$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/234703b2-4a86-3247-9212-819e565d7658.roa File: 234703b2-4a86-3247-9212-819e565d7658.roa (raw, json) Hash identifier: 6T3/mNghV3F7epwY88To3ovQyLiS5c0v/97FwvtfhPE= Subject key identifier: 3E:D8:EA:F6:AA:CC:05:EB:93:D1:92:E3:8E:AF:A8:99:45:1C:ED:C2 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BD3305C02798F5A7E67D09980 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/234703b2-4a86-3247-9212-819e565d7658.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 8987 IP address blocks: 130.137.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:5c:02:79:8f:5a:7e:67:d0:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=48e46287-b2ce-457e-800f-a85992ab92f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:65:4b:2c:6e:0c:22:7c:57:3f:65:4a:0b:4c: ec:65:35:fb:d0:c7:36:ec:3b:70:bc:6f:26:48:6d: 60:bc:73:a4:68:73:0d:c0:20:56:6f:55:1e:d2:7e: 37:a5:a7:90:41:e8:7e:61:1b:cf:50:e0:60:ca:74: 2e:81:d7:2e:57:d5:1b:6e:48:d3:f1:a9:ea:8b:7d: 30:a7:3e:53:ab:aa:d2:2c:32:41:74:b8:23:66:58: 88:82:b6:7e:97:02:83:1f:06:b3:ae:79:5d:f7:ca: bd:e0:1e:18:d6:69:c0:38:dc:8d:5d:73:dd:51:ea: 90:9f:ae:f5:82:25:e8:80:2e:54:fb:98:1e:63:ec: 3f:ad:89:0f:f6:8d:51:7d:0a:d6:ad:56:c5:bc:1a: 76:d7:d4:bb:3e:b0:3e:8e:fa:6a:3c:d9:c2:cd:0f: 0e:c6:16:5f:a5:04:95:8f:b7:f4:d3:f3:1d:a8:80: 88:98:94:f6:7d:d7:3f:2d:59:59:c9:a6:08:1d:11: af:1d:02:83:dc:88:a3:6d:76:93:75:d1:0b:d7:a4: 4f:7f:3b:3d:53:bc:17:08:fe:ca:50:60:bb:21:73: 6b:d6:85:5f:2d:1f:5f:8f:91:f7:f1:02:42:6c:6d: f2:fc:ce:31:ea:ed:6e:9a:7b:ed:ce:89:e6:51:84: 60:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D8:EA:F6:AA:CC:05:EB:93:D1:92:E3:8E:AF:A8:99:45:1C:ED:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/234703b2-4a86-3247-9212-819e565d7658.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b1:71:67:8e:63:dd:c2:a9:46:3e:bb:36:52:11:0e:cc:51: 0a:d9:b4:a1:60:56:74:2b:60:31:84:98:97:29:1d:1d:21:81: 65:3d:2c:6d:93:18:33:0c:4b:92:ee:1f:d6:0f:c1:0f:73:57: 6a:a8:3a:e3:dc:74:9f:54:8f:95:7f:6d:c0:fd:39:d2:9e:24: f4:78:4a:a6:3d:e9:99:1c:7a:19:0d:6f:06:a0:c2:9f:d0:11: 66:71:2e:89:6f:1e:86:cb:76:a4:50:6b:97:f7:df:13:3a:5e: 00:99:80:28:e2:f2:16:8c:fe:9f:19:50:39:d3:c2:7e:a8:13: c0:c3:35:b1:2d:a0:15:8e:c0:f1:f7:6a:8e:06:f2:bc:94:c6: 64:dd:bf:09:ba:16:56:89:b3:ee:27:57:c1:1d:22:35:0c:9b: c7:f6:fc:83:e9:95:46:e8:d1:1f:2e:08:ec:89:6a:15:ba:06: ab:07:97:7f:f0:9c:a3:eb:e8:08:3e:2c:08:cd:32:8f:e9:72: 06:76:71:aa:3c:bd:64:b9:71:c0:4d:38:be:b6:37:b3:42:34: 19:3b:a4:2c:05:dc:6f:58:a7:aa:03:23:17:0b:03:34:32:70: c3:a2:72:b0:fc:63:88:48:5c:16:bd:80:08:83:72:d4:50:f6: e7:18:61:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMFwCeY9afmfQmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk NDhlNDYyODctYjJjZS00NTdlLTgwMGYtYTg1OTkyYWI5MmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGVLLG4MInxXP2VKC0zsZTX70Mc27DtwvG8m SG1gvHOkaHMNwCBWb1Ue0n43paeQQeh+YRvPUOBgynQugdcuV9UbbkjT8anqi30w pz5Tq6rSLDJBdLgjZliIgrZ+lwKDHwazrnld98q94B4Y1mnAONyNXXPdUeqQn671 giXogC5U+5geY+w/rYkP9o1RfQrWrVbFvBp219S7PrA+jvpqPNnCzQ8OxhZfpQSV j7f00/MdqICImJT2fdc/LVlZyaYIHRGvHQKD3IijbXaTddEL16RPfzs9U7wXCP7K UGC7IXNr1oVfLR9fj5H38QJCbG3y/M4x6u1umnvtzonmUYRghwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7Y6vaqzAXrk9GS446vqJlFHO3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMjM0NzAzYjItNGE4Ni0z MjQ3LTkyMTItODE5ZTU2NWQ3NjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCxcWeOY93CqUY+uzZSEQ7MUQrZtKFgVnQrYDGEmJcpHR0hgWU9LG2T GDMMS5LuH9YPwQ9zV2qoOuPcdJ9Uj5V/bcD9OdKeJPR4SqY96ZkcehkNbwagwp/Q EWZxLolvHobLdqRQa5f33xM6XgCZgCji8haM/p8ZUDnTwn6oE8DDNbEtoBWOwPH3 ao4G8ryUxmTdvwm6FlaJs+4nV8EdIjUMm8f2/IPplUbo0R8uCOyJahW6BqsHl3/w nKPr6Ag+LAjNMo/pcgZ2cao8vWS5ccBNOL62N7NCNBk7pCwF3G9Yp6oDIxcLAzQy cMOicrD8Y4hIXBa9gAiDctRQ9ucYYdo= -----END CERTIFICATE-----Generated at Sun Nov 16 23:44:11 2025 by rpki-client