$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcf7ddb5-1590-3570-a0fd-9634b2b30e63.roa File: dcf7ddb5-1590-3570-a0fd-9634b2b30e63.roa (raw, json) Hash identifier: ptGvE5my63qZ7dJ0qNGiJwZJV5ZdcDF8IE31ont7k5Q= Subject key identifier: 21:89:DD:A0:9B:F0:D0:EA:73:BD:24:E0:D4:A4:08:8F:7A:8D:02:72 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BB45D13C4DCAC856F13071780 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcf7ddb5-1590-3570-a0fd-9634b2b30e63.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 130.137.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:13:c4:dc:ac:85:6f:13:07:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=c042cf22-3e3c-4c82-8218-ec88018a70b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c7:3c:ca:c7:df:d6:ed:81:f6:69:d4:75:c1: 4e:f4:7d:e8:39:81:fd:c5:72:bc:7d:0b:d4:14:e7: 63:84:53:ae:84:29:40:63:1f:cf:b2:71:a3:35:0e: 4d:a2:22:9d:ff:73:7f:5f:cb:64:b0:e8:63:a2:52: 8e:1a:68:c1:ec:a7:05:b9:30:4f:8a:e8:6d:62:32: 29:7d:11:3d:15:8f:09:d8:09:36:04:ed:ee:f4:49: 92:3b:08:cf:84:a3:6d:a0:39:f7:d1:61:ef:0d:a6: 4a:23:36:2f:ff:d7:a3:d9:a3:95:e8:c3:db:3e:1d: 58:ad:a8:81:1c:10:0c:5f:c8:49:c2:37:cf:08:86: 06:8f:8d:30:c0:19:67:f1:f8:77:da:50:4d:c0:b7: 28:f5:4a:37:47:6e:f2:18:9e:f4:47:ca:96:e6:97: db:18:f9:2e:df:9f:1f:79:cf:59:a2:25:e1:31:58: 32:08:72:09:05:9b:be:18:de:68:14:e1:bc:ee:22: c2:4f:7c:09:88:44:e0:53:e6:a9:d3:27:fd:87:19: 1c:ec:06:a7:d9:fb:99:be:f0:d6:c9:b0:4e:36:6b: 3c:a2:3d:98:15:d7:9d:64:77:34:3b:57:3a:34:d0: ed:ed:d3:c6:7d:e1:03:45:b5:c7:f2:8b:f7:10:24: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:89:DD:A0:9B:F0:D0:EA:73:BD:24:E0:D4:A4:08:8F:7A:8D:02:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcf7ddb5-1590-3570-a0fd-9634b2b30e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f6:2f:d5:46:bf:40:05:c9:7c:e6:88:92:d2:d6:bb:27:c5: 4d:c3:5b:77:d1:c4:15:03:3a:59:12:94:aa:25:77:85:6c:a1: f8:bb:9d:7e:1d:2b:6b:56:e7:97:15:50:0a:19:21:2a:40:5e: a6:93:ca:67:3d:fe:80:3f:1b:35:e9:36:a3:75:a1:1e:b5:db: 48:8d:75:5b:8d:5b:db:69:28:1c:7e:05:93:e0:ba:d6:8d:7d: 53:b8:2b:08:22:82:d3:d9:e9:36:10:4e:1c:31:b3:75:49:60: 79:04:d7:3b:ba:aa:16:ed:e3:ba:4e:8c:4a:3c:e2:93:a5:45: c1:27:91:0a:5f:58:96:fc:32:aa:69:b5:8c:07:8e:67:e9:6e: e6:10:22:15:4f:b7:42:e0:80:ba:0f:b1:fb:ab:5b:d3:e1:ab: ef:e3:34:81:1e:bb:8a:5e:63:85:33:80:83:e4:b3:f9:c1:49: 11:20:15:21:6d:af:01:24:bc:11:55:e6:32:94:05:3e:f7:ba: 4e:fc:c2:3a:03:57:00:11:1f:19:57:25:ea:32:0b:8e:3b:3c: d2:e8:d4:29:e9:f4:51:cf:45:52:ef:9f:7a:23:36:33:af:94: 87:f3:c9:3a:b5:28:87:47:93:d2:49:10:22:36:7b:94:00:2c: 5a:30:f9:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRPE3KyFbxMHF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YzA0MmNmMjItM2UzYy00YzgyLTgyMTgtZWM4ODAxOGE3MGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycc8ysff1u2B9mnUdcFO9H3oOYH9xXK8fQvU FOdjhFOuhClAYx/PsnGjNQ5NoiKd/3N/X8tksOhjolKOGmjB7KcFuTBPiuhtYjIp fRE9FY8J2Ak2BO3u9EmSOwjPhKNtoDn30WHvDaZKIzYv/9ej2aOV6MPbPh1YraiB HBAMX8hJwjfPCIYGj40wwBln8fh32lBNwLco9Uo3R27yGJ70R8qW5pfbGPku358f ec9ZoiXhMVgyCHIJBZu+GN5oFOG87iLCT3wJiETgU+ap0yf9hxkc7Aan2fuZvvDW ybBONms8oj2YFdedZHc0O1c6NNDt7dPGfeEDRbXH8ov3ECQq+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGJ3aCb8NDqc70k4NSkCI96jQJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZGNmN2RkYjUtMTU5MC0z NTcwLWEwZmQtOTYzNGIyYjMwZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgoniMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn2L9VGv0AFyXzmiJLS1rsnxU3DW3fRxBUDOlkSlKold4Vsofi7nX4d K2tW55cVUAoZISpAXqaTymc9/oA/GzXpNqN1oR6120iNdVuNW9tpKBx+BZPgutaN fVO4KwgigtPZ6TYQThwxs3VJYHkE1zu6qhbt47pOjEo84pOlRcEnkQpfWJb8Mqpp tYwHjmfpbuYQIhVPt0LggLoPsfurW9Phq+/jNIEeu4peY4UzgIPks/nBSREgFSFt rwEkvBFV5jKUBT73uk78wjoDVwARHxlXJeoyC447PNLo1Cnp9FHPRVLvn3ojNjOv lIfzyTq1KIdHk9JJECI2e5QALFow+Rw= -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:47 2025 by rpki-client