$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc783676-ac32-3508-b08e-796366c4c85b.roa File: cc783676-ac32-3508-b08e-796366c4c85b.roa (raw, json) Hash identifier: z3ekJoestarKMDXc/7iTJ7k4NJQsSeftSoUSrMKgsak= Subject key identifier: 1F:97:25:28:57:44:06:5E:CF:F3:CD:E0:14:59:52:D2:7C:77:76:55 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBB7581DBA9609A23B5835008 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc783676-ac32-3508-b08e-796366c4c85b.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:81:db:a9:60:9a:23:b5:83:50:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=9b67de7a-b408-4840-9b6c-23c306f636cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:37:79:24:ef:b7:3e:8a:43:79:4f:68:9f: 01:55:fc:12:99:c0:72:fe:b8:c6:08:f0:da:5c:15: 90:38:73:e6:40:6a:b3:e8:51:d0:c4:51:2f:51:a2: 15:c4:36:bf:b6:1a:2d:59:60:12:e1:0f:29:f4:8f: e5:ce:d9:23:ea:e3:70:41:79:f4:fe:25:90:2a:c6: 9a:68:88:49:88:d8:cf:22:10:e0:e0:cb:97:3b:46: 86:d9:c5:08:28:e7:27:dd:93:c5:31:a4:23:44:c9: 72:80:fd:d1:09:e0:0f:35:58:ed:c0:b6:d0:94:f8: 37:70:2c:a1:4b:7a:03:c4:29:99:6e:4e:58:7b:c8: f5:fc:76:df:f6:d1:07:bb:6d:a3:e5:4e:8b:2f:fa: 05:95:4c:27:1d:53:e0:18:ae:54:57:e8:d8:95:37: 88:e2:18:23:0f:f2:90:2b:6a:1d:71:bd:e7:d1:95: b3:37:71:f5:11:0e:ce:4a:d1:7e:b4:fa:d7:ce:63: 10:62:fa:03:4a:4a:81:7e:f4:2e:48:55:ac:bb:37: 8c:d5:05:cd:47:0f:77:b6:81:20:ec:5d:f8:e0:5f: 4b:01:56:c5:78:e2:42:97:e4:55:6f:96:50:15:58: 2a:aa:ab:fb:80:e8:35:90:89:45:c6:e0:d7:fb:0e: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:97:25:28:57:44:06:5E:CF:F3:CD:E0:14:59:52:D2:7C:77:76:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc783676-ac32-3508-b08e-796366c4c85b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:90:20:e8:7c:8f:37:a4:45:ba:d8:15:0a:d0:c1:cc:7f:1f: a8:47:d8:d7:6b:f1:55:7b:b2:10:4c:20:25:af:78:e0:3b:56: cd:35:db:9b:af:bd:c8:29:72:4f:8f:63:f0:ad:b3:c0:14:2e: ef:50:25:b3:e9:cd:21:32:34:35:b1:00:f9:9b:3a:fe:19:5f: b7:1b:04:2a:50:50:d1:de:ff:cb:cd:28:75:40:dd:2e:23:d2: 37:14:2c:e6:41:9c:29:ea:c1:4b:b9:93:7c:b6:67:1a:93:46: 50:f7:e2:39:1e:b5:b6:01:57:d8:da:64:51:49:24:af:b2:86: 15:2a:cd:00:0b:3e:b8:f6:6c:49:c6:8d:1d:8b:91:ea:f6:80: c6:f1:44:ec:56:94:68:b8:10:3f:b4:71:f8:77:33:af:55:bf: 63:a6:c4:48:ab:b9:cd:a1:11:ec:2b:a4:e8:11:d0:33:d4:d9: 1b:ee:08:d0:16:37:2c:dc:e4:f8:2d:18:a7:a8:4a:97:02:c4: 76:ec:0a:3d:7d:03:1a:d8:4b:be:8e:ee:c2:97:0e:69:ac:1d: b5:11:00:e4:e7:7c:ad:a8:4c:c4:53:fb:9d:0f:05:7f:a9:88: 40:17:df:5d:4c:ad:e2:8d:4e:15:d8:bb:d8:d2:1b:aa:84:3e: 64:34:94:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYHbqWCaI7WDUAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk OWI2N2RlN2EtYjQwOC00ODQwLTliNmMtMjNjMzA2ZjYzNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYY3eSTvtz6KQ3lPaJ8BVfwSmcBy/rjGCPDa XBWQOHPmQGqz6FHQxFEvUaIVxDa/thotWWAS4Q8p9I/lztkj6uNwQXn0/iWQKsaa aIhJiNjPIhDg4MuXO0aG2cUIKOcn3ZPFMaQjRMlygP3RCeAPNVjtwLbQlPg3cCyh S3oDxCmZbk5Ye8j1/Hbf9tEHu22j5U6LL/oFlUwnHVPgGK5UV+jYlTeI4hgjD/KQ K2odcb3n0ZWzN3H1EQ7OStF+tPrXzmMQYvoDSkqBfvQuSFWsuzeM1QXNRw93toEg 7F344F9LAVbFeOJCl+RVb5ZQFVgqqqv7gOg1kIlFxuDX+w4vYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+XJShXRAZez/PN4BRZUtJ8d3ZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2M3ODM2NzYtYWMzMi0z NTA4LWIwOGUtNzk2MzY2YzRjODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOQIOh8jzekRbrYFQrQwcx/H6hH2Ndr8VV7shBMICWveOA7Vs0125uv vcgpck+PY/Cts8AULu9QJbPpzSEyNDWxAPmbOv4ZX7cbBCpQUNHe/8vNKHVA3S4j 0jcULOZBnCnqwUu5k3y2ZxqTRlD34jketbYBV9jaZFFJJK+yhhUqzQALPrj2bEnG jR2Lker2gMbxROxWlGi4ED+0cfh3M69Vv2OmxEiruc2hEewrpOgR0DPU2RvuCNAW Nyzc5PgtGKeoSpcCxHbsCj19AxrYS76O7sKXDmmsHbURAOTnfK2oTMRT+50PBX+p iEAX311MreKNThXYu9jSG6qEPmQ0lFU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:48:18 2025 by rpki-client