$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa File: 3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa (raw, json) Hash identifier: rirkzSy16fE83FBcYreHOusQJ3LtLBw+ebAz/SDCl9I= Subject key identifier: 7A:E2:60:F5:87:FE:EB:40:28:09:41:62:40:29:BD:F3:CF:10:DE:E3 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B891760D0198EAC0DEAA18C00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 130.137.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:60:d0:19:8e:ac:0d:ea:a1:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=4bcadd7d-2f17-4daa-b241-02e8450b569e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d3:27:5e:01:d9:d4:36:93:da:ad:40:76:92: 4e:6c:a8:cd:61:7f:d0:69:91:34:66:e8:70:7e:9e: a3:40:ef:17:8d:0c:3d:cb:bb:be:e3:44:40:dc:b1: c2:23:7a:f8:ef:81:83:59:88:6b:c6:18:4d:4e:2b: f4:1c:f9:ac:90:2a:c6:a9:63:57:09:e8:27:73:41: 1a:f8:35:f1:8e:62:c5:8c:fb:73:be:a6:74:0e:3e: 52:ba:fa:7f:c7:6f:28:4e:ee:e2:a9:ed:7b:96:43: 1e:24:c3:10:71:6f:5f:06:32:65:4a:f9:f4:1f:b9: 12:b3:52:9f:44:7a:92:50:09:1b:4d:55:a2:58:be: 70:46:6e:35:8b:66:87:71:a2:b7:ed:e5:c2:f8:97: 52:8d:8f:68:49:cd:52:54:60:cb:4c:77:19:86:f6: 7f:13:49:49:a7:03:d6:f0:79:1b:4a:c4:a2:4c:6b: 6f:4d:ce:a2:b8:6f:3a:68:33:ee:e7:ca:7e:d5:18: 4b:88:03:ec:e6:df:b4:57:13:77:60:c8:6a:10:c5: a2:76:0c:87:02:c0:99:bd:c4:cc:25:ec:97:d8:4f: f5:2f:10:6b:79:c3:ff:07:1d:4a:c0:96:4e:85:d3: 75:57:0b:ff:e2:4e:5b:ac:ab:92:ea:2c:7d:ad:b7: 64:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E2:60:F5:87:FE:EB:40:28:09:41:62:40:29:BD:F3:CF:10:DE:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e7:a3:aa:ae:00:5a:b4:32:69:b2:41:a2:c8:7d:dd:02:97: ec:ae:28:ea:26:28:e3:9e:bc:87:cc:26:e7:d3:cc:e3:57:55: 2f:79:19:27:d8:06:82:3c:3a:35:17:0d:e2:fa:ac:3c:96:02: 62:90:25:72:62:e3:39:4e:6b:89:b4:08:d4:e4:df:b9:64:89: 66:be:ff:66:5b:f7:2f:86:7e:da:24:53:aa:1a:30:34:d2:da: 87:14:89:42:e4:cd:57:fd:16:72:db:12:13:62:1a:fd:09:c2: d2:a8:bb:7b:58:c3:5b:1a:77:8c:40:22:b7:14:83:43:59:ac: f8:55:b3:9a:dd:42:ea:4b:bb:b7:65:b8:e5:ea:bf:85:e3:14: d5:75:43:68:30:d0:22:1a:70:35:51:eb:e2:d5:7a:48:26:7b: 39:38:5d:fd:fb:92:85:32:0a:ed:11:88:c2:3c:21:22:fd:45: ec:36:0d:54:05:ac:3a:06:bc:c0:ca:f8:18:7e:8e:70:75:90: b2:7a:c0:bf:ee:71:62:5b:11:9d:64:96:e1:5d:97:e0:f7:e7: ad:47:ec:3e:8b:3e:36:33:30:64:45:ac:bf:8c:b6:aa:ff:bc: 0f:42:91:7f:9e:1f:e4:f2:e3:b8:ea:84:13:a1:23:ae:0c:5e: df:e5:90:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2DQGY6sDeqhjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NGJjYWRkN2QtMmYxNy00ZGFhLWIyNDEtMDJlODQ1MGI1NjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+dMnXgHZ1DaT2q1AdpJObKjNYX/QaZE0Zuhw fp6jQO8XjQw9y7u+40RA3LHCI3r474GDWYhrxhhNTiv0HPmskCrGqWNXCegnc0Ea +DXxjmLFjPtzvqZ0Dj5Suvp/x28oTu7iqe17lkMeJMMQcW9fBjJlSvn0H7kSs1Kf RHqSUAkbTVWiWL5wRm41i2aHcaK37eXC+JdSjY9oSc1SVGDLTHcZhvZ/E0lJpwPW 8HkbSsSiTGtvTc6iuG86aDPu58p+1RhLiAPs5t+0VxN3YMhqEMWidgyHAsCZvcTM JeyX2E/1LxBrecP/Bx1KwJZOhdN1Vwv/4k5brKuS6ix9rbdkUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHriYPWH/utAKAlBYkApvfPPEN7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvM2I4ZTIwOTctZjA1ZS0z N2JhLThmOTEtZGQ3NWYyMmNlMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrno6quAFq0MmmyQaLIfd0Cl+yuKOomKOOevIfMJufTzONXVS95GSfY BoI8OjUXDeL6rDyWAmKQJXJi4zlOa4m0CNTk37lkiWa+/2Zb9y+GftokU6oaMDTS 2ocUiULkzVf9FnLbEhNiGv0JwtKou3tYw1sad4xAIrcUg0NZrPhVs5rdQupLu7dl uOXqv4XjFNV1Q2gw0CIacDVR6+LVekgmezk4Xf37koUyCu0RiMI8ISL9Rew2DVQF rDoGvMDK+Bh+jnB1kLJ6wL/ucWJbEZ1kluFdl+D3561H7D6LPjYzMGRFrL+Mtqr/ vA9CkX+eH+Ty47jqhBOhI64MXt/lkAo= -----END CERTIFICATE-----Generated at Fri Oct 17 04:40:14 2025 by rpki-client