$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc2aa532-33c3-3951-89be-12330759cf39.roa File: dc2aa532-33c3-3951-89be-12330759cf39.roa (raw, json) Hash identifier: qdbaQAV0qZCBnGybXA4Pxv+33oZP4pt2dLQ4E7nVBj0= Subject key identifier: 3E:82:44:10:19:D3:98:2D:F3:61:51:68:04:11:D6:80:6E:1F:8B:7D Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF25679A8EBF85F5DDE397580 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc2aa532-33c3-3951-89be-12330759cf39.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:79:a8:eb:f8:5f:5d:de:39:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=baea1383-e7bf-477e-af7b-a5cb2e2e41bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e4:09:ca:7d:89:ba:59:8f:01:ee:a4:bc:02: 4d:8c:db:21:f9:24:c7:2d:42:a0:53:17:07:a0:76: 63:56:5b:18:75:f6:79:b7:a8:52:ce:cf:e4:b2:73: e1:a9:dc:34:09:67:7b:c7:e7:e7:01:f0:cd:0d:87: 1e:8f:a8:ec:b6:cc:8c:39:ea:c1:c4:61:31:08:fb: 9d:48:77:4f:76:e2:54:68:76:33:d1:89:84:1c:39: ba:5f:30:6c:4c:6f:fb:7a:89:c7:3b:1d:58:56:87: 22:ba:85:af:f9:0b:77:de:0c:a1:c6:74:da:5f:e0: 9f:9c:72:86:ce:3b:db:01:c6:9b:39:28:40:cd:4c: 6f:a4:b8:0c:b6:52:01:ec:2d:3a:8e:3b:fe:06:64: 96:dd:d4:62:0a:40:8d:72:0b:cd:3e:4a:83:ac:bb: a3:38:6a:c7:5a:d4:7e:08:f5:c3:bb:d2:04:05:75: 3d:7e:5a:ab:9e:4e:91:c0:e5:85:ae:97:43:ee:2f: 57:82:62:22:67:f2:b7:ed:09:74:9d:a7:57:05:91: 11:2b:bf:33:c8:07:8a:06:4d:ae:09:20:2a:36:cf: 99:2a:0d:c6:ac:e6:1e:33:ca:91:61:84:da:8e:15: c0:2b:dc:c5:fa:91:59:9a:ef:28:f2:08:e1:8e:95: 81:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:82:44:10:19:D3:98:2D:F3:61:51:68:04:11:D6:80:6E:1F:8B:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc2aa532-33c3-3951-89be-12330759cf39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:eb:f1:f0:00:0b:94:59:af:05:4e:87:15:4a:e9:64:51:b9: e5:fa:cc:08:66:da:7d:b7:93:9c:5e:b1:1a:65:e8:3f:26:8c: 99:30:2d:59:da:bd:94:55:54:57:01:4c:ad:08:90:af:e7:10: 2c:46:87:1c:f1:46:12:2c:cc:d1:e3:3c:e1:46:f8:a1:19:66: ba:b6:8e:9b:3f:f7:72:97:5d:bd:33:6f:53:35:ff:af:74:a7: a6:91:48:af:4a:5d:7f:be:39:e4:9a:d8:42:45:79:fc:b7:0a: a2:71:e0:dd:ae:79:2b:be:3f:73:bb:87:ca:16:87:4e:8c:14: bf:e5:40:85:b5:56:e6:e9:f2:97:4a:7b:2b:42:74:57:2a:13: db:88:b0:8d:97:00:98:1e:b8:74:c6:d8:58:33:6e:23:05:c3: 50:08:d2:25:14:8f:58:63:8a:9d:9a:4f:ee:26:57:02:1c:c9: a4:df:e5:c1:3c:09:5a:b2:73:3d:43:4d:47:de:a7:12:65:f7: 39:a6:3d:53:d3:b1:45:9a:79:94:eb:5f:ce:f9:6b:f6:1b:f3: ae:64:29:45:f5:c8:69:0d:0a:34:0b:d7:e8:6f:68:1e:d9:0e: a3:25:1a:44:15:4d:77:40:d9:8f:4e:be:19:50:4e:e2:fc:a2: af:5c:2d:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnmo6/hfXd45dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YmFlYTEzODMtZTdiZi00NzdlLWFmN2ItYTVjYjJlMmU0MWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguQJyn2JulmPAe6kvAJNjNsh+STHLUKgUxcH oHZjVlsYdfZ5t6hSzs/ksnPhqdw0CWd7x+fnAfDNDYcej6jstsyMOerBxGExCPud SHdPduJUaHYz0YmEHDm6XzBsTG/7eonHOx1YVociuoWv+Qt33gyhxnTaX+CfnHKG zjvbAcabOShAzUxvpLgMtlIB7C06jjv+BmSW3dRiCkCNcgvNPkqDrLujOGrHWtR+ CPXDu9IEBXU9flqrnk6RwOWFrpdD7i9XgmIiZ/K37Ql0nadXBZERK78zyAeKBk2u CSAqNs+ZKg3GrOYeM8qRYYTajhXAK9zF+pFZmu8o8gjhjpWB6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6CRBAZ05gt82FRaAQR1oBuH4t9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZGMyYWE1MzItMzNjMy0z OTUxLTg5YmUtMTIzMzA3NTljZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXr8fAAC5RZrwVOhxVK6WRRueX6zAhm2n23k5xesRpl6D8mjJkwLVna vZRVVFcBTK0IkK/nECxGhxzxRhIszNHjPOFG+KEZZrq2jps/93KXXb0zb1M1/690 p6aRSK9KXX++OeSa2EJFefy3CqJx4N2ueSu+P3O7h8oWh06MFL/lQIW1Vubp8pdK eytCdFcqE9uIsI2XAJgeuHTG2FgzbiMFw1AI0iUUj1hjip2aT+4mVwIcyaTf5cE8 CVqycz1DTUfepxJl9zmmPVPTsUWaeZTrX875a/Yb865kKUX1yGkNCjQL1+hvaB7Z DqMlGkQVTXdA2Y9OvhlQTuL8oq9cLYY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:53:04 2025 by rpki-client