$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a86fcde3-2133-330a-afd1-750691f9ac45.roa File: a86fcde3-2133-330a-afd1-750691f9ac45.roa (raw, json) Hash identifier: 9TljedfpKf+XPT+urx/M3Qj1MEsNzbcF+HsYvJlKUOs= Subject key identifier: D7:D8:FE:51:F2:59:9A:97:C2:2C:D3:5D:43:45:96:69:51:43:04:6E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBE4029C434FCBB2856DE71D0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a86fcde3-2133-330a-afd1-750691f9ac45.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 8987 IP address blocks: 130.137.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:29:c4:34:fc:bb:28:56:de:71:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=d16e0947-3bc4-47c2-9f05-3b148996e055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:38:45:2a:2c:26:9f:05:7a:11:67:d8:ee: e0:bd:ee:1b:34:4d:53:a9:18:0b:f4:ab:a2:e7:e7: cf:21:eb:56:90:9b:18:db:c1:8d:f2:a0:e7:28:5d: cc:ec:9b:7c:3e:0d:93:23:21:7c:1d:ff:e6:ed:be: 35:cc:18:80:91:19:e1:a1:51:76:bf:f0:3c:19:80: 6c:ea:49:48:c5:ff:ca:50:6b:26:cd:de:fa:3b:e2: 4f:61:e9:c8:b1:83:a8:86:38:da:85:25:21:a8:f2: a0:24:73:e8:5c:89:e2:8a:6d:83:13:1d:37:32:76: 3f:0b:6b:b6:9d:db:26:0d:12:68:5f:91:63:00:50: 5c:82:69:4a:c2:33:33:17:9e:48:20:df:38:31:26: 17:50:a8:81:2f:2d:9d:2a:9a:d5:2e:fe:a2:ff:9d: f6:80:4c:74:10:f0:13:16:48:2d:79:a5:fa:7c:ca: 50:b0:9f:8a:c2:b2:c0:2b:81:af:e7:1a:40:ce:9c: 8b:5d:a0:0d:3a:47:fc:06:0a:ff:a8:bf:3f:8f:03: ae:a5:ab:15:5a:a8:cb:3c:d2:17:69:49:7c:de:ca: c3:81:d2:b0:1f:5e:39:a8:7d:12:53:18:25:f1:e3: 15:b5:db:c1:18:30:28:fe:11:97:33:83:94:c2:76: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D8:FE:51:F2:59:9A:97:C2:2C:D3:5D:43:45:96:69:51:43:04:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a86fcde3-2133-330a-afd1-750691f9ac45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:4f:a8:b6:b7:68:cd:e8:95:00:87:fd:e2:c2:aa:65:81:2e: c3:ac:55:cf:7e:ad:3e:dd:cd:9e:f8:78:b9:e2:6c:cb:38:b8: 9a:79:30:94:ef:0a:65:87:1d:8c:52:5c:ca:fa:3d:ae:3a:ca: 1b:d5:e1:a0:13:75:1e:94:ba:38:9b:3b:98:71:1d:21:49:89: 3e:a7:fc:64:44:6b:a4:53:34:ce:cb:72:ea:a2:57:79:b5:c4: 56:13:83:f6:9f:51:fd:4e:59:db:42:53:ac:2c:7d:41:99:c6: ea:0a:61:ba:6a:ea:d0:de:9f:60:b9:9d:49:e0:36:58:7f:b3: 07:d2:cc:26:93:7d:0b:fc:61:e2:80:67:17:71:71:30:ca:25: 71:ac:0e:e8:f5:25:81:36:26:df:84:81:02:c1:c1:0f:97:7a: 00:c5:25:ae:10:57:b8:93:55:83:fd:65:88:b3:94:61:8e:9c: 54:97:18:16:d6:97:50:85:42:aa:b7:71:3c:15:cc:68:e6:72: 19:2e:d6:66:c6:7a:d3:08:4f:50:42:2c:06:e2:6f:5c:2c:e9: f5:dd:4a:3f:62:5a:da:46:a8:be:5a:99:d1:20:60:82:a9:2a: b6:07:c2:23:a4:ed:e8:bc:28:49:c6:30:3a:65:5c:76:33:20: 36:c2:3e:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QCnENPy7KFbecdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZDE2ZTA5NDctM2JjNC00N2MyLTlmMDUtM2IxNDg5OTZlMDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq44RSosJp8FehFn2O7gve4bNE1TqRgL9Kui 5+fPIetWkJsY28GN8qDnKF3M7Jt8Pg2TIyF8Hf/m7b41zBiAkRnhoVF2v/A8GYBs 6klIxf/KUGsmzd76O+JPYenIsYOohjjahSUhqPKgJHPoXIniim2DEx03MnY/C2u2 ndsmDRJoX5FjAFBcgmlKwjMzF55IIN84MSYXUKiBLy2dKprVLv6i/532gEx0EPAT FkgteaX6fMpQsJ+KwrLAK4Gv5xpAzpyLXaANOkf8Bgr/qL8/jwOupasVWqjLPNIX aUl83srDgdKwH145qH0SUxgl8eMVtdvBGDAo/hGXM4OUwnZKwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfY/lHyWZqXwizTXUNFlmlRQwRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTg2ZmNkZTMtMjEzMy0z MzBhLWFmZDEtNzUwNjkxZjlhYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9PqLa3aM3olQCH/eLCqmWBLsOsVc9+rT7dzZ74eLnibMs4uJp5MJTv CmWHHYxSXMr6Pa46yhvV4aATdR6UujibO5hxHSFJiT6n/GREa6RTNM7LcuqiV3m1 xFYTg/afUf1OWdtCU6wsfUGZxuoKYbpq6tDen2C5nUngNlh/swfSzCaTfQv8YeKA ZxdxcTDKJXGsDuj1JYE2Jt+EgQLBwQ+XegDFJa4QV7iTVYP9ZYizlGGOnFSXGBbW l1CFQqq3cTwVzGjmchku1mbGetMIT1BCLAbib1ws6fXdSj9iWtpGqL5amdEgYIKp KrYHwiOk7ei8KEnGMDplXHYzIDbCPhA= -----END CERTIFICATE-----Generated at Wed Nov 5 03:05:33 2025 by rpki-client