$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/524939f9-2055-3136-af33-79605998de56.roa File: 524939f9-2055-3136-af33-79605998de56.roa (raw, json) Hash identifier: qbOyKxdAA0iUdcOx2K4YbToY/Gp7iF+NuPpfm0u8lRM= Subject key identifier: 3C:9C:0B:06:84:20:AF:10:45:96:1F:CC:59:6A:CC:ED:4D:04:D3:83 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B89176A94CBAD74737280F440 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/524939f9-2055-3136-af33-79605998de56.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 130.137.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:6a:94:cb:ad:74:73:72:80:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=158e2074-bc52-4f13-a482-0dce55d3bb95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9d:bd:39:96:20:94:45:3e:d0:4c:b1:79:39: a2:57:f7:35:dd:4d:93:2a:d4:30:61:1b:da:14:3e: 24:04:17:a6:c9:8e:fb:b5:18:8b:26:c2:31:be:83: 4c:d2:c7:59:09:22:fb:20:61:b7:a1:f8:a5:72:8d: b9:ff:d0:4c:e0:fd:2e:d4:cd:38:4a:40:5a:8f:a9: a7:c5:72:f4:43:9e:11:4b:7c:1b:f3:43:69:38:9d: a4:fb:06:84:f2:a0:8a:03:06:f2:76:d2:1a:4c:68: 7c:b1:80:41:97:b6:0e:21:3e:49:f1:aa:9e:88:0c: 9f:40:f2:8a:9d:99:58:bb:0f:5d:e3:7c:83:c4:3d: ef:30:d8:9d:d6:40:f9:92:7f:85:54:62:ab:f6:bb: 7b:cd:fc:21:a0:5d:da:20:63:74:c9:ce:f8:c1:dd: 46:96:52:bb:e3:f3:98:ca:42:7b:b6:4d:51:25:e4: f3:0a:b6:44:70:0d:bd:58:30:8b:21:79:0d:89:28: 64:0b:cf:29:19:46:88:59:18:7c:c9:61:21:3a:68: 5b:fd:d2:91:51:6e:fb:86:e6:bd:db:95:6a:2a:af: 6d:e6:25:3a:ce:d1:21:42:d2:3d:dd:4a:79:64:2b: 26:c2:bf:77:9c:ce:bc:0c:fe:d7:47:f6:1b:52:9b: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9C:0B:06:84:20:AF:10:45:96:1F:CC:59:6A:CC:ED:4D:04:D3:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/524939f9-2055-3136-af33-79605998de56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:23:29:fa:e6:d3:1e:45:f1:ea:4d:80:ad:ec:ed:77:d1:f2: a0:33:da:e9:bd:a1:6d:c1:8a:95:5c:71:fe:15:9d:96:c6:0b: ab:a3:d5:3e:5e:75:a1:f8:fe:77:44:20:42:c6:19:c0:87:bd: 4e:da:2e:72:56:8a:51:d1:78:77:59:c2:cc:6e:cc:d3:fa:69: a5:14:92:af:73:29:ba:33:63:65:47:ad:9d:dc:fd:6b:eb:b4: c8:3a:00:d2:af:eb:2e:77:b9:65:46:f5:82:14:32:cf:55:e0: d4:22:fe:df:54:f4:7d:da:87:78:34:13:ae:ef:66:be:d3:e1: c8:30:ed:7e:25:d8:7b:fa:71:15:8b:8c:1b:2b:bd:c0:91:31: 3b:09:c5:93:a2:dc:b2:0c:f0:24:4e:74:92:7b:d7:77:3b:7e: 37:63:d6:fc:db:16:2b:91:f4:e6:1b:54:dd:37:fd:46:5e:3b: 4f:db:7c:78:d6:42:df:e7:a6:85:bd:07:2a:d3:b7:d5:5a:09: 18:45:2c:0a:ae:62:e8:37:39:34:64:ec:41:a9:fd:62:0c:d5: d2:ef:11:fe:29:17:aa:a0:f1:d4:e3:62:a9:33:ce:76:fc:77: 57:68:15:8c:61:3b:76:5f:3c:f5:e7:6a:b7:83:3b:1b:e6:36: 65:c4:50:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2qUy610c3KA9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MTU4ZTIwNzQtYmM1Mi00ZjEzLWE0ODItMGRjZTU1ZDNiYjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ29OZYglEU+0EyxeTmiV/c13U2TKtQwYRva FD4kBBemyY77tRiLJsIxvoNM0sdZCSL7IGG3ofilco25/9BM4P0u1M04SkBaj6mn xXL0Q54RS3wb80NpOJ2k+waE8qCKAwbydtIaTGh8sYBBl7YOIT5J8aqeiAyfQPKK nZlYuw9d43yDxD3vMNid1kD5kn+FVGKr9rt7zfwhoF3aIGN0yc74wd1GllK74/OY ykJ7tk1RJeTzCrZEcA29WDCLIXkNiShkC88pGUaIWRh8yWEhOmhb/dKRUW77hua9 25VqKq9t5iU6ztEhQtI93Up5ZCsmwr93nM68DP7XR/YbUpsRhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDycCwaEIK8QRZYfzFlqzO1NBNODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTI0OTM5ZjktMjA1NS0z MTM2LWFmMzMtNzk2MDU5OThkZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgollMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMjKfrm0x5F8epNgK3s7XfR8qAz2um9oW3BipVccf4VnZbGC6uj1T5e daH4/ndEIELGGcCHvU7aLnJWilHReHdZwsxuzNP6aaUUkq9zKbozY2VHrZ3c/Wvr tMg6ANKv6y53uWVG9YIUMs9V4NQi/t9U9H3ah3g0E67vZr7T4cgw7X4l2Hv6cRWL jBsrvcCRMTsJxZOi3LIM8CROdJJ713c7fjdj1vzbFiuR9OYbVN03/UZeO0/bfHjW Qt/npoW9ByrTt9VaCRhFLAquYug3OTRk7EGp/WIM1dLvEf4pF6qg8dTjYqkzznb8 d1doFYxhO3ZfPPXnareDOxvmNmXEUJM= -----END CERTIFICATE-----Generated at Fri Oct 17 04:43:50 2025 by rpki-client