:1e:dd:2d:c0: dd:8a:00:4f:83:da:f4:01:b8:f7:7c:6d:63:d6:23: ab:3e:6d:c5:43:01:70:9e:30:c5:12:7a:62:3d:33: 4a:d5:85:ff:ce:4c:d7:dd:b8:98:4d:d7:c3:74:f3: 92:d9:00:e5:d3:23:9a:7a:ba:9e:1d:1a:82:a9:e7: c5:2b:c0:ec:9c:d7:e3:d0:b1:c5:12:be:3e:ae:01: 74:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:82:86:F2:AC:02:39:9D:B6:99:6F:AE:34:E3:E5:50:16:D4:28:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/97c9e838-6675-3d04-ac69-51572cb4e303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:41:70:d6:10:ad:cc:12:fe:29:24:a6:a8:16:c0:9d:a9:a1: d7:2e:2e:c9:40:9e:61:7b:28:a0:08:eb:ba:e0:50:da:0d:9d: 08:c1:76:34:be:2e:66:8b:bd:85:a5:38:14:72:c3:44:09:93: e1:36:27:31:8e:98:3a:53:9b:5c:4d:67:c2:b1:59:7e:ed:7f: 9b:3a:5b:f5:0c:49:dd:ca:a3:ad:6d:66:7a:da:ce:0d:63:1a: 37:ab:21:61:e4:7f:0f:43:bd:94:17:ad:c3:f9:6d:82:ba:7e: a6:51:69:b2:82:96:6b:e3:32:01:6c:7d:13:0c:5e:ef:c1:f9: 56:bf:b1:e9:34:91:d1:d9:9c:8f:09:c9:e3:bf:b8:2f:6b:86: 66:e3:21:72:26:93:0c:61:a8:e9:c9:52:08:5d:af:74:e7:96: 69:ec:f1:4c:00:70:42:08:d7:1a:23:6b:31:02:43:78:51:3c: a7:fd:20:c5:00:c4:7a:6f:98:82:01:23:b6:b3:5d:31:11:e8: 5e:1b:84:25:f7:00:c7:4e:5d:be:fb:71:c6:b5:3c:9a:1a:05: df:9f:cc:1b:f3:80:33:ca:e8:40:6d:75:e4:12:de:fd:eb:bf: 6a:d1:4f:7b:b7:ec:77:a6:c4:40:92:9e:5c:dc:4e:03:db:29: e8:21:10:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYI2O+7lhplcMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NmFhZDNhOGItMTNhNC00MzFjLThlOGUtYTEyNjNjY2IwMmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqEf+xEnKHdEpYwrK/oZs6uPrmX8yKad4bVK nMMd1VNOpYGttAQu1X/c4MrwR5IgWTP/AyBiAm68GBQlsO4SuZb/CmbbHadt1bap B8a9ppOua0dqOl0rLvn3L/OztMArLaHMyopCA2X/GhXmrSU3DxLYfVB/uROFLgju IiX3WAucCWD46x+HMLLt7MrJqZ/Njz1KM7eH10kKxo/rkq1fSOm0JfYK5LTKJoz0 ScDCph7dLcDdigBPg9r0Abj3fG1j1iOrPm3FQwFwnjDFEnpiPTNK1YX/zkzX3biY TdfDdPOS2QDl0yOaerqeHRqCqefFK8DsnNfj0LHFEr4+rgF0rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+ChvKsAjmdtplvrjTj5VAW1CjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTdjOWU4MzgtNjY3NS0z ZDA0LWFjNjktNTE1NzJjYjRlMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNBcNYQrcwS/ikkpqgWwJ2podcuLslAnmF7KKAI67rgUNoNnQjBdjS+ LmaLvYWlOBRyw0QJk+E2JzGOmDpTm1xNZ8KxWX7tf5s6W/UMSd3Ko61tZnrazg1j GjerIWHkfw9DvZQXrcP5bYK6fqZRabKClmvjMgFsfRMMXu/B+Va/sek0kdHZnI8J yeO/uC9rhmbjIXImkwxhqOnJUghdr3Tnlmns8UwAcEII1xojazECQ3hRPKf9IMUA xHpvmIIBI7azXTER6F4bhCX3AMdOXb77cca1PJoaBd+fzBvzgDPK6EBtdeQS3v3r v2rRT3u37HemxECSnlzcTgPbKeghEH8= -----END CERTIFICATE-----Generated at Wed Nov 5 03:00:18 2025 by rpki-client