$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a250dd3e-19db-319a-9217-e8d1061abdec.roa File: a250dd3e-19db-319a-9217-e8d1061abdec.roa (raw, json) Hash identifier: cgNUFX+zvYeiOVzBT3rMBLC4vGLm4vy4cewL0KMD2Yw= Subject key identifier: 7D:48:17:3C:07:83:13:83:94:BF:68:9B:B0:D1:77:CD:B1:AC:0E:92 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBE402F9C6AD54BA72172AC40 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a250dd3e-19db-319a-9217-e8d1061abdec.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:2f:9c:6a:d5:4b:a7:21:72:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=65c291b4-0f26-4704-b72f-06e8abc90e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:be:7b:b7:eb:cc:91:4b:76:64:3a:7d:3b:f0: 4d:23:d3:38:51:8c:2e:a8:d6:1e:27:03:83:a5:10: 66:9e:2c:e9:a1:c5:3d:49:7b:68:fc:e8:34:bc:6b: b1:25:07:24:71:7a:71:af:45:be:ef:04:2c:d6:3c: 01:a2:a7:2f:9a:8b:08:16:8f:a2:24:cb:a7:d9:4e: c3:55:bb:45:2d:90:3a:14:4a:02:7c:b2:d5:8e:60: 63:87:de:00:53:d4:5a:83:60:df:04:0c:c5:52:04: 8d:95:45:a1:96:51:73:91:3a:63:7f:c0:80:37:96: 4d:b7:fe:cf:39:ad:2c:cf:71:43:2a:c3:d5:1c:1e: ec:02:ac:4b:04:e0:70:55:6b:11:d8:90:6f:7e:29: 2b:bb:68:31:0e:2e:5c:49:91:72:af:b2:1f:b4:40: 22:26:0b:9f:58:ca:24:66:ff:29:55:a8:c4:7d:bc: 75:51:e6:3c:b7:91:9c:2d:1a:72:96:84:c6:e0:d1: 36:a1:11:1c:ae:42:f4:90:c8:40:0b:2b:22:46:cc: ce:bf:72:c2:c1:aa:81:c9:c4:6a:10:d8:94:c6:24: e9:7a:f0:2e:5c:07:f6:5f:25:07:59:f7:14:01:97: 93:df:08:6e:ce:5a:98:cc:23:2b:de:a4:d7:8d:10: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:48:17:3C:07:83:13:83:94:BF:68:9B:B0:D1:77:CD:B1:AC:0E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a250dd3e-19db-319a-9217-e8d1061abdec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ea:77:c9:b6:ef:2a:81:5e:d6:c4:6b:44:eb:98:5d:e7:ca: fe:67:84:f4:ab:11:4c:10:7f:17:19:e8:e4:22:36:c1:58:45: 07:b3:e4:c7:f7:f4:e4:ab:ef:07:a1:ff:4b:d1:64:92:1e:40: 81:b5:32:d7:dd:4e:1d:8f:b5:8d:5c:5d:17:90:9f:62:2c:2d: 94:6a:c1:84:97:3c:5d:bd:35:3e:1a:66:6b:15:33:41:8d:82: 21:6c:fb:bf:8d:c8:6e:b4:8f:ec:65:7a:38:83:ae:ab:8c:0c: aa:24:ac:f3:56:20:0b:59:c2:c1:6d:91:33:a2:b6:24:6a:a5: 25:db:d7:5f:47:4b:d8:05:1e:2f:3a:6b:c8:c4:62:66:a4:d3: cd:dc:3f:bc:55:d7:ca:83:10:f7:c2:d1:1d:a0:36:ea:f6:b3: 8b:65:9b:4d:be:87:39:9a:f8:10:18:4f:38:36:c5:57:7c:bf: a1:4f:24:7e:a7:cc:0e:18:14:ff:4d:2c:6a:d2:0c:76:b4:5f: 8b:7a:71:06:c8:3f:0c:0a:44:76:3b:e8:bc:77:4f:f4:eb:1e: 20:f7:2e:8a:e3:2a:8f:bc:07:dd:da:b8:59:85:bf:83:33:a8: 26:07:04:ba:9d:24:b1:b8:aa:04:49:2f:80:69:23:14:dc:81: 80:cd:f8:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QC+catVLpyFyrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NjVjMjkxYjQtMGYyNi00NzA0LWI3MmYtMDZlOGFiYzkwZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm757t+vMkUt2ZDp9O/BNI9M4UYwuqNYeJwOD pRBmnizpocU9SXto/Og0vGuxJQckcXpxr0W+7wQs1jwBoqcvmosIFo+iJMun2U7D VbtFLZA6FEoCfLLVjmBjh94AU9Rag2DfBAzFUgSNlUWhllFzkTpjf8CAN5ZNt/7P Oa0sz3FDKsPVHB7sAqxLBOBwVWsR2JBvfikru2gxDi5cSZFyr7IftEAiJgufWMok Zv8pVajEfbx1UeY8t5GcLRpyloTG4NE2oREcrkL0kMhACysiRszOv3LCwaqBycRq ENiUxiTpevAuXAf2XyUHWfcUAZeT3whuzlqYzCMr3qTXjRAYewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1IFzwHgxODlL9om7DRd82xrA6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTI1MGRkM2UtMTlkYi0z MTlhLTkyMTctZThkMTA2MWFiZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPqd8m27yqBXtbEa0TrmF3nyv5nhPSrEUwQfxcZ6OQiNsFYRQez5Mf3 9OSr7weh/0vRZJIeQIG1MtfdTh2PtY1cXReQn2IsLZRqwYSXPF29NT4aZmsVM0GN giFs+7+NyG60j+xlejiDrquMDKokrPNWIAtZwsFtkTOitiRqpSXb119HS9gFHi86 a8jEYmak083cP7xV18qDEPfC0R2gNur2s4tlm02+hzma+BAYTzg2xVd8v6FPJH6n zA4YFP9NLGrSDHa0X4t6cQbIPwwKRHY76Lx3T/TrHiD3LorjKo+8B93auFmFv4Mz qCYHBLqdJLG4qgRJL4BpIxTcgYDN+Bg= -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:50 2025 by rpki-client