$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fa140f5d-9263-340c-96dd-314e7dacdd92.roa File: fa140f5d-9263-340c-96dd-314e7dacdd92.roa (raw, json) Hash identifier: HXBFjkPpMBCq1lA+aCV9w++6dCtftvqVg6yzU29wENE= Subject key identifier: 6C:46:0F:D0:B7:E7:E8:87:9E:0B:E2:C0:9A:23:BA:39:A4:E5:37:79 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BBE402F5E15DBE14591B28100 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fa140f5d-9263-340c-96dd-314e7dacdd92.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 8987 IP address blocks: 130.137.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:2f:5e:15:db:e1:45:91:b2:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=57896ea2-6822-4546-b0c3-434878eb8709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:43:56:d9:f0:7d:85:52:80:ab:6f:53:42: c1:80:a6:52:96:0d:b4:58:36:09:9c:a7:f0:70:fc: d8:58:dc:cf:29:b2:f1:5c:4c:80:34:d5:2e:11:9f: 6e:7b:f0:00:55:f4:bc:9a:8f:3f:e8:a5:99:da:5f: 5e:fd:ba:02:98:94:7f:0e:6d:cc:27:26:ec:de:49: 2c:cb:e6:c7:2e:fe:1a:d1:55:3b:f9:0f:ce:35:83: 1a:e2:44:01:ba:ae:b7:13:01:51:9e:c1:9c:cc:2d: 94:0f:c3:00:e2:64:4f:72:f5:ab:df:45:9b:24:2d: 2f:03:24:d7:65:a4:89:d8:7f:e4:ca:36:6f:28:fd: 08:70:bb:b6:12:d3:ab:3e:c6:2d:8d:cc:f4:6c:c3: ea:10:49:0a:d4:74:3f:2f:3d:aa:a5:f9:4b:73:6e: 5a:3f:76:8b:db:5a:8d:b2:a5:5a:52:04:cf:9c:28: 1c:7a:61:79:a0:02:76:3e:0d:3d:77:90:e7:ce:8c: 05:90:44:95:cd:d6:1b:c7:a7:38:48:d0:66:86:ac: 29:22:19:9a:3f:62:d8:62:61:ed:d8:96:20:b5:29: 06:ff:24:40:e4:55:f3:62:d3:9f:6e:2f:9b:b7:a6: 49:37:e8:a7:ae:cb:14:0f:55:f8:8c:74:10:b3:96: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:46:0F:D0:B7:E7:E8:87:9E:0B:E2:C0:9A:23:BA:39:A4:E5:37:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fa140f5d-9263-340c-96dd-314e7dacdd92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ed:fd:de:dc:1b:9f:f9:e8:cf:aa:23:e7:3a:14:11:68:b1: 4a:88:d0:52:73:81:e1:c3:25:4e:45:2d:e0:81:23:a0:ca:a8: 69:43:dc:e9:1c:9b:41:21:31:7e:5b:ed:4f:9a:f1:f5:96:31: 7a:c8:66:f7:eb:a1:73:f5:88:95:b0:0b:31:28:96:47:96:22: 31:af:2d:d2:e3:02:0f:5a:bb:16:f4:e4:11:73:3e:6c:5f:bd: 7d:5b:b2:8b:c6:83:2c:5b:0c:22:80:61:9b:bb:b4:5c:2b:66: de:24:aa:63:85:1a:b2:a4:d6:a6:b7:5d:a0:02:57:c5:6b:d1: f1:82:26:4a:95:cc:af:d4:8b:79:d8:97:e8:16:63:94:ee:e0: 74:f9:3b:35:aa:0b:33:a5:37:22:fb:8a:94:5f:4a:6b:4b:b1: 23:1b:2a:0f:e1:eb:5b:67:7c:79:15:67:24:c9:e0:ae:b0:ad: ab:26:66:f8:6c:ec:19:ee:02:22:38:50:ae:ee:3a:e6:ed:a1: c4:b2:7b:2d:8f:79:17:5e:19:ee:6f:e6:19:9f:a8:0e:ac:c4: 4a:71:20:86:b9:e1:c5:71:1b:c0:d7:7f:b5:dc:d0:30:29:e6: 30:ad:d7:2e:49:eb:38:e3:93:31:06:d8:21:1c:cc:24:dc:0c: 60:b8:46:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QC9eFdvhRZGygQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NTc4OTZlYTItNjgyMi00NTQ2LWIwYzMtNDM0ODc4ZWI4NzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxNDVtnwfYVSgKtvU0LBgKZSlg20WDYJnKfw cPzYWNzPKbLxXEyANNUuEZ9ue/AAVfS8mo8/6KWZ2l9e/boCmJR/Dm3MJybs3kks y+bHLv4a0VU7+Q/ONYMa4kQBuq63EwFRnsGczC2UD8MA4mRPcvWr30WbJC0vAyTX ZaSJ2H/kyjZvKP0IcLu2EtOrPsYtjcz0bMPqEEkK1HQ/Lz2qpflLc25aP3aL21qN sqVaUgTPnCgcemF5oAJ2Pg09d5DnzowFkESVzdYbx6c4SNBmhqwpIhmaP2LYYmHt 2JYgtSkG/yRA5FXzYtOfbi+bt6ZJN+inrssUD1X4jHQQs5aApQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxGD9C35+iHngviwJojujmk5Td5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZmExNDBmNWQtOTI2My0z NDBjLTk2ZGQtMzE0ZTdkYWNkZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDt/d7cG5/56M+qI+c6FBFosUqI0FJzgeHDJU5FLeCBI6DKqGlD3Okc m0EhMX5b7U+a8fWWMXrIZvfroXP1iJWwCzEolkeWIjGvLdLjAg9auxb05BFzPmxf vX1bsovGgyxbDCKAYZu7tFwrZt4kqmOFGrKk1qa3XaACV8Vr0fGCJkqVzK/Ui3nY l+gWY5Tu4HT5OzWqCzOlNyL7ipRfSmtLsSMbKg/h61tnfHkVZyTJ4K6wrasmZvhs 7BnuAiI4UK7uOubtocSyey2PeRdeGe5v5hmfqA6sxEpxIIa54cVxG8DXf7Xc0DAp 5jCt1y5J6zjjkzEG2CEczCTcDGC4Rms= -----END CERTIFICATE-----Generated at Wed Nov 5 11:43:31 2025 by rpki-client