$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4b0f18ca-d70d-35b0-b701-1c0829ff3425.roa File: 4b0f18ca-d70d-35b0-b701-1c0829ff3425.roa (raw, json) Hash identifier: JiL0h1dTCXJ832crKwIWvoLzjRKr4BDN8+lZ0fON1PI= Subject key identifier: 1C:B6:7D:FC:BB:FF:1C:E1:E4:0F:57:7A:35:A8:D7:61:C1:2C:33:43 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B6631EE6A8D12F82D8C0F4780 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4b0f18ca-d70d-35b0-b701-1c0829ff3425.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 14618 IP address blocks: 130.137.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:ee:6a:8d:12:f8:2d:8c:0f:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=71588a43-fefe-4339-a05e-a4e272377bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:8d:c4:ec:da:2a:47:e6:a4:da:8c:42:5e: 68:61:d4:20:96:f0:cc:75:cb:a7:a5:db:49:59:79: 31:1e:a4:b7:a3:c0:7b:44:32:04:59:e4:d2:ec:f1: 24:f9:10:19:53:09:51:8a:ed:e2:d2:c5:39:cf:aa: b8:ba:f7:0d:cb:49:f5:78:35:a6:bf:e5:21:b8:09: aa:8d:50:42:74:47:8e:d2:81:b8:9b:df:4a:6b:04: 24:0d:16:f8:72:8a:df:71:f9:a3:15:89:01:1e:c0: 20:bc:52:b2:fb:ff:b5:60:21:3c:3f:15:84:30:05: 48:f8:a3:9e:42:e3:b0:f4:e5:4b:6a:ef:8a:0a:d6: fc:6e:73:83:17:d0:37:df:56:c5:9f:63:a4:26:21: 08:b5:61:a9:e6:a1:f7:4d:b2:40:dc:e9:5a:46:55: bf:0b:b7:35:cf:3c:af:ca:03:e0:8b:88:e1:bb:91: f3:ed:a6:b5:57:5d:64:b7:4c:a1:01:48:f6:3b:60: da:15:97:3c:50:08:a2:b8:a5:79:6c:fd:f3:3b:47: 15:35:3e:c6:ea:2b:d7:d1:85:3e:27:79:cc:e4:ae: 60:ed:56:0f:89:ae:41:11:5f:75:db:c0:f5:2d:52: a8:01:ae:23:60:03:ad:88:79:b1:95:5d:88:5c:7d: 5f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B6:7D:FC:BB:FF:1C:E1:E4:0F:57:7A:35:A8:D7:61:C1:2C:33:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4b0f18ca-d70d-35b0-b701-1c0829ff3425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:54:b1:0b:2a:c4:3e:0e:80:6a:d4:a7:ae:ae:55:6d:73:e3: 37:5b:1e:e2:c1:0d:39:80:a6:59:70:bf:bf:30:34:56:89:61: ef:84:eb:72:6f:ae:46:a3:12:a8:6f:bd:0d:0a:01:3e:50:11: fa:c2:29:f1:11:0d:1d:fd:52:cb:83:77:30:29:56:0a:aa:01: e1:b5:a7:6b:48:aa:a3:fe:d0:fb:d5:84:25:ee:1a:8a:56:f0: 1d:83:9e:20:3a:07:7f:8e:8e:ae:88:d1:f3:5a:44:17:a5:98: 32:37:f9:13:43:f4:ec:63:ba:aa:4b:b9:aa:3a:a0:1c:b0:d1: 09:4b:27:84:d8:96:7a:fb:a4:3f:ae:b0:5e:8d:66:d1:04:91: 46:0a:d3:29:30:94:d2:f2:88:b7:15:c0:cb:4e:76:11:1d:23: 44:c5:b9:4a:af:b5:4c:1b:36:63:15:e1:06:52:57:68:51:6e: 73:8b:65:0e:39:b5:2f:76:11:c7:b2:94:05:72:f0:00:4f:74: 00:57:f3:c2:cd:a8:6b:ba:0a:ab:51:e6:d8:9c:ff:25:ee:f4: 01:14:dd:b7:ae:cb:b3:fa:23:59:54:7e:64:02:b0:43:17:04: 14:0b:c7:f5:6f:a5:b3:6b:bc:20:59:d2:e1:9d:72:19:16:50: cb:c4:a6:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMe5qjRL4LYwPR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk NzE1ODhhNDMtZmVmZS00MzM5LWEwNWUtYTRlMjcyMzc3YmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8KNxOzaKkfmpNqMQl5oYdQglvDMdcunpdtJ WXkxHqS3o8B7RDIEWeTS7PEk+RAZUwlRiu3i0sU5z6q4uvcNy0n1eDWmv+UhuAmq jVBCdEeO0oG4m99KawQkDRb4corfcfmjFYkBHsAgvFKy+/+1YCE8PxWEMAVI+KOe QuOw9OVLau+KCtb8bnODF9A331bFn2OkJiEItWGp5qH3TbJA3OlaRlW/C7c1zzyv ygPgi4jhu5Hz7aa1V11kt0yhAUj2O2DaFZc8UAiiuKV5bP3zO0cVNT7G6ivX0YU+ J3nM5K5g7VYPia5BEV9128D1LVKoAa4jYAOtiHmxlV2IXH1fqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBy2ffy7/xzh5A9XejWo12HBLDNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNGIwZjE4Y2EtZDcwZC0z NWIwLWI3MDEtMWMwODI5ZmYzNDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVUsQsqxD4OgGrUp66uVW1z4zdbHuLBDTmApllwv78wNFaJYe+E63Jv rkajEqhvvQ0KAT5QEfrCKfERDR39UsuDdzApVgqqAeG1p2tIqqP+0PvVhCXuGopW 8B2DniA6B3+Ojq6I0fNaRBelmDI3+RND9OxjuqpLuao6oByw0QlLJ4TYlnr7pD+u sF6NZtEEkUYK0ykwlNLyiLcVwMtOdhEdI0TFuUqvtUwbNmMV4QZSV2hRbnOLZQ45 tS92EceylAVy8ABPdABX88LNqGu6CqtR5tic/yXu9AEU3beuy7P6I1lUfmQCsEMX BBQLx/VvpbNrvCBZ0uGdchkWUMvEpr8= -----END CERTIFICATE-----Generated at Fri Oct 17 04:40:11 2025 by rpki-client