$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/df45dc01-dbe8-326a-a444-9d70445a1cfd.roa File: df45dc01-dbe8-326a-a444-9d70445a1cfd.roa (raw, json) Hash identifier: TVCl5jySobF6/1R1l2Au9Hu1rhDfgq4hNh4Ve+7pqtY= Subject key identifier: 0B:48:B3:42:37:31:51:7E:2F:67:CE:0F:13:6F:A3:99:B2:2D:A6:21 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AECC1198FA4F3CBF9AEFF6B00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/df45dc01-dbe8-326a-a444-9d70445a1cfd.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 130.137.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:19:8f:a4:f3:cb:f9:ae:ff:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ca33dd10-b7af-4dab-a157-d3d2d58c21f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:63:53:a5:b9:56:de:e1:59:5b:4f:e9:a0: da:f7:1a:40:5c:61:a0:8a:a7:50:07:1b:15:77:75: 1e:35:32:61:04:44:26:f1:0c:c8:4a:d2:a5:d4:95: ff:90:57:29:da:58:2d:fa:88:13:3c:28:2e:40:6e: d1:05:e4:01:18:72:ea:9e:52:be:dd:ca:98:5d:c6: 2a:23:f5:c9:35:07:7b:98:06:72:4d:ff:d8:32:08: ce:a5:22:89:8c:64:d3:79:ff:e6:8f:38:82:7d:b2: e6:5c:88:9b:3e:fa:3f:f3:90:e9:2f:95:c6:fd:57: 22:ca:fa:6d:36:21:01:51:cb:a3:ee:8c:13:3a:ea: ef:d2:98:05:a6:1a:0f:2c:02:e9:f2:7f:42:5f:56: 2e:4e:a3:62:7b:2f:2f:7c:92:31:de:b5:b3:75:49: 86:94:b1:51:f8:65:58:01:bd:88:65:9a:c1:8a:52: 76:85:79:e5:8c:ea:d4:af:95:db:26:35:5f:c9:22: 9a:99:74:68:59:bd:4f:72:8b:15:e4:39:b2:6a:4b: 3a:8c:55:37:fb:56:b4:c6:05:c2:c2:cc:d3:a1:49: 57:95:5d:af:e0:37:dd:2e:b3:95:b1:c2:31:9c:62: 36:36:36:45:86:28:71:3d:0c:b8:30:5b:78:c5:0f: 78:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:48:B3:42:37:31:51:7E:2F:67:CE:0F:13:6F:A3:99:B2:2D:A6:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/df45dc01-dbe8-326a-a444-9d70445a1cfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:97:a3:cf:fe:23:6b:a0:ca:a3:61:b7:42:72:61:1f:0c:f8: c0:aa:c1:2f:12:d1:d9:4e:36:f7:3a:33:97:54:65:59:ee:17: b5:5b:41:ff:78:a3:5c:0d:94:f9:ce:e4:f8:2e:c2:2d:75:1f: 6b:fd:bf:b8:23:bc:79:81:51:3e:e1:a0:24:ac:17:49:8a:b3: b5:eb:fb:b4:94:f1:32:08:8e:e2:f9:ed:23:9c:56:d5:a6:04: 38:d9:9b:4b:b1:2b:4c:2e:3d:ec:b4:85:3e:27:10:38:b9:7a: 25:03:e7:27:d5:f7:a5:58:e1:60:f8:24:de:e3:34:e5:36:fa: 71:98:45:a6:be:89:11:08:c7:ec:2f:56:96:a2:01:93:93:3a: 1e:18:7d:6e:57:55:a2:13:ac:2c:14:e8:6a:72:27:85:af:44: 65:20:60:01:0b:e7:8a:7c:89:76:70:53:cd:af:44:55:7a:b9: fe:03:b4:20:54:03:32:85:14:67:4d:c7:a0:db:a9:9b:8b:2a: 2d:d7:6e:80:ec:1a:45:07:d4:dc:34:6e:63:67:86:27:cc:b4: 69:51:e1:39:dd:90:cf:c7:66:1e:4c:d8:db:7d:20:6b:8b:b4: 89:57:96:85:f5:c9:2c:bf:96:d5:60:8a:d3:da:0b:d6:ce:e1: ed:ea:63:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswRmPpPPL+a7/awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Y2EzM2RkMTAtYjdhZi00ZGFiLWExNTctZDNkMmQ1OGMyMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXJjU6W5Vt7hWVtP6aDa9xpAXGGgiqdQBxsV d3UeNTJhBEQm8QzIStKl1JX/kFcp2lgt+ogTPCguQG7RBeQBGHLqnlK+3cqYXcYq I/XJNQd7mAZyTf/YMgjOpSKJjGTTef/mjziCfbLmXIibPvo/85DpL5XG/Vciyvpt NiEBUcuj7owTOurv0pgFphoPLALp8n9CX1YuTqNiey8vfJIx3rWzdUmGlLFR+GVY Ab2IZZrBilJ2hXnljOrUr5XbJjVfySKamXRoWb1PcosV5Dmyaks6jFU3+1a0xgXC wszToUlXlV2v4DfdLrOVscIxnGI2NjZFhihxPQy4MFt4xQ94nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtIs0I3MVF+L2fODxNvo5myLaYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZGY0NWRjMDEtZGJlOC0z MjZhLWE0NDQtOWQ3MDQ0NWExY2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISXo8/+I2ugyqNht0JyYR8M+MCqwS8S0dlONvc6M5dUZVnuF7VbQf94 o1wNlPnO5Pguwi11H2v9v7gjvHmBUT7hoCSsF0mKs7Xr+7SU8TIIjuL57SOcVtWm BDjZm0uxK0wuPey0hT4nEDi5eiUD5yfV96VY4WD4JN7jNOU2+nGYRaa+iREIx+wv VpaiAZOTOh4YfW5XVaITrCwU6GpyJ4WvRGUgYAEL54p8iXZwU82vRFV6uf4DtCBU AzKFFGdNx6DbqZuLKi3XboDsGkUH1Nw0bmNnhifMtGlR4TndkM/HZh5M2Nt9IGuL tIlXloX1ySy/ltVgitPaC9bO4e3qY7c= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:28 2025 by rpki-client