$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f5ec61ab-6b35-3777-8ced-1257536758a0.roa File: f5ec61ab-6b35-3777-8ced-1257536758a0.roa (raw, json) Hash identifier: XIwgFnaSD1GYSrnkFl1++6LT/gTNr4+oAEkL/3OduQI= Subject key identifier: BE:8E:99:16:B5:F2:41:C7:5C:32:CE:C7:8E:9D:71:51:BE:F0:64:FC Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AF25674C0515D29E8696EBD00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f5ec61ab-6b35-3777-8ced-1257536758a0.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 130.137.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:74:c0:51:5d:29:e8:69:6e:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=54fa8bcf-445f-4fa8-9f3b-28e266b4e040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:78:eb:be:02:bc:54:c8:6c:dc:8a:6b:1e: 9f:81:ce:56:e3:36:c6:59:0c:14:5d:e5:60:1b:06: 61:7b:c5:2b:0f:02:5b:91:af:31:7d:61:5a:89:60: 32:79:34:dd:ab:18:22:c1:f6:78:6c:26:ac:b1:1b: 99:d8:47:33:c2:01:63:a3:68:1c:d7:d5:1c:be:2a: 52:ff:41:aa:02:4b:db:04:28:01:29:6b:74:ce:32: 71:9b:09:2b:c0:de:93:35:f6:41:91:05:70:3d:5a: a5:bc:14:21:af:55:26:f3:d9:59:98:65:8b:03:6b: 5f:7c:5d:4f:45:8e:70:50:e6:18:4f:d5:68:2b:c0: fe:0e:cc:27:61:67:5b:eb:f6:0c:9e:9c:b7:ad:e0: 8e:ae:e8:02:18:43:02:f8:d6:26:8f:94:4c:d9:36: fc:6c:89:c4:09:29:29:e6:e6:c3:3c:f9:60:b4:6d: 97:bb:28:82:c4:e6:60:a9:99:f6:04:36:b1:a8:6e: 6e:cd:60:8d:62:54:72:cd:02:2f:eb:c6:fd:2e:fe: 74:fc:7f:75:bd:15:df:70:b4:ca:c8:93:16:cc:56: 7e:c3:2d:e7:5b:46:d3:fa:3e:91:e4:90:c0:5b:d3: b8:73:bb:66:c7:fd:d2:c8:5d:a9:20:97:ec:6d:f8: 2e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8E:99:16:B5:F2:41:C7:5C:32:CE:C7:8E:9D:71:51:BE:F0:64:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f5ec61ab-6b35-3777-8ced-1257536758a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d3:e1:5a:c6:07:c6:f2:f1:2d:d2:a9:6c:d0:d2:b8:fd:d3: 01:f1:ce:fc:92:1f:1a:87:a1:c1:dd:a4:6f:13:9b:87:0e:b3: f8:25:38:f1:83:89:d0:00:46:8c:f4:c5:42:06:f9:7f:be:2e: 0d:95:f6:9e:4b:58:05:9d:de:7f:56:90:a0:76:5b:71:eb:a4: 01:69:39:dc:f3:d4:bf:48:9c:07:f8:e9:59:fd:b3:80:f7:02: 2b:3b:01:ac:e3:93:78:5a:8a:ab:97:17:c0:ce:27:fd:c4:99: d5:95:1e:95:58:88:f7:8d:6e:f0:cc:23:a4:c6:b2:ba:c8:6b: b3:cc:f8:6e:72:db:1d:ac:0c:e1:c7:96:a6:4b:45:42:3c:0f: ef:9d:77:db:ab:da:1f:e2:41:83:bb:98:91:60:00:a9:84:84: a7:2f:ea:05:86:05:de:5f:75:44:59:79:f4:35:e8:1c:7f:16: 04:14:8b:0b:85:c3:b0:c2:01:9c:9d:44:6b:4e:f2:18:b8:36: d6:ab:16:7d:50:f1:df:07:9f:44:71:c2:0a:69:f9:0a:57:56: f1:cd:80:48:7f:98:2f:30:48:3d:8f:fd:6e:11:58:25:c6:f9: 76:81:57:e5:9c:49:7d:68:93:61:6e:70:45:89:0a:c6:28:fe: c3:68:be:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnTAUV0p6GluvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NTRmYThiY2YtNDQ1Zi00ZmE4LTlmM2ItMjhlMjY2YjRlMDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM94674CvFTIbNyKax6fgc5W4zbGWQwUXeVg GwZhe8UrDwJbka8xfWFaiWAyeTTdqxgiwfZ4bCassRuZ2EczwgFjo2gc19UcvipS /0GqAkvbBCgBKWt0zjJxmwkrwN6TNfZBkQVwPVqlvBQhr1Um89lZmGWLA2tffF1P RY5wUOYYT9VoK8D+DswnYWdb6/YMnpy3reCOrugCGEMC+NYmj5RM2Tb8bInECSkp 5ubDPPlgtG2XuyiCxOZgqZn2BDaxqG5uzWCNYlRyzQIv68b9Lv50/H91vRXfcLTK yJMWzFZ+wy3nW0bT+j6R5JDAW9O4c7tmx/3SyF2pIJfsbfguYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6OmRa18kHHXDLOx46dcVG+8GT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZjVlYzYxYWItNmIzNS0z Nzc3LThjZWQtMTI1NzUzNjc1OGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfT4VrGB8by8S3SqWzQ0rj90wHxzvySHxqHocHdpG8Tm4cOs/glOPGD idAARoz0xUIG+X++Lg2V9p5LWAWd3n9WkKB2W3HrpAFpOdzz1L9InAf46Vn9s4D3 Ais7Aazjk3haiquXF8DOJ/3EmdWVHpVYiPeNbvDMI6TGsrrIa7PM+G5y2x2sDOHH lqZLRUI8D++dd9ur2h/iQYO7mJFgAKmEhKcv6gWGBd5fdURZefQ16Bx/FgQUiwuF w7DCAZydRGtO8hi4NtarFn1Q8d8Hn0Rxwgpp+QpXVvHNgEh/mC8wSD2P/W4RWCXG +XaBV+WcSX1ok2FucEWJCsYo/sNovpA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:13:50 2025 by rpki-client