$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ac191acc-157f-3778-b6ca-042f58ea699a.roa File: ac191acc-157f-3778-b6ca-042f58ea699a.roa (raw, json) Hash identifier: QnfNuy3RVpQ6gu/na3dFyMF9DU+Iexg6n5/5HhT+eZc= Subject key identifier: 08:EE:13:C1:F5:2A:7A:DE:9E:23:24:3E:55:42:89:EC:60:19:9B:34 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBE40302B885251D75408C200 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ac191acc-157f-3778-b6ca-042f58ea699a.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 8987 IP address blocks: 130.137.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:30:2b:88:52:51:d7:54:08:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=069afde0-07a4-4f14-9b89-dc8d876964ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:68:34:94:9c:80:51:88:7c:c1:51:c0:db:d8: 7c:c8:4c:9b:6a:74:aa:45:f7:de:f6:88:0d:0f:fd: 75:60:b3:e7:13:f9:96:6e:ac:9d:bf:91:55:77:76: ce:08:4e:0e:2b:17:92:09:b8:44:f5:8d:c9:5b:47: 41:80:d6:89:84:c6:d1:e2:cd:ef:f2:c9:7f:a6:0e: 8a:c9:bf:f9:0c:99:ca:d9:78:bf:1c:27:e9:23:8e: 28:5f:fa:64:92:30:1f:b5:9b:1c:f8:3b:49:7e:f1: 12:83:f3:38:1d:fa:55:ea:9f:ce:37:4a:2c:70:a7: 17:40:67:57:d2:61:20:c8:54:cc:55:c7:ca:33:a9: 20:ff:72:68:f9:12:55:d8:76:a6:6d:ee:bf:a4:ad: cf:29:0f:fe:95:31:29:5e:fc:2f:23:3d:d3:b1:d7: 64:72:1f:28:ee:37:f5:79:bb:e4:62:07:c8:25:0c: 31:66:cd:c1:c7:72:04:ba:38:73:db:f8:94:3a:80: 7b:34:17:d2:ae:9d:4b:16:ec:ab:d6:0c:70:39:fb: 42:49:72:48:88:06:9d:b1:42:11:6a:3f:73:3c:ef: 08:34:89:e5:3f:84:34:70:d6:61:ee:4f:10:6a:af: bf:18:24:8b:e2:74:ca:c6:78:2b:08:c9:e2:5c:a4: 54:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EE:13:C1:F5:2A:7A:DE:9E:23:24:3E:55:42:89:EC:60:19:9B:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ac191acc-157f-3778-b6ca-042f58ea699a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:67:d6:fb:3d:65:3a:90:bd:3f:09:3f:03:a5:41:b7:b4:53: de:3e:95:ef:51:bb:68:86:ea:bc:1e:4e:c1:aa:25:0e:bd:f8: 4d:bf:b0:26:d3:f5:08:2e:78:16:55:f8:f7:6f:bc:ac:52:c5: d8:c0:9e:b3:84:48:d2:82:85:1f:ae:b4:60:d8:ba:d2:3b:b1: 9b:08:87:87:f9:c3:68:ac:5a:74:fc:42:8d:5b:82:d3:98:ee: 68:2c:64:39:95:7e:48:3a:aa:30:25:f7:e4:3d:d8:dd:ea:46: 7c:43:a5:56:87:f6:8f:38:c9:2e:47:5b:60:e1:1c:2c:19:d8: 6f:06:ef:6c:ef:4f:71:c4:7b:49:5f:a5:51:e4:d7:3b:56:39: 14:14:22:7b:7f:a1:1d:6a:d3:83:e6:31:13:e6:f8:cf:1c:89: e0:1b:b6:c2:d2:13:72:fd:19:fe:7d:69:7b:6f:f2:92:b6:b2: 5d:02:73:d7:d7:5c:ea:e1:26:63:6f:3e:ce:06:28:4a:76:88: 54:2c:c4:85:6b:31:10:fe:88:4a:8d:55:7a:51:ac:81:35:aa: b0:7c:9b:b9:94:d8:b9:ca:65:c9:75:92:76:48:c2:0a:53:90: e9:58:74:f6:d0:8a:c7:08:86:a3:cc:2a:b3:89:6d:2c:d8:67: 34:1c:04:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDAriFJR11QIwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MDY5YWZkZTAtMDdhNC00ZjE0LTliODktZGM4ZDg3Njk2NGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGg0lJyAUYh8wVHA29h8yEybanSqRffe9ogN D/11YLPnE/mWbqydv5FVd3bOCE4OKxeSCbhE9Y3JW0dBgNaJhMbR4s3v8sl/pg6K yb/5DJnK2Xi/HCfpI44oX/pkkjAftZsc+DtJfvESg/M4HfpV6p/ON0oscKcXQGdX 0mEgyFTMVcfKM6kg/3Jo+RJV2Hambe6/pK3PKQ/+lTEpXvwvIz3Tsddkch8o7jf1 ebvkYgfIJQwxZs3Bx3IEujhz2/iUOoB7NBfSrp1LFuyr1gxwOftCSXJIiAadsUIR aj9zPO8INInlP4Q0cNZh7k8Qaq+/GCSL4nTKxngrCMniXKRUyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjuE8H1KnreniMkPlVCiexgGZs0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYWMxOTFhY2MtMTU3Zi0z Nzc4LWI2Y2EtMDQyZjU4ZWE2OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgontMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1n1vs9ZTqQvT8JPwOlQbe0U94+le9Ru2iG6rweTsGqJQ69+E2/sCbT 9QgueBZV+PdvvKxSxdjAnrOESNKChR+utGDYutI7sZsIh4f5w2isWnT8Qo1bgtOY 7mgsZDmVfkg6qjAl9+Q92N3qRnxDpVaH9o84yS5HW2DhHCwZ2G8G72zvT3HEe0lf pVHk1ztWORQUInt/oR1q04PmMRPm+M8cieAbtsLSE3L9Gf59aXtv8pK2sl0Cc9fX XOrhJmNvPs4GKEp2iFQsxIVrMRD+iEqNVXpRrIE1qrB8m7mU2LnKZcl1knZIwgpT kOlYdPbQiscIhqPMKrOJbSzYZzQcBFA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:13:14 2025 by rpki-client