$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1c7fc2b7-8ea9-3f74-bfa0-42fcca4aa7a5.roa File: 1c7fc2b7-8ea9-3f74-bfa0-42fcca4aa7a5.roa (raw, json) Hash identifier: m9SDei/baqwSYtgq5T0F2k+WvViz8puiYFXFS7kPY6Y= Subject key identifier: D9:5E:CC:79:F3:FC:DE:F7:8A:47:20:22:50:13:41:6B:F4:22:3B:B4 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B89176C2BED6B8E95E98F1BC0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1c7fc2b7-8ea9-3f74-bfa0-42fcca4aa7a5.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 130.137.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:6c:2b:ed:6b:8e:95:e9:8f:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=8af2ba42-9f10-4cc2-8611-f6d9df678ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:e2:49:dc:33:22:74:ac:19:0b:10:72:6c: 9f:af:19:61:5a:c9:2e:7b:ed:ed:de:f3:20:2a:62: e0:a3:44:81:f9:bb:ac:83:31:61:43:4e:09:56:6d: fc:3d:38:69:ed:5b:2f:e5:f3:e3:25:98:f1:7d:41: 6d:60:3f:68:be:3a:6a:56:ac:09:21:fd:ba:74:a7: 57:1e:4b:c5:21:08:9a:c6:80:6d:ae:7b:01:b5:bc: 6e:05:0b:60:5f:a3:c7:ed:82:d2:9e:3c:6c:9b:1a: b0:75:b1:3e:82:d0:3b:b8:e9:46:62:b7:ee:d8:ec: 63:49:99:39:6a:96:8a:83:1e:8a:e4:50:7f:7e:5d: fc:9b:57:8a:01:10:7b:e6:02:1d:70:82:08:ff:b2: 20:9a:c6:d5:d5:3b:a8:0f:64:cd:22:29:c2:41:c2: 11:fe:65:e5:9b:cb:4f:3f:d4:b3:80:66:a3:aa:0c: 8a:1a:30:7b:3c:8a:5b:b3:ea:41:30:b1:a8:33:f6: c1:4b:37:89:6b:32:1a:c0:95:dc:b2:67:8e:00:3f: a1:ab:8e:9a:5a:85:e7:7a:58:86:b6:f9:3e:ad:c3: c3:61:c8:84:8a:4b:70:42:0d:4b:33:cc:86:06:23: 4d:15:3a:6e:d9:8e:0f:f5:a3:87:25:2c:59:6e:93: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5E:CC:79:F3:FC:DE:F7:8A:47:20:22:50:13:41:6B:F4:22:3B:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1c7fc2b7-8ea9-3f74-bfa0-42fcca4aa7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4e:cc:fc:f4:cc:81:8a:c4:cb:c9:8e:09:c9:de:c8:32:4e: 32:95:9f:ea:91:c5:58:7c:51:2e:48:a7:35:9f:93:ca:17:e3: 02:61:63:b9:51:b1:34:e5:b9:a6:c8:bf:d3:dd:7e:26:91:a5: ed:58:43:bf:a6:70:3e:51:2c:e0:9e:88:73:db:96:8e:79:99: 51:21:a7:26:26:eb:e5:9e:98:d8:7d:e6:94:7b:8d:e3:fe:e7: f7:a9:5a:b2:80:96:41:3b:af:77:48:b8:7e:5b:8e:71:84:90: cd:a8:f6:a4:38:ed:86:e6:73:0d:6c:90:3b:d9:c5:58:c2:e1: 71:f2:b0:e4:5e:85:38:58:2f:1a:68:41:9e:28:9d:58:6c:ab: 7b:91:6f:65:04:a7:66:19:7a:ab:4a:85:eb:d3:bc:3a:1c:33: 24:09:e9:bd:e8:55:e8:99:c0:be:cb:43:f8:bd:73:13:52:57: 99:b4:42:b2:b4:39:b7:ed:3c:54:e3:44:29:da:04:ef:d7:bf: b4:3d:68:82:55:22:02:87:d9:b8:89:23:21:be:69:dd:95:7a: a1:cc:fe:84:fa:b1:97:d6:7d:8e:d6:33:42:01:f2:8f:66:df: e0:bf:86:78:7b:95:53:33:01:2b:31:1a:4d:51:22:7f:6d:b4: 85:a4:1a:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2wr7WuOlemPG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk OGFmMmJhNDItOWYxMC00Y2MyLTg2MTEtZjZkOWRmNjc4YWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8XiSdwzInSsGQsQcmyfrxlhWskue+3t3vMg KmLgo0SB+busgzFhQ04JVm38PThp7Vsv5fPjJZjxfUFtYD9ovjpqVqwJIf26dKdX HkvFIQiaxoBtrnsBtbxuBQtgX6PH7YLSnjxsmxqwdbE+gtA7uOlGYrfu2OxjSZk5 apaKgx6K5FB/fl38m1eKARB75gIdcIII/7IgmsbV1TuoD2TNIinCQcIR/mXlm8tP P9SzgGajqgyKGjB7PIpbs+pBMLGoM/bBSzeJazIawJXcsmeOAD+hq46aWoXneliG tvk+rcPDYciEiktwQg1LM8yGBiNNFTpu2Y4P9aOHJSxZbpO95wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlezHnz/N73ikcgIlATQWv0Iju0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMWM3ZmMyYjctOGVhOS0z Zjc0LWJmYTAtNDJmY2NhNGFhN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJOzPz0zIGKxMvJjgnJ3sgyTjKVn+qRxVh8US5IpzWfk8oX4wJhY7lR sTTluabIv9PdfiaRpe1YQ7+mcD5RLOCeiHPblo55mVEhpyYm6+WemNh95pR7jeP+ 5/epWrKAlkE7r3dIuH5bjnGEkM2o9qQ47Ybmcw1skDvZxVjC4XHysORehThYLxpo QZ4onVhsq3uRb2UEp2YZeqtKhevTvDocMyQJ6b3oVeiZwL7LQ/i9cxNSV5m0QrK0 ObftPFTjRCnaBO/Xv7Q9aIJVIgKH2biJIyG+ad2VeqHM/oT6sZfWfY7WM0IB8o9m 3+C/hnh7lVMzASsxGk1RIn9ttIWkGm4= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:53 2025 by rpki-client