$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd219da1-ffde-3c40-8fb7-477c26a848a5.roa File: cd219da1-ffde-3c40-8fb7-477c26a848a5.roa (raw, json) Hash identifier: BhWcufa2DkxJ25uf+FOLsKL7zVwzZfErAsk5aVcfqsw= Subject key identifier: 3C:F0:8F:D6:D2:E5:D8:2A:5E:D6:43:32:59:7E:7A:5D:FA:03:AC:19 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BB2F7AA9F392EA5A669026BC0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd219da1-ffde-3c40-8fb7-477c26a848a5.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 130.137.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:aa:9f:39:2e:a5:a6:69:02:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=d08e9ad9-e7ed-40eb-9af4-13ccf443a7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c8:6f:27:a4:0c:9a:c2:34:5e:b1:f6:c2:e3: dc:f7:c3:ab:71:8c:cf:3f:46:17:46:2c:6a:df:c0: b0:18:df:e9:cf:7e:75:46:46:48:3c:bf:1b:b6:92: 3a:01:90:e3:25:b4:2a:97:57:f8:9e:6f:80:f5:db: 9a:eb:ff:a1:35:f6:a2:2f:da:02:5d:2b:9f:20:da: 5e:41:8e:1a:6e:a1:07:2e:20:f2:e5:e6:a3:89:c8: b4:31:aa:8c:5b:91:7d:d2:48:60:04:4a:26:ac:7f: 06:90:12:67:7d:d3:fc:90:30:8d:44:12:bf:8e:fb: b5:f1:d0:0f:c9:d2:ce:a6:e9:be:5a:f3:56:b2:17: 24:9e:3d:23:b2:1e:7e:06:0a:ac:5a:af:ee:bf:28: d7:97:72:19:e8:f9:24:85:1a:12:d8:74:31:83:fa: 2a:3d:59:ab:e7:33:63:45:d8:de:fc:a8:bb:42:24: 64:90:ba:00:38:3c:d7:98:d0:33:70:38:a1:de:86: 3c:20:d3:a8:03:f5:1c:a5:d1:62:4c:7c:14:86:a4: c9:2b:3f:97:c7:9c:fb:5b:85:f1:83:45:b4:8b:8d: 84:8e:f4:41:6b:f6:22:c8:9f:0b:e0:82:8e:85:7e: 48:e9:ef:39:5d:81:2a:54:14:a7:22:f6:d7:33:ab: 5b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F0:8F:D6:D2:E5:D8:2A:5E:D6:43:32:59:7E:7A:5D:FA:03:AC:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd219da1-ffde-3c40-8fb7-477c26a848a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:1c:d4:d2:3d:d1:2a:f9:42:00:ee:ce:bc:74:25:49:1b:91: fd:a4:80:46:78:8e:d1:14:64:50:d3:49:b5:38:d0:31:e9:85: be:50:cc:40:e1:0d:21:e7:04:f9:eb:58:a7:65:1f:1d:d6:97: 77:f0:7c:fe:c0:81:89:4e:f6:3c:69:91:ee:c3:5e:67:70:ec: 1a:e2:50:09:b9:e5:ad:66:44:5c:52:3d:2f:10:fe:bb:6d:b6: ea:06:11:f1:68:ef:0c:95:5b:c3:73:e4:28:dc:37:16:44:45: 7f:60:58:51:84:65:24:41:10:6d:4e:53:af:f1:3f:31:d2:9f: 61:2c:35:8f:06:bc:13:d9:b4:c1:29:44:a5:86:dd:0a:38:cc: 54:d3:ae:24:e3:b7:11:b5:fe:0e:48:70:93:1d:f5:39:42:a6: c4:d5:12:33:e8:c4:62:60:2f:a9:51:c5:d8:2b:b5:c2:55:f8: db:fc:f1:40:69:ba:ae:26:30:83:8c:92:91:03:f8:96:4a:5e: 3c:71:44:99:0c:02:0c:5a:2f:fa:9f:06:28:88:bf:cf:36:14: 15:bd:b8:be:f9:0f:e3:3f:57:f7:e3:eb:aa:af:a0:56:b8:b2: 91:b1:a8:a0:2e:43:51:8d:ca:a0:88:05:ee:7c:f7:52:12:21: 1c:dd:0b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96qfOS6lpmkCa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZDA4ZTlhZDktZTdlZC00MGViLTlhZjQtMTNjY2Y0NDNhN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMhvJ6QMmsI0XrH2wuPc98OrcYzPP0YXRixq 38CwGN/pz351RkZIPL8btpI6AZDjJbQql1f4nm+A9dua6/+hNfaiL9oCXSufINpe QY4abqEHLiDy5eajici0MaqMW5F90khgBEomrH8GkBJnfdP8kDCNRBK/jvu18dAP ydLOpum+WvNWshcknj0jsh5+BgqsWq/uvyjXl3IZ6PkkhRoS2HQxg/oqPVmr5zNj Rdje/Ki7QiRkkLoAODzXmNAzcDih3oY8INOoA/UcpdFiTHwUhqTJKz+Xx5z7W4Xx g0W0i42EjvRBa/YiyJ8L4IKOhX5I6e85XYEqVBSnIvbXM6tb9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzwj9bS5dgqXtZDMll+el36A6wZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2QyMTlkYTEtZmZkZS0z YzQwLThmYjctNDc3YzI2YTg0OGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4c1NI90Sr5QgDuzrx0JUkbkf2kgEZ4jtEUZFDTSbU40DHphb5QzEDh DSHnBPnrWKdlHx3Wl3fwfP7AgYlO9jxpke7DXmdw7BriUAm55a1mRFxSPS8Q/rtt tuoGEfFo7wyVW8Nz5CjcNxZERX9gWFGEZSRBEG1OU6/xPzHSn2EsNY8GvBPZtMEp RKWG3Qo4zFTTriTjtxG1/g5IcJMd9TlCpsTVEjPoxGJgL6lRxdgrtcJV+Nv88UBp uq4mMIOMkpED+JZKXjxxRJkMAgxaL/qfBiiIv882FBW9uL75D+M/V/fj66qvoFa4 spGxqKAuQ1GNyqCIBe5891ISIRzdC30= -----END CERTIFICATE-----Generated at Wed Nov 5 09:06:09 2025 by rpki-client