$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ef60adf9-c8a5-393f-94bb-5aefa4db4f72.roa File: ef60adf9-c8a5-393f-94bb-5aefa4db4f72.roa (raw, json) Hash identifier: CekY6/j41pKqoc7UkODDRPK6J4CCXJxDQUTQTOPOGLc= Subject key identifier: 1B:2C:E2:C0:AB:B7:37:27:A1:05:C9:C3:BD:B3:53:64:96:03:2D:21 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBB75833B849EC21306BEBD80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ef60adf9-c8a5-393f-94bb-5aefa4db4f72.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 130.137.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:83:3b:84:9e:c2:13:06:be:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=f297ad96-9ac0-436a-9b02-f1225d40520f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1e:c7:16:2c:02:ad:d3:85:56:f9:8d:b1:ed: 20:5f:4f:94:32:70:0c:0f:1c:f2:4a:4d:31:f9:1c: 00:c4:c7:4f:e4:30:6d:9f:9e:ef:78:85:11:29:ac: 31:10:ad:ef:fe:4e:af:6d:5d:53:5b:96:9f:bb:d3: 50:6e:38:d2:b9:b0:3b:c0:c8:bb:2a:ae:4a:7a:9f: a0:95:39:81:cf:c4:85:76:5c:ef:c0:95:9d:bd:7a: ea:b4:28:6c:5f:e2:7a:78:d4:27:d0:07:ab:89:1d: 52:61:56:f1:50:43:05:bb:d4:c4:82:ca:ac:4e:4d: 82:59:fe:27:d7:8a:18:3a:cc:9e:37:e6:79:33:44: 2f:5b:49:63:8c:52:b5:a6:05:8b:72:c4:8a:26:f3: 99:45:31:bb:e2:25:20:63:c4:10:26:09:6b:9d:ed: cd:62:dd:d8:b6:07:01:6e:56:76:66:9a:25:0f:8f: 22:9c:d8:66:3d:db:2f:55:65:46:65:b3:c6:d3:ed: 37:7c:21:1f:71:db:d7:75:2d:4b:d6:50:f3:7c:4e: a7:fd:e8:f8:fb:12:b4:69:2f:a9:5f:fd:e9:09:33: 25:ce:c9:89:a0:5d:53:e6:a7:76:09:ca:e9:88:4d: 1d:4e:1b:76:9b:eb:cf:17:b9:ee:f6:47:2c:c4:15: 34:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2C:E2:C0:AB:B7:37:27:A1:05:C9:C3:BD:B3:53:64:96:03:2D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ef60adf9-c8a5-393f-94bb-5aefa4db4f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a2:e4:b5:7f:ef:3e:57:52:fb:1f:78:29:8a:17:ad:84:a4: 1b:e3:22:06:93:e7:4b:fb:8d:7c:f6:f5:ec:54:d6:80:6d:49: 62:0d:2f:8a:54:2e:4d:7b:be:ee:39:c5:df:a3:97:9f:b5:00: 9d:ae:82:d8:14:6d:9c:45:cc:15:82:7f:c3:cd:86:c3:4a:6f: c7:ec:99:b4:f5:59:17:92:45:f6:61:32:b3:37:8b:91:1b:15: d9:49:c9:76:08:50:4a:99:a3:47:84:59:a4:79:d1:a8:39:97: 24:23:79:e7:56:f5:64:48:f4:b6:de:d1:03:ab:69:1a:74:56: 16:79:08:6d:52:cf:a0:68:cd:75:92:7b:28:7a:1d:5c:16:47: 0e:26:ec:59:3e:91:3d:25:4d:b1:f0:7c:60:04:f6:14:78:05: 8c:b3:ce:26:17:ab:8e:b0:10:6e:98:98:23:02:2c:f1:ed:74: 78:d7:3a:82:7a:fa:cb:04:09:d9:fe:20:38:ab:7f:0e:c8:38: d9:f6:d7:69:5a:bc:85:d8:52:b2:e2:ee:d7:e7:bf:b3:14:de: c7:a7:b1:44:cb:74:f3:95:71:ec:a3:2e:b1:40:f9:f2:f8:85: 13:dc:0f:ee:3b:62:37:8e:b6:1f:b5:32:ce:60:99:3e:46:05: 76:70:2d:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYM7hJ7CEwa+vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjI5N2FkOTYtOWFjMC00MzZhLTliMDItZjEyMjVkNDA1MjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB7HFiwCrdOFVvmNse0gX0+UMnAMDxzySk0x +RwAxMdP5DBtn57veIURKawxEK3v/k6vbV1TW5afu9NQbjjSubA7wMi7Kq5Kep+g lTmBz8SFdlzvwJWdvXrqtChsX+J6eNQn0AeriR1SYVbxUEMFu9TEgsqsTk2CWf4n 14oYOsyeN+Z5M0QvW0ljjFK1pgWLcsSKJvOZRTG74iUgY8QQJglrne3NYt3YtgcB blZ2ZpolD48inNhmPdsvVWVGZbPG0+03fCEfcdvXdS1L1lDzfE6n/ej4+xK0aS+p X/3pCTMlzsmJoF1T5qd2CcrpiE0dTht2m+vPF7nu9kcsxBU04wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBss4sCrtzcnoQXJw72zU2SWAy0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZWY2MGFkZjktYzhhNS0z OTNmLTk0YmItNWFlZmE0ZGI0ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKi5LV/7z5XUvsfeCmKF62EpBvjIgaT50v7jXz29exU1oBtSWINL4pU Lk17vu45xd+jl5+1AJ2ugtgUbZxFzBWCf8PNhsNKb8fsmbT1WReSRfZhMrM3i5Eb FdlJyXYIUEqZo0eEWaR50ag5lyQjeedW9WRI9Lbe0QOraRp0VhZ5CG1Sz6BozXWS eyh6HVwWRw4m7Fk+kT0lTbHwfGAE9hR4BYyzziYXq46wEG6YmCMCLPHtdHjXOoJ6 +ssECdn+IDirfw7IONn212lavIXYUrLi7tfnv7MU3sensUTLdPOVceyjLrFA+fL4 hRPcD+47YjeOth+1Ms5gmT5GBXZwLfw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:35 2025 by rpki-client