$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e49dfb6c-b840-3313-99b5-655537dd78e3.roa File: e49dfb6c-b840-3313-99b5-655537dd78e3.roa (raw, json) Hash identifier: O1beDxeJxnRL54+Pgg/28l1Gd1gMscOOY2oQo8kjqEQ= Subject key identifier: 63:5C:DB:FA:70:1D:D4:84:2E:F1:63:73:A8:A3:F0:AB:4F:22:E9:4A Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBE4027DC5C14399114247100 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e49dfb6c-b840-3313-99b5-655537dd78e3.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 14618 IP address blocks: 130.137.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:27:dc:5c:14:39:91:14:24:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=5b6e80f0-e040-4b34-83da-890468ff107b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4e:c2:76:82:a8:87:2d:68:01:6b:f0:80:f6: 1b:de:ce:8f:ad:eb:6f:73:1b:ef:10:d4:60:33:d5: 8e:42:99:0f:17:2d:18:c2:00:c1:77:de:77:d9:d7: b1:55:8c:01:38:16:26:3b:29:7d:dc:17:27:45:8b: 53:6e:38:76:3c:ae:6d:9f:e1:dc:e9:80:dd:4b:f9: c0:46:63:16:ff:86:63:e3:9d:6c:c9:d9:4d:f6:fd: c9:d4:71:a7:5f:e9:2d:4a:fc:94:e5:3c:5d:83:5c: db:b9:d8:4b:df:cd:91:6f:43:28:7b:09:05:2b:2d: fe:6a:c8:8d:cf:19:85:ea:a4:16:a3:c7:36:76:64: d2:f8:ee:58:3d:1d:c6:bd:ef:fa:51:68:2b:c9:8a: 37:dd:bb:41:f1:a6:c7:44:0e:d5:9b:c3:85:53:da: a2:ff:0d:f8:d5:be:6c:e9:ab:30:9c:43:b5:96:e9: 9f:e5:b5:19:67:3f:3a:f9:3d:b0:01:fb:8f:db:ee: ef:93:91:02:d7:8d:7f:32:6d:7d:61:af:7e:20:ab: e8:e6:a5:32:da:83:3b:51:f2:0d:c5:3f:1c:d2:69: b3:87:63:ae:b0:79:0e:4a:2b:5d:35:f2:fc:4d:27: 7f:6b:c2:23:66:6f:5e:7f:51:21:32:f7:de:b8:80: d0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5C:DB:FA:70:1D:D4:84:2E:F1:63:73:A8:A3:F0:AB:4F:22:E9:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e49dfb6c-b840-3313-99b5-655537dd78e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:1e:8c:8e:65:85:77:9e:e6:6d:37:32:82:ac:89:73:86:f5: 95:12:e1:7e:18:80:d7:f4:5a:87:13:61:26:0d:49:00:df:91: eb:aa:f1:0c:7c:9a:06:27:6a:55:9f:da:08:6c:b6:74:98:f0: b9:3a:9e:89:79:a8:76:dd:93:67:ae:cb:71:1a:46:12:cd:ae: 36:2d:6d:f2:f5:8f:37:f7:00:10:40:f1:a2:b1:42:d1:bd:23: b5:75:51:30:49:13:3d:34:6b:95:bd:73:2f:47:aa:f2:cb:4b: eb:89:c3:81:dc:0b:3f:69:a9:8d:cf:04:88:00:b3:1f:c9:da: bc:d8:0a:52:31:2a:ec:26:40:46:c5:93:34:7b:fc:8a:ec:93: 19:04:d6:64:98:30:6b:63:bd:78:46:83:d2:7b:43:a3:a3:4d: 09:d6:fa:ca:ce:50:66:e4:ee:75:1e:3d:6c:7b:ff:84:15:5c: e1:9d:3a:24:2e:79:66:97:d9:82:4a:a6:02:89:d9:7a:0d:87: e6:e1:20:8a:ca:42:4d:1c:43:46:86:7c:3e:3f:fd:37:cd:e8: c0:e2:85:10:db:6b:ba:6f:2c:f5:c4:4c:af:ea:1e:4c:77:78: da:d0:a1:6f:e2:3e:f9:08:f3:44:b4:09:d9:62:be:2d:47:21: 4f:18:f9:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QCfcXBQ5kRQkcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NWI2ZTgwZjAtZTA0MC00YjM0LTgzZGEtODkwNDY4ZmYxMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq07CdoKohy1oAWvwgPYb3s6PretvcxvvENRg M9WOQpkPFy0YwgDBd9532dexVYwBOBYmOyl93BcnRYtTbjh2PK5tn+Hc6YDdS/nA RmMW/4Zj451sydlN9v3J1HGnX+ktSvyU5Txdg1zbudhL382Rb0MoewkFKy3+asiN zxmF6qQWo8c2dmTS+O5YPR3Gve/6UWgryYo33btB8abHRA7Vm8OFU9qi/w341b5s 6aswnEO1lumf5bUZZz86+T2wAfuP2+7vk5EC141/Mm19Ya9+IKvo5qUy2oM7UfIN xT8c0mmzh2OusHkOSitdNfL8TSd/a8IjZm9ef1EhMvfeuIDQ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNc2/pwHdSELvFjc6ij8KtPIulKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZTQ5ZGZiNmMtYjg0MC0z MzEzLTk5YjUtNjU1NTM3ZGQ3OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIejI5lhXee5m03MoKsiXOG9ZUS4X4YgNf0WocTYSYNSQDfkeuq8Qx8 mgYnalWf2ghstnSY8Lk6nol5qHbdk2euy3EaRhLNrjYtbfL1jzf3ABBA8aKxQtG9 I7V1UTBJEz00a5W9cy9HqvLLS+uJw4HcCz9pqY3PBIgAsx/J2rzYClIxKuwmQEbF kzR7/IrskxkE1mSYMGtjvXhGg9J7Q6OjTQnW+srOUGbk7nUePWx7/4QVXOGdOiQu eWaX2YJKpgKJ2XoNh+bhIIrKQk0cQ0aGfD4//TfN6MDihRDba7pvLPXETK/qHkx3 eNrQoW/iPvkI80S0Cdlivi1HIU8Y+ao= -----END CERTIFICATE-----Generated at Wed Nov 5 12:11:49 2025 by rpki-client