$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ae9e386c-ac01-3755-9031-4b5e1009fd73.roa File: ae9e386c-ac01-3755-9031-4b5e1009fd73.roa (raw, json) Hash identifier: 6YMfYbvZ9dPodLeK3XF/YDsPfytuYwgLmbEkXxbvexY= Subject key identifier: E1:1F:3B:61:4F:DF:35:F8:D1:50:35:E6:07:0B:C5:07:16:9B:DD:90 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B970CE237B2601EC0788271C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ae9e386c-ac01-3755-9031-4b5e1009fd73.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e2:37:b2:60:1e:c0:78:82:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=e4eb979d-6d64-448c-94c7-3c215dde68b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:89:13:28:eb:26:a4:43:68:35:a1:4d:4a:4b: 10:27:4c:2c:fc:96:24:ee:6c:46:7b:d4:08:01:b9: 09:bd:1f:23:a1:14:e4:f2:54:b9:ed:7d:4d:29:6b: 55:6c:2d:6e:22:dc:a1:a2:35:9e:16:8c:5e:25:af: ec:a3:a4:a9:10:5f:48:85:2e:76:a8:43:ef:db:25: a6:c4:3f:7b:17:38:02:5a:44:b2:8e:6b:2f:00:d0: 5b:de:da:4d:c8:93:5d:ca:c0:42:d8:22:95:c8:75: ec:8a:4f:d9:68:71:22:8a:2a:4b:9a:ea:5e:93:8d: 96:8a:1a:4b:d1:ef:a3:71:c8:d0:d3:88:30:29:d0: 59:f8:0b:fb:f8:43:ee:06:82:1d:d4:82:d7:b7:ac: f6:5f:72:42:a3:c3:f1:69:51:8e:91:b1:c8:41:04: 78:6e:93:84:a6:3f:f7:ef:d3:bc:cb:ab:97:f8:2a: 58:a1:d3:1d:94:31:3d:e0:79:93:cb:47:bb:67:2f: e9:f1:6b:48:d1:0f:24:b0:e0:6f:79:64:72:b9:43: 2d:5f:f1:1c:ab:5c:20:0b:bf:bd:b4:19:97:c3:4a: a6:2e:db:59:b3:dd:b3:a7:59:7d:c0:d6:2a:a1:a2: b7:d5:70:cd:e5:11:da:0a:ae:6e:38:b0:b0:95:7c: 7a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1F:3B:61:4F:DF:35:F8:D1:50:35:E6:07:0B:C5:07:16:9B:DD:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ae9e386c-ac01-3755-9031-4b5e1009fd73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:0b:52:68:86:5f:6b:b8:89:3c:b9:87:f1:50:5c:7b:45:e2: 08:b1:a0:59:71:e6:0d:47:a7:05:80:0c:a1:d3:23:35:a1:18: 00:24:91:1f:9c:12:33:04:a8:a0:fe:02:90:3f:c6:ab:d8:44: 51:91:db:6e:5c:ce:a4:2a:cf:13:e2:6a:ed:d5:6d:84:be:bf: 7b:3d:2e:93:50:0c:2b:cb:6f:54:5f:75:47:57:bc:ef:ca:be: b2:19:7f:52:3b:30:12:8e:9a:37:2e:e9:58:95:90:27:fe:93: 8a:ec:9a:06:d0:b3:e1:71:9b:ba:6c:8e:81:39:c1:d0:4b:a7: 21:d1:ef:e5:ba:43:7d:fc:bc:49:c6:db:3e:e1:80:87:19:b9: e2:f3:b8:19:91:b7:13:24:41:b9:5b:42:a3:6e:96:b4:b6:24: f6:cd:44:eb:94:69:79:21:3d:d7:a7:1b:d2:68:a2:80:32:c1: b9:ba:ba:c7:32:81:31:11:a6:0c:97:63:b6:67:9c:18:42:17: 56:33:c1:32:b4:ae:5a:c2:6c:d2:a8:f1:07:56:9d:30:7d:63: f6:3e:59:8b:98:c3:4f:94:e7:a0:10:16:60:e2:60:ad:ca:71: 02:64:aa:8f:f1:2b:5b:67:55:b1:7f:de:2d:50:ef:c7:fe:4c: 62:48:6f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOI3smAewHiCccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZTRlYjk3OWQtNmQ2NC00NDhjLTk0YzctM2MyMTVkZGU2OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIkTKOsmpENoNaFNSksQJ0ws/JYk7mxGe9QI AbkJvR8joRTk8lS57X1NKWtVbC1uItyhojWeFoxeJa/so6SpEF9IhS52qEPv2yWm xD97FzgCWkSyjmsvANBb3tpNyJNdysBC2CKVyHXsik/ZaHEiiipLmupek42WihpL 0e+jccjQ04gwKdBZ+Av7+EPuBoId1ILXt6z2X3JCo8PxaVGOkbHIQQR4bpOEpj/3 79O8y6uX+CpYodMdlDE94HmTy0e7Zy/p8WtI0Q8ksOBveWRyuUMtX/Ecq1wgC7+9 tBmXw0qmLttZs92zp1l9wNYqoaK31XDN5RHaCq5uOLCwlXx6jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEfO2FP3zX40VA15gcLxQcWm92QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYWU5ZTM4NmMtYWMwMS0z NzU1LTkwMzEtNGI1ZTEwMDlmZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIALUmiGX2u4iTy5h/FQXHtF4gixoFlx5g1HpwWADKHTIzWhGAAkkR+c EjMEqKD+ApA/xqvYRFGR225czqQqzxPiau3VbYS+v3s9LpNQDCvLb1RfdUdXvO/K vrIZf1I7MBKOmjcu6ViVkCf+k4rsmgbQs+Fxm7psjoE5wdBLpyHR7+W6Q338vEnG 2z7hgIcZueLzuBmRtxMkQblbQqNulrS2JPbNROuUaXkhPdenG9JoooAywbm6uscy gTERpgyXY7ZnnBhCF1YzwTK0rlrCbNKo8QdWnTB9Y/Y+WYuYw0+U56AQFmDiYK3K cQJkqo/xK1tnVbF/3i1Q78f+TGJIb5k= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:09 2025 by rpki-client