$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/00433da8-ff5f-32d8-ac8d-6d63c3385461.roa File: 00433da8-ff5f-32d8-ac8d-6d63c3385461.roa (raw, json) Hash identifier: rGGVXscu/0FfBe/QXhGOFAyxcS5KzJ4bmDzBwlOR3F8= Subject key identifier: 1F:A2:B1:B8:FB:36:14:C8:9C:A7:21:8E:0E:D0:1E:D0:D5:C5:07:5F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B8BE23068B3BBDE8AB7307780 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/00433da8-ff5f-32d8-ac8d-6d63c3385461.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 130.137.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:30:68:b3:bb:de:8a:b7:30:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=0fc68500-a6b6-4b9a-967d-c118f269c5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:78:6c:c4:73:98:b3:9e:75:ed:5c:ab:fa:49: b7:02:46:28:de:7f:e1:47:90:77:10:aa:d5:23:ee: d1:7b:64:60:a0:18:13:38:fc:5c:82:45:db:07:cd: 6c:77:12:7e:78:26:6b:76:7b:bc:a5:3e:17:32:f8: e8:2b:56:31:65:22:44:15:b7:71:0a:c4:34:e5:f6: 09:03:65:3b:16:f1:a5:fe:22:87:e5:ca:de:a3:19: 1a:95:50:f5:8d:3a:45:10:de:97:f6:b3:c1:f0:ab: b2:0a:28:8a:67:6c:8c:bb:9d:7c:c3:4b:30:d3:cb: bc:37:c9:ce:1f:38:3d:c6:d0:fa:1c:0c:e8:33:87: f7:a5:b0:8a:e5:0b:8e:bd:26:93:5a:cd:e6:d2:cd: 30:7a:a6:8a:41:0f:4d:d5:1a:6b:5a:30:77:87:0d: 33:4c:28:0e:da:66:65:78:f1:9f:76:56:29:d2:b4: 7c:87:ce:47:e9:b7:80:f1:5a:50:72:84:26:2a:df: 04:bc:a0:ad:a9:43:a8:aa:eb:54:69:22:76:bc:3a: 7b:95:76:47:b2:3a:de:b8:68:62:45:d2:f4:92:19: c5:a5:7f:4d:f7:f1:04:cf:5f:47:9f:c2:c6:73:d8: 0c:da:7d:5c:31:3c:15:42:04:82:6d:86:9b:f4:29: ff:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A2:B1:B8:FB:36:14:C8:9C:A7:21:8E:0E:D0:1E:D0:D5:C5:07:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/00433da8-ff5f-32d8-ac8d-6d63c3385461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a9:56:1a:02:12:2e:a6:bd:a5:d3:a5:8c:6b:7e:4a:34:45: 98:29:e0:49:a3:b3:4f:34:7d:b8:2b:39:e8:5f:23:fb:34:4e: c3:f5:98:d7:a2:da:dc:ce:6b:83:81:bc:7d:0d:c9:a3:fa:eb: d3:b7:e6:b1:11:68:98:0c:30:70:17:d9:b0:88:0b:4d:b0:29: 66:f2:e1:87:07:f2:5c:7f:fc:7c:93:58:0a:97:dd:13:a4:36: f9:d1:1c:f2:03:f4:e3:0e:62:7f:d9:82:1c:fe:55:21:bd:8b: 8c:f2:f6:7c:31:b4:16:fb:ab:b6:50:b3:29:2e:4f:33:be:02: 4c:e9:7e:a8:8a:ef:6f:90:ee:02:e8:86:e8:26:2f:48:39:fa: 5a:d5:7d:d0:61:95:53:b6:b2:64:90:77:9a:e8:50:de:22:39: 29:6e:12:f4:d1:30:98:81:46:46:58:00:4e:67:78:fa:d5:e8: 70:69:17:4d:cc:6a:c7:e4:a4:8a:9f:79:f4:c5:4b:82:9f:c9: 5d:4c:f6:c8:fe:63:5f:8b:ef:c6:ed:49:0f:13:f2:52:d3:2d: 6f:e7:54:f3:91:60:03:7b:9e:25:87:d1:d4:91:24:c9:18:bd: a9:e2:cd:4e:49:62:e4:b7:34:3a:ee:ab:60:70:59:70:d1:ec: 3e:b6:09:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jBos7veircwd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MGZjNjg1MDAtYTZiNi00YjlhLTk2N2QtYzExOGYyNjljNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHhsxHOYs5517Vyr+km3AkYo3n/hR5B3EKrV I+7Re2RgoBgTOPxcgkXbB81sdxJ+eCZrdnu8pT4XMvjoK1YxZSJEFbdxCsQ05fYJ A2U7FvGl/iKH5creoxkalVD1jTpFEN6X9rPB8KuyCiiKZ2yMu518w0sw08u8N8nO Hzg9xtD6HAzoM4f3pbCK5QuOvSaTWs3m0s0weqaKQQ9N1RprWjB3hw0zTCgO2mZl ePGfdlYp0rR8h85H6beA8VpQcoQmKt8EvKCtqUOoqutUaSJ2vDp7lXZHsjreuGhi RdL0khnFpX9N9/EEz19Hn8LGc9gM2n1cMTwVQgSCbYab9Cn/+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+isbj7NhTInKchjg7QHtDVxQdfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMDA0MzNkYTgtZmY1Zi0z MmQ4LWFjOGQtNmQ2M2MzMzg1NDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADipVhoCEi6mvaXTpYxrfko0RZgp4Emjs080fbgrOehfI/s0TsP1mNei 2tzOa4OBvH0NyaP669O35rERaJgMMHAX2bCIC02wKWby4YcH8lx//HyTWAqX3ROk NvnRHPID9OMOYn/Zghz+VSG9i4zy9nwxtBb7q7ZQsykuTzO+AkzpfqiK72+Q7gLo hugmL0g5+lrVfdBhlVO2smSQd5roUN4iOSluEvTRMJiBRkZYAE5nePrV6HBpF03M asfkpIqfefTFS4KfyV1M9sj+Y1+L78btSQ8T8lLTLW/nVPORYAN7niWH0dSRJMkY vanizU5JYuS3NDruq2BwWXDR7D62CSQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:00 2025 by rpki-client