$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9aaeafd0-0dae-3d7f-918e-2fc493196fa2.roa File: 9aaeafd0-0dae-3d7f-918e-2fc493196fa2.roa (raw, json) Hash identifier: 3OlC42xsCAo29FDukhqWdaFRpm3FwQhFUgZQWdoCr1U= Subject key identifier: 54:70:62:B5:6D:AD:6F:2A:A2:B3:03:84:CE:0C:AA:FD:46:1F:E7:0E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBB75818F419670CC4F6D3F00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9aaeafd0-0dae-3d7f-918e-2fc493196fa2.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:81:8f:41:96:70:cc:4f:6d:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=15059f1c-c4ba-4aea-a47d-b649bce04954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6a:1c:40:84:53:7f:c6:e9:11:fe:dd:e2:ec: 7a:ff:9c:f0:d6:0d:f9:7b:60:c1:9d:e2:60:c5:16: d2:ed:78:c2:82:eb:fc:48:72:86:94:02:d6:00:7b: 8e:7f:1d:55:65:7b:53:1a:a0:26:41:50:1b:cd:08: 6b:99:aa:16:6c:83:5d:f6:02:84:a9:9b:44:dd:30: e0:95:18:01:24:0c:a4:63:55:88:4a:4c:19:8d:65: 58:28:32:b5:6f:78:05:4c:0a:9d:cf:2c:f9:54:b2: a9:c5:2c:f2:84:41:b6:3e:24:e1:a1:53:29:68:a3: b3:3a:87:a4:ef:78:9d:95:be:47:be:8b:02:b9:7c: 95:cf:bd:5e:bb:29:84:2e:c0:41:bb:c7:ca:d7:13: cb:28:a9:d8:40:5f:2f:b0:e8:46:1d:0f:3f:6a:49: f9:81:05:bd:d0:45:58:4a:fc:6c:e2:13:97:0e:2c: fa:dc:d9:ef:15:7d:c4:60:27:ac:21:96:69:fa:f5: ee:6b:bc:39:87:59:d1:79:62:46:07:5f:4f:3f:4b: 6c:6c:8f:8b:33:16:f0:01:e7:44:ec:b6:8e:d1:d2: 35:b0:58:df:9a:f3:83:d8:7f:fe:50:54:2e:35:b2: 70:fc:52:cf:3c:26:08:3b:0f:3f:17:e3:fa:80:de: f0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:70:62:B5:6D:AD:6F:2A:A2:B3:03:84:CE:0C:AA:FD:46:1F:E7:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9aaeafd0-0dae-3d7f-918e-2fc493196fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:6d:05:75:1b:0d:bc:70:be:e1:56:d2:2e:3b:74:cd:75:f1: 1b:32:a3:f3:b1:a9:b8:54:1b:2d:d7:f4:39:6a:5f:94:a8:f8: a2:f0:85:90:f1:9f:2b:8c:72:d2:a0:ce:1b:38:91:7c:dc:1e: 18:d6:7a:90:3b:d6:0c:34:f6:03:44:23:a3:18:27:40:ca:04: b9:6a:b6:08:91:54:b3:21:c9:6f:f9:f7:71:2b:03:6a:4c:20: b7:fa:f2:64:35:81:c2:39:aa:66:e0:61:43:9d:8a:c6:bc:27: 05:3f:72:1c:37:c9:77:45:28:7b:95:6f:df:8f:57:da:b4:37: a3:c7:6e:9b:74:1f:e2:f6:47:1f:f6:4b:e0:31:7d:18:da:3e: af:a4:15:4d:d3:27:e9:45:e5:8c:64:97:2c:61:26:b9:de:93: f5:d3:3c:c1:0b:3d:67:6c:c9:1e:ed:8f:97:c4:83:24:55:01: b2:62:34:07:f9:19:3c:e6:58:4a:02:9d:e2:2f:45:5b:ce:73: d3:27:80:f9:1b:58:8a:23:92:f0:2e:45:3b:86:34:71:ae:6f: 82:f5:ea:99:6d:e8:40:12:fb:46:2c:47:aa:cb:38:33:33:69: 85:e9:30:00:67:0c:e0:54:4b:16:80:e4:89:2b:aa:5c:16:b8: c2:96:3b:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYGPQZZwzE9tPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MTUwNTlmMWMtYzRiYS00YWVhLWE0N2QtYjY0OWJjZTA0OTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWocQIRTf8bpEf7d4ux6/5zw1g35e2DBneJg xRbS7XjCguv8SHKGlALWAHuOfx1VZXtTGqAmQVAbzQhrmaoWbINd9gKEqZtE3TDg lRgBJAykY1WISkwZjWVYKDK1b3gFTAqdzyz5VLKpxSzyhEG2PiThoVMpaKOzOoek 73idlb5HvosCuXyVz71euymELsBBu8fK1xPLKKnYQF8vsOhGHQ8/akn5gQW90EVY Svxs4hOXDiz63NnvFX3EYCesIZZp+vXua7w5h1nReWJGB19PP0tsbI+LMxbwAedE 7LaO0dI1sFjfmvOD2H/+UFQuNbJw/FLPPCYIOw8/F+P6gN7wywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRwYrVtrW8qorMDhM4Mqv1GH+cOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOWFhZWFmZDAtMGRhZS0z ZDdmLTkxOGUtMmZjNDkzMTk2ZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVtBXUbDbxwvuFW0i47dM118Rsyo/OxqbhUGy3X9DlqX5So+KLwhZDx nyuMctKgzhs4kXzcHhjWepA71gw09gNEI6MYJ0DKBLlqtgiRVLMhyW/593ErA2pM ILf68mQ1gcI5qmbgYUOdisa8JwU/chw3yXdFKHuVb9+PV9q0N6PHbpt0H+L2Rx/2 S+AxfRjaPq+kFU3TJ+lF5YxklyxhJrnek/XTPMELPWdsyR7tj5fEgyRVAbJiNAf5 GTzmWEoCneIvRVvOc9MngPkbWIojkvAuRTuGNHGub4L16plt6EAS+0YsR6rLODMz aYXpMABnDOBUSxaA5IkrqlwWuMKWO8I= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:23 2025 by rpki-client