$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa File: 443a0997-c399-3ce3-a707-a3b7e8ec5700.roa (raw, json) Hash identifier: xal1yc9ntZK0ENuxuPi81dnlJ0G4dVLulUYwktCcyfA= Subject key identifier: 4B:B5:54:06:C5:3F:BB:DB:CE:35:2B:1A:43:DE:97:9E:47:45:E2:EB Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B6631F50107FA55261C971680 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 16509 IP address blocks: 130.137.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f5:01:07:fa:55:26:1c:97:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=f590ad0b-e5f7-4fe2-986f-dd8a836bd690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:67:06:25:ca:be:26:4d:3e:af:e8:6c:09: 97:6b:cb:86:0e:91:78:e6:25:97:fb:22:51:3e:9e: ee:c2:e4:20:f6:44:c2:48:fa:5a:e0:6c:d5:13:13: 60:54:58:04:01:61:90:ab:a4:4c:f7:9f:4c:1d:87: ce:3e:95:f0:a5:17:b9:cd:34:db:53:ba:a2:18:c6: d6:df:0c:df:14:dc:15:ff:fd:35:fb:0e:ca:2b:0d: 18:b6:66:1d:3f:3d:9a:77:2d:d2:71:36:b4:00:50: 4e:51:1f:9a:70:47:8d:19:64:2a:95:aa:6d:f0:75: b6:68:26:42:a8:36:05:1b:49:8a:65:79:11:18:97: e4:fc:42:23:28:e8:00:dd:78:1f:cc:0b:ae:18:99: ee:21:b1:03:f6:66:fd:8f:93:4b:c3:14:15:07:36: 81:09:d2:ac:a1:c0:bd:fa:27:91:88:ba:75:b4:86: 4d:4b:ea:63:05:02:d2:ea:06:f1:d8:12:41:bb:35: 6a:11:98:56:3e:05:37:88:d7:fd:e1:5b:f0:69:f9: de:38:b2:0c:8c:20:9b:26:02:b0:1e:d6:f2:62:13: cf:e0:d3:62:d9:8a:bb:ca:9a:75:0b:8b:2a:62:ab: e3:ee:a5:e1:c4:18:f5:35:dc:7e:d5:eb:b2:a3:c4: ce:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B5:54:06:C5:3F:BB:DB:CE:35:2B:1A:43:DE:97:9E:47:45:E2:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:bf:69:6a:fe:59:a9:9b:94:a5:26:d1:60:19:b8:0d:3e:e2: 39:8c:9c:20:b7:36:1a:cb:b1:e7:22:ad:7e:cb:d8:ee:c1:c1: 09:84:90:e9:ad:63:6b:b6:41:96:a1:d7:50:84:dd:3a:40:12: b1:4b:2c:33:46:df:71:a4:ba:d5:36:01:05:a7:40:9e:1c:53: 80:a7:a7:f6:7e:93:96:da:b4:90:8f:3a:6e:44:f0:8c:ae:de: b8:5e:45:43:e9:13:08:83:1d:5b:ca:0a:5d:8b:b2:62:35:d4: 8b:b3:ea:dd:65:9d:5a:99:44:91:0b:fc:86:61:ad:27:cf:28: 68:5c:60:ad:b8:61:9a:76:11:af:b5:e4:39:c3:29:fb:34:c3: 84:b8:9f:c7:23:4d:89:7a:82:49:61:cb:39:30:7a:de:e4:59: 17:5b:fd:1d:fe:ad:3c:ec:ca:28:50:66:ab:cc:af:46:4d:77: 9c:eb:e2:7c:ee:4a:f9:d7:d2:f3:8b:ec:82:75:e6:d3:31:7f: 46:75:f6:5f:2b:00:de:dc:92:e4:ea:ee:8e:98:dc:04:18:42: c0:5b:6a:2a:6c:e0:cd:55:90:f6:13:c6:b9:c6:bf:5f:c0:de: 24:fc:9a:ff:83:c8:f4:bb:59:2a:14:cc:bd:1d:25:b3:9d:54: ea:49:17:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfUBB/pVJhyXFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZjU5MGFkMGItZTVmNy00ZmUyLTk4NmYtZGQ4YTgzNmJkNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjVnBiXKviZNPq/obAmXa8uGDpF45iWX+yJR Pp7uwuQg9kTCSPpa4GzVExNgVFgEAWGQq6RM959MHYfOPpXwpRe5zTTbU7qiGMbW 3wzfFNwV//01+w7KKw0YtmYdPz2ady3ScTa0AFBOUR+acEeNGWQqlapt8HW2aCZC qDYFG0mKZXkRGJfk/EIjKOgA3XgfzAuuGJnuIbED9mb9j5NLwxQVBzaBCdKsocC9 +ieRiLp1tIZNS+pjBQLS6gbx2BJBuzVqEZhWPgU3iNf94VvwafneOLIMjCCbJgKw HtbyYhPP4NNi2Yq7ypp1C4sqYqvj7qXhxBj1Ndx+1euyo8TOwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu1VAbFP7vbzjUrGkPel55HReLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDQzYTA5OTctYzM5OS0z Y2UzLWE3MDctYTNiN2U4ZWM1NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2/aWr+WamblKUm0WAZuA0+4jmMnCC3NhrLsecirX7L2O7BwQmEkOmt Y2u2QZah11CE3TpAErFLLDNG33GkutU2AQWnQJ4cU4Cnp/Z+k5batJCPOm5E8Iyu 3rheRUPpEwiDHVvKCl2LsmI11Iuz6t1lnVqZRJEL/IZhrSfPKGhcYK24YZp2Ea+1 5DnDKfs0w4S4n8cjTYl6gklhyzkwet7kWRdb/R3+rTzsyihQZqvMr0ZNd5zr4nzu SvnX0vOL7IJ15tMxf0Z19l8rAN7ckuTq7o6Y3AQYQsBbaips4M1VkPYTxrnGv1/A 3iT8mv+DyPS7WSoUzL0dJbOdVOpJF+g= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:49 2025 by rpki-client