$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/41cc1194-c4e6-3da8-baa0-1e02f85245ea.roa File: 41cc1194-c4e6-3da8-baa0-1e02f85245ea.roa (raw, json) Hash identifier: gyvroXms3CVZOGrVn/vFDsKHF1DiHcrBkAyfblFpFmA= Subject key identifier: 99:6B:D2:18:3E:73:52:1C:73:31:66:62:47:AF:BC:6B:30:C9:56:8C Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B8BE23089BE01BF4AA27A7F60 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/41cc1194-c4e6-3da8-baa0-1e02f85245ea.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 130.137.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:30:89:be:01:bf:4a:a2:7a:7f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=b9f16ac8-1be3-4db0-8498-679b7bae00b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:4d:47:e3:4e:96:33:5e:98:7b:b6:b8:a8: 4a:82:c2:e7:d0:db:2e:1b:ef:24:3d:1e:25:3b:e8: a9:57:f9:5b:b5:f9:09:a1:d5:48:80:64:52:4f:62: 86:c1:1a:db:74:cc:11:43:05:ca:7c:2f:be:04:4b: fe:fe:06:d3:f0:23:ec:25:c7:5f:1a:fd:b6:d2:f7: 06:49:9d:f8:32:8e:d3:b1:15:06:95:74:ce:6d:12: de:b1:d9:6d:05:7c:38:a2:af:48:af:4e:48:c9:62: c1:29:e7:a2:f8:04:4b:3f:69:5e:77:2a:97:ae:33: 9a:ad:55:b7:27:e5:75:78:1d:0c:eb:7f:ab:ce:25: 34:5c:fd:b4:c7:ba:36:1d:ad:95:3f:61:c3:0c:e2: 1c:28:c1:08:19:39:df:7f:63:e2:aa:18:bd:c7:c5: 40:90:00:d5:65:83:d3:1d:52:3c:66:5a:9b:d0:af: c9:53:c5:98:5f:33:6c:37:fb:92:2d:bc:a4:88:91: 1f:e7:cc:e0:0d:e2:be:5d:78:c5:3c:34:4a:c1:3e: 68:c3:aa:66:c4:2d:6a:63:fd:9f:ba:61:e0:c9:9e: 09:1c:15:1f:39:83:f8:47:f3:ce:3f:8e:3d:37:8d: 27:f8:64:46:d1:eb:09:1d:e1:4c:49:b8:8b:0f:e3: 40:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6B:D2:18:3E:73:52:1C:73:31:66:62:47:AF:BC:6B:30:C9:56:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/41cc1194-c4e6-3da8-baa0-1e02f85245ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:20:77:cc:0d:ac:dc:8f:7d:ed:a8:6e:ef:52:cf:da:b4:ed: b3:b0:14:ee:fd:32:65:ce:cc:4f:e9:58:6b:ba:13:2f:c7:fa: 91:54:28:b2:13:43:f0:cd:fe:04:c9:f8:06:5c:b7:e5:72:5b: 0c:8e:4f:21:a3:12:a7:09:1c:32:4e:5f:c8:24:fb:13:a4:2e: 09:50:95:28:eb:2f:f3:41:35:9c:0a:f4:c3:dc:52:83:7f:9c: c3:1a:3e:14:1f:c5:42:76:90:30:77:60:ac:ab:79:85:dc:59: 46:55:c2:f3:ff:4e:89:db:9f:bb:8a:ad:dd:77:06:22:6a:48: bb:26:b1:a8:14:8b:55:b1:bb:28:fd:5d:11:e7:38:45:86:e2: a9:ef:36:39:77:6e:93:37:d7:e6:1e:16:99:89:59:1b:86:ec: 4a:7b:4f:29:58:60:88:6e:19:a0:25:b3:c5:93:05:7d:55:d6: f3:c2:bb:f9:3d:a3:b6:8b:13:81:6a:16:ea:92:ac:7f:2f:07: 34:cb:7b:ad:6f:02:c9:8f:31:05:c4:f5:8f:fe:21:ea:7b:57: 14:9d:e6:ae:68:96:31:d0:76:9c:95:cc:61:94:d0:d9:ea:3f: 66:79:14:96:ff:cb:d4:35:7e:92:74:64:44:47:08:ac:6a:a4: 64:de:fd:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jCJvgG/SqJ6f2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YjlmMTZhYzgtMWJlMy00ZGIwLTg0OTgtNjc5YjdiYWUwMGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNpNR+NOljNemHu2uKhKgsLn0NsuG+8kPR4l O+ipV/lbtfkJodVIgGRST2KGwRrbdMwRQwXKfC++BEv+/gbT8CPsJcdfGv220vcG SZ34Mo7TsRUGlXTObRLesdltBXw4oq9Ir05IyWLBKeei+ARLP2ledyqXrjOarVW3 J+V1eB0M63+rziU0XP20x7o2Ha2VP2HDDOIcKMEIGTnff2Piqhi9x8VAkADVZYPT HVI8Zlqb0K/JU8WYXzNsN/uSLbykiJEf58zgDeK+XXjFPDRKwT5ow6pmxC1qY/2f umHgyZ4JHBUfOYP4R/POP449N40n+GRG0esJHeFMSbiLD+NAmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlr0hg+c1IcczFmYkevvGswyVaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDFjYzExOTQtYzRlNi0z ZGE4LWJhYTAtMWUwMmY4NTI0NWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHggd8wNrNyPfe2obu9Sz9q07bOwFO79MmXOzE/pWGu6Ey/H+pFUKLIT Q/DN/gTJ+AZct+VyWwyOTyGjEqcJHDJOX8gk+xOkLglQlSjrL/NBNZwK9MPcUoN/ nMMaPhQfxUJ2kDB3YKyreYXcWUZVwvP/Tonbn7uKrd13BiJqSLsmsagUi1Wxuyj9 XRHnOEWG4qnvNjl3bpM31+YeFpmJWRuG7Ep7TylYYIhuGaAls8WTBX1V1vPCu/k9 o7aLE4FqFuqSrH8vBzTLe61vAsmPMQXE9Y/+Iep7VxSd5q5oljHQdpyVzGGU0Nnq P2Z5FJb/y9Q1fpJ0ZERHCKxqpGTe/X8= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:47 2025 by rpki-client