$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b25229d3-4780-395b-a983-7680c9a0ca5d.roa File: b25229d3-4780-395b-a983-7680c9a0ca5d.roa (raw, json) Hash identifier: I14okCtN+vdVqEuh0aEVKhZphJbJgljltV8zhYT286s= Subject key identifier: 8C:03:62:CE:F9:56:30:13:38:4E:3E:B8:BB:2E:89:EE:72:F4:0E:D3 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBE402950BD070CEE4C1FEF00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b25229d3-4780-395b-a983-7680c9a0ca5d.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:29:50:bd:07:0c:ee:4c:1f:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=23daf6ca-af43-4234-9776-d77e69dbe8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:6e:ac:24:55:cc:36:b7:3a:82:04:cd:e5: a9:e4:a8:d5:34:af:91:e7:e7:5b:3c:b7:8e:50:3b: 95:e3:8a:15:b0:52:a9:4c:05:15:b6:81:da:e1:f0: 37:25:7b:9b:d7:fa:a0:06:a3:f8:8b:20:b3:a9:c7: 60:91:b1:ab:de:27:af:08:ec:47:b5:ce:20:1e:14: b7:78:81:b2:15:71:33:6e:c2:aa:28:d6:bb:25:1f: bb:8d:20:36:ff:0d:be:3e:b3:06:f8:16:90:c7:a3: 89:32:2e:3d:8c:21:d4:d7:ca:a9:6a:4e:4c:41:78: 06:81:81:be:4d:1f:f0:67:6c:f9:55:b6:01:d2:d9: 63:28:5f:c7:f1:0c:c4:21:1d:5f:5c:3f:60:70:0f: 41:48:9e:43:83:e4:b5:cf:9c:e8:81:6f:f4:a6:06: 9a:02:85:1c:3f:5c:07:0d:35:49:b6:0d:d3:f5:5b: bd:81:5b:71:1d:3f:51:41:9b:13:dd:f8:e8:ed:32: f0:68:e8:de:a7:93:12:2a:2e:3b:4d:70:ed:65:33: cf:b7:f9:46:90:eb:46:fa:8c:9c:51:bc:3a:cb:c9: e5:21:75:d6:c4:2d:2a:1e:ff:ea:74:c0:95:8a:29: 83:65:ba:3c:ec:c5:ee:75:82:ff:d5:4a:9c:2b:20: bd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:03:62:CE:F9:56:30:13:38:4E:3E:B8:BB:2E:89:EE:72:F4:0E:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b25229d3-4780-395b-a983-7680c9a0ca5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:38:0f:fa:d2:94:69:3b:a4:99:53:2c:d9:3d:01:c1:30:9a: 2f:09:21:bb:14:4f:e2:c8:6c:a6:f1:2d:88:f3:fe:4c:71:2e: 8e:3c:85:f2:b6:1f:93:42:56:84:be:45:4d:5b:8a:f8:19:1f: e6:a6:16:56:0f:d8:bb:ea:c6:5e:ae:bf:fc:8e:c5:79:bf:84: 98:9c:b9:45:02:bc:e8:2e:79:83:56:19:60:9a:2b:2d:e2:7d: 5f:b8:45:2c:8d:bd:fc:c9:3e:b3:35:15:be:78:e5:5b:53:c6: 8f:a9:8f:1f:8b:c1:54:d6:c6:7a:2e:4c:0a:4d:b5:94:24:ef: 4f:2c:a8:62:74:34:e7:44:8a:47:9b:1a:61:0d:38:93:57:1a: 97:1d:3f:fd:c8:8f:9e:45:61:1b:e1:e4:16:cc:06:f7:30:74: eb:03:22:54:67:d7:9a:46:76:d7:1e:6d:45:d4:76:07:22:62: b6:fd:99:58:fd:38:36:a7:f0:c0:2c:11:95:b3:09:61:2a:af: 54:09:bc:2b:83:50:ea:8a:47:1f:c4:97:86:d7:93:9d:5e:7d: 65:d9:58:36:cf:98:6a:af:f4:29:cc:59:e1:07:ea:0b:d6:47: 65:77:eb:dc:33:dc:69:ee:43:6a:db:35:21:50:e3:3f:96:e4: ac:c9:d6:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QClQvQcM7kwf7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MjNkYWY2Y2EtYWY0My00MjM0LTk3NzYtZDc3ZTY5ZGJlOGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIxurCRVzDa3OoIEzeWp5KjVNK+R5+dbPLeO UDuV44oVsFKpTAUVtoHa4fA3JXub1/qgBqP4iyCzqcdgkbGr3ievCOxHtc4gHhS3 eIGyFXEzbsKqKNa7JR+7jSA2/w2+PrMG+BaQx6OJMi49jCHU18qpak5MQXgGgYG+ TR/wZ2z5VbYB0tljKF/H8QzEIR1fXD9gcA9BSJ5Dg+S1z5zogW/0pgaaAoUcP1wH DTVJtg3T9Vu9gVtxHT9RQZsT3fjo7TLwaOjep5MSKi47TXDtZTPPt/lGkOtG+oyc Ubw6y8nlIXXWxC0qHv/qdMCViimDZbo87MXudYL/1UqcKyC99QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwDYs75VjATOE4+uLsuie5y9A7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjI1MjI5ZDMtNDc4MC0z OTViLWE5ODMtNzY4MGM5YTBjYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAk4D/rSlGk7pJlTLNk9AcEwmi8JIbsUT+LIbKbxLYjz/kxxLo48hfK2 H5NCVoS+RU1bivgZH+amFlYP2Lvqxl6uv/yOxXm/hJicuUUCvOgueYNWGWCaKy3i fV+4RSyNvfzJPrM1Fb545VtTxo+pjx+LwVTWxnouTApNtZQk708sqGJ0NOdEikeb GmENOJNXGpcdP/3Ij55FYRvh5BbMBvcwdOsDIlRn15pGdtcebUXUdgciYrb9mVj9 ODan8MAsEZWzCWEqr1QJvCuDUOqKRx/El4bXk51efWXZWDbPmGqv9CnMWeEH6gvW R2V369wz3GnuQ2rbNSFQ4z+W5KzJ1ok= -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:20 2025 by rpki-client