$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/17e0fa72-751f-33d8-82cf-6633da701fb0.roa File: 17e0fa72-751f-33d8-82cf-6633da701fb0.roa (raw, json) Hash identifier: kV8i+edWlOQKllQw//xM6ylDJwrxdnr2mVpp271/h3s= Subject key identifier: 0E:A8:66:33:35:AB:5C:8F:EA:77:74:9E:2C:9F:91:9E:2D:92:ED:A7 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B6631F526F7B58E6BA4FC7E80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/17e0fa72-751f-33d8-82cf-6633da701fb0.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 16509 IP address blocks: 130.137.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f5:26:f7:b5:8e:6b:a4:fc:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=1121b5ce-f433-4407-8b39-6f001268bc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:d0:43:45:95:81:39:d1:59:cc:d6:53:73: 18:c2:f7:49:d3:55:d9:1a:c1:27:69:d4:d2:81:48: 0e:e4:48:dc:af:eb:0d:e6:33:a3:82:99:34:fb:66: d8:3f:8e:c4:1a:e2:40:3b:7f:6b:ec:b1:bb:5f:7f: 2f:61:a4:1b:b1:66:34:59:2f:1e:94:23:0e:4e:ec: bc:d1:be:c4:b6:5f:a1:1a:1c:db:ed:00:e9:4f:a5: b1:a3:72:0c:60:c8:02:bc:8b:27:ac:5d:86:d2:1b: 75:3f:cf:04:c9:10:65:5f:86:b9:92:23:89:e3:a1: 17:6c:bb:46:27:10:23:98:a6:e3:80:2f:21:17:42: 0a:81:75:0c:5f:f9:85:6d:c5:d4:34:40:1b:d5:0c: 57:8c:ff:cc:f1:f4:d2:02:9d:63:e2:bb:b4:4c:fe: 2f:11:f7:47:f1:91:5e:70:56:a3:2e:ef:4f:e3:4f: 05:96:41:02:73:42:c0:ac:a4:55:7a:bd:bd:82:ab: c1:0e:6d:46:04:f5:63:3a:6c:a8:c2:d4:5e:ef:73: 39:a8:98:ec:51:81:49:22:e8:f0:0b:75:eb:1a:7b: 74:2e:a1:c1:09:10:1e:69:be:38:c1:fc:9d:2d:e4: 48:d8:d7:37:9a:90:c1:d3:06:91:dd:af:f9:00:75: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A8:66:33:35:AB:5C:8F:EA:77:74:9E:2C:9F:91:9E:2D:92:ED:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/17e0fa72-751f-33d8-82cf-6633da701fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:08:0d:57:9e:6d:cc:5a:53:f1:5d:15:37:66:65:aa:cb:cd: 7a:d5:4f:f7:e3:d2:df:69:aa:e4:39:e1:a4:7e:62:81:4f:51: 40:fe:9b:89:22:45:60:0f:a7:72:42:14:b6:59:bf:2d:2f:48: e0:84:9b:ce:e6:12:d3:9b:40:f5:41:b2:45:da:58:64:7d:20: ef:74:8c:3a:aa:b9:97:ea:65:10:0a:81:19:9b:bc:73:d4:2c: 42:21:de:63:eb:b2:d5:bc:04:94:f2:9f:53:44:bb:92:47:95: 7e:49:21:25:27:45:a1:52:f0:9e:b2:a0:89:70:c3:2e:55:01: 90:c3:85:60:04:72:23:40:c0:8b:74:b8:55:b6:9a:d9:26:04: 27:da:5b:be:96:37:c3:d5:8a:67:14:8b:0f:4d:23:6a:e8:53: ac:0a:45:f2:c2:e8:e1:36:0e:bb:ac:40:85:fb:5d:ff:e5:9a: 06:0b:4d:6a:48:50:88:73:15:5a:df:01:96:21:b9:65:ae:18: 6e:26:00:9d:b1:6f:2a:be:20:00:46:84:73:c2:e0:9c:37:23: 9d:ca:09:3a:1a:7d:d9:f2:10:a4:49:c6:bf:35:bf:c6:22:50: 0c:1b:41:12:7d:56:dd:0b:d2:a5:ef:a6:ad:22:d7:21:07:33: bd:4b:d9:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfUm97WOa6T8foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MTEyMWI1Y2UtZjQzMy00NDA3LThiMzktNmYwMDEyNjhiYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAzQQ0WVgTnRWczWU3MYwvdJ01XZGsEnadTS gUgO5Ejcr+sN5jOjgpk0+2bYP47EGuJAO39r7LG7X38vYaQbsWY0WS8elCMOTuy8 0b7Etl+hGhzb7QDpT6Wxo3IMYMgCvIsnrF2G0ht1P88EyRBlX4a5kiOJ46EXbLtG JxAjmKbjgC8hF0IKgXUMX/mFbcXUNEAb1QxXjP/M8fTSAp1j4ru0TP4vEfdH8ZFe cFajLu9P408FlkECc0LArKRVer29gqvBDm1GBPVjOmyowtRe73M5qJjsUYFJIujw C3XrGnt0LqHBCRAeab44wfydLeRI2Nc3mpDB0waR3a/5AHUr1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6oZjM1q1yP6nd0niyfkZ4tku2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMTdlMGZhNzItNzUxZi0z M2Q4LTgyY2YtNjYzM2RhNzAxZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcIDVeebcxaU/FdFTdmZarLzXrVT/fj0t9pquQ54aR+YoFPUUD+m4ki RWAPp3JCFLZZvy0vSOCEm87mEtObQPVBskXaWGR9IO90jDqquZfqZRAKgRmbvHPU LEIh3mPrstW8BJTyn1NEu5JHlX5JISUnRaFS8J6yoIlwwy5VAZDDhWAEciNAwIt0 uFW2mtkmBCfaW76WN8PVimcUiw9NI2roU6wKRfLC6OE2DrusQIX7Xf/lmgYLTWpI UIhzFVrfAZYhuWWuGG4mAJ2xbyq+IABGhHPC4Jw3I53KCToafdnyEKRJxr81v8Yi UAwbQRJ9Vt0L0qXvpq0i1yEHM71L2X8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:01 2025 by rpki-client