$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcdd20f7-aade-355d-ac1f-970b9d656380.roa File: dcdd20f7-aade-355d-ac1f-970b9d656380.roa (raw, json) Hash identifier: +NqseSZ3zh/T3TV0sMF6NfwM92w398wRRhgsi7h3J+c= Subject key identifier: D1:23:21:73:73:DD:A1:86:9B:00:13:F1:40:E5:29:76:E5:34:EF:26 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBB7585A0A666631C0EB50D80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcdd20f7-aade-355d-ac1f-970b9d656380.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:85:a0:a6:66:63:1c:0e:b5:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=25320568-e602-41d2-a169-402dd4db906e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:41:52:fa:3c:39:bd:f8:2f:b6:49:d7:20: a7:a0:fe:6d:1b:29:00:7d:d5:44:15:d4:35:6c:0f: 81:e9:79:f3:e2:94:b7:e9:ab:6e:8b:9f:5b:a4:be: 5f:ac:a9:62:55:eb:8c:6d:9e:aa:c4:0e:f7:ce:3f: 7e:99:34:a0:ed:4c:78:51:52:69:9b:af:3a:57:83: a4:a2:26:af:e2:60:09:ee:3d:54:cf:c1:4e:67:43: 01:11:20:72:98:fb:11:e8:14:9f:4e:ff:36:f6:12: 5e:f7:d0:82:9f:77:90:8d:32:81:3a:44:01:a5:9e: e8:22:de:58:93:5e:ae:66:d7:e1:ee:09:09:48:0b: c0:f7:8a:69:33:d8:8d:83:3b:46:45:eb:2b:0a:6b: 37:86:5c:59:27:f6:51:10:d7:e2:6d:dc:1f:a7:bc: ec:0a:d1:a0:a8:9c:db:c0:0e:5a:79:5d:1f:9e:f5: 64:19:02:db:d6:ba:ba:5e:08:c7:be:db:a1:a0:e3: e4:41:08:e0:10:f3:c8:dd:e9:2b:55:3e:77:13:8e: 67:68:dc:8f:6b:22:c5:48:16:16:b5:15:a7:e4:50: 57:da:71:49:07:ff:95:a5:47:91:db:ce:d5:e3:c4: 3a:31:a8:43:d4:8f:9c:93:3a:4c:73:dd:e5:9b:53: 62:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:23:21:73:73:DD:A1:86:9B:00:13:F1:40:E5:29:76:E5:34:EF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcdd20f7-aade-355d-ac1f-970b9d656380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:21:41:a5:c5:3c:4b:9b:37:c7:46:39:0e:cd:ac:9d:33:69: 8d:95:cf:0a:68:33:df:e6:c1:d2:2b:02:91:77:2e:df:df:74: 3d:45:e0:1f:84:57:54:7e:5b:a5:46:9e:de:22:c4:64:96:1f: 9b:8f:5b:d2:4d:e5:14:f9:39:0c:d5:ab:79:2c:a8:4e:cc:7b: 55:b9:55:2a:ce:25:a8:05:ac:d8:51:26:fe:aa:08:0e:95:61: 89:5e:97:c0:7c:d3:78:9d:4b:d2:67:14:48:0f:07:87:24:1a: 91:ef:6d:52:ea:00:2e:9d:4e:8e:12:60:4f:be:95:ed:70:90: 56:36:06:47:47:c9:38:b8:ad:d4:b4:90:df:61:0f:51:dc:92: b7:5e:75:a9:1b:11:80:3b:06:bf:7e:a1:16:d9:a1:be:62:1b: f0:ac:c8:db:9f:26:eb:35:9b:01:56:83:80:06:e5:84:4a:73: a2:71:4c:7a:d6:d4:40:b9:9a:82:04:85:fd:00:ee:47:33:93: 7c:ae:38:ab:c3:7f:99:ff:fc:0e:af:89:0f:31:e3:e6:3a:22: 4e:4f:37:1f:73:00:b4:57:12:03:16:e7:3f:f4:24:ad:fe:e4: 25:ff:8c:d4:8e:44:49:32:49:9c:c5:d3:ec:d9:71:7e:c9:d0: cf:71:7e:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYWgpmZjHA61DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MjUzMjA1NjgtZTYwMi00MWQyLWExNjktNDAyZGQ0ZGI5MDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5dBUvo8Ob34L7ZJ1yCnoP5tGykAfdVEFdQ1 bA+B6Xnz4pS36atui59bpL5frKliVeuMbZ6qxA73zj9+mTSg7Ux4UVJpm686V4Ok oiav4mAJ7j1Uz8FOZ0MBESBymPsR6BSfTv829hJe99CCn3eQjTKBOkQBpZ7oIt5Y k16uZtfh7gkJSAvA94ppM9iNgztGResrCms3hlxZJ/ZRENfibdwfp7zsCtGgqJzb wA5aeV0fnvVkGQLb1rq6XgjHvtuhoOPkQQjgEPPI3ekrVT53E45naNyPayLFSBYW tRWn5FBX2nFJB/+VpUeR287V48Q6MahD1I+ckzpMc93lm1NiXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEjIXNz3aGGmwAT8UDlKXblNO8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZGNkZDIwZjctYWFkZS0z NTVkLWFjMWYtOTcwYjlkNjU2MzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMhQaXFPEubN8dGOQ7NrJ0zaY2VzwpoM9/mwdIrApF3Lt/fdD1F4B+E V1R+W6VGnt4ixGSWH5uPW9JN5RT5OQzVq3ksqE7Me1W5VSrOJagFrNhRJv6qCA6V YYlel8B803idS9JnFEgPB4ckGpHvbVLqAC6dTo4SYE++le1wkFY2BkdHyTi4rdS0 kN9hD1HckrdedakbEYA7Br9+oRbZob5iG/CsyNufJus1mwFWg4AG5YRKc6JxTHrW 1EC5moIEhf0A7kczk3yuOKvDf5n//A6viQ8x4+Y6Ik5PNx9zALRXEgMW5z/0JK3+ 5CX/jNSOREkySZzF0+zZcX7J0M9xfgQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:27 2025 by rpki-client