$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/531d8398-b955-3ca2-9032-3d7609e92d88.roa File: 531d8398-b955-3ca2-9032-3d7609e92d88.roa (raw, json) Hash identifier: wr12t1myt93h4O0Wq79fo7nTmafficSIhLUwHHXhoeo= Subject key identifier: FB:A6:1D:08:10:C8:71:69:6C:40:9B:06:3C:41:D5:56:E1:07:D5:CB Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584BD3306027EB32081411292500 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/531d8398-b955-3ca2-9032-3d7609e92d88.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 8987 IP address blocks: 130.137.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:60:27:eb:32:08:14:11:29:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=2f7cb6a3-e3b8-413b-9368-f7e707b031e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:d1:72:02:8e:3a:9a:f4:32:d5:5c:08:b9: 8b:95:e5:3d:5b:e0:8a:e9:72:f3:26:97:a4:15:de: 92:b1:26:74:23:bd:7d:41:a3:0d:26:f2:d1:24:2a: 37:6d:af:a5:6b:a5:f1:8f:d5:fa:57:29:d6:b0:9b: 96:97:35:f7:f1:f6:3f:42:b3:ed:13:c3:e8:1f:74: a4:8e:4c:32:66:2d:70:07:37:1e:99:f3:e6:5b:fa: c5:b9:1b:8c:b8:f5:07:e5:77:fc:8f:49:54:49:7a: 39:bc:b8:e3:c0:d3:35:f4:2f:f7:52:76:df:95:b2: 57:ec:46:c2:19:6f:a2:18:a8:97:07:2f:6d:04:aa: b6:ca:97:73:56:cd:75:0d:59:81:42:3f:00:98:e5: 68:96:64:1e:c2:9a:6a:d6:37:05:2e:5c:12:2c:3e: 72:7d:28:f3:98:3f:7c:07:24:2d:6b:95:df:d0:f1: 2c:e4:1a:4e:69:79:ea:44:69:54:05:13:26:e0:07: 62:dd:3e:5a:f7:9f:32:67:c1:b1:a0:84:2a:a4:44: 67:09:00:df:54:a6:82:18:c4:74:49:bd:b3:fa:e3: 3c:df:47:00:d1:69:96:61:5e:d1:d1:23:83:6f:fd: 0c:f5:e4:ec:c1:6a:c0:9c:0f:be:5d:1e:96:5c:3c: d0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A6:1D:08:10:C8:71:69:6C:40:9B:06:3C:41:D5:56:E1:07:D5:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/531d8398-b955-3ca2-9032-3d7609e92d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0e:cf:2d:df:ae:5c:17:50:a2:66:48:7a:66:90:d7:1f:e6: e3:2e:c0:3b:6b:f7:7e:85:c2:5b:65:bf:6e:bf:50:e3:26:32: 5b:4d:81:e0:c0:9d:cf:1b:60:e6:4e:90:09:59:4d:fa:17:f8: 81:dc:39:40:7e:e2:6f:b0:d4:ff:b6:d6:23:aa:0c:09:63:ab: 55:b2:4d:77:f0:f5:3b:38:7f:1b:b9:ab:e7:cb:7b:ed:36:ab: 8e:bf:d5:20:20:37:f6:19:e1:ec:88:9f:dc:8d:33:3e:5b:8f: 23:16:ce:4b:b4:b6:57:c1:02:e7:7c:27:1c:ff:45:15:58:50: 9e:7e:23:33:9b:74:75:45:62:f3:3f:4c:bf:55:40:2e:08:ce: 3b:42:ec:53:18:f1:53:39:b6:e2:ac:4c:a4:a0:1c:75:12:1e: cf:52:d2:b0:5d:b0:de:b3:63:fe:59:e8:a4:04:16:8c:4d:9d: 37:18:08:ca:95:96:26:e0:aa:c1:88:88:96:8b:8b:4e:a5:4e: 04:99:84:7a:77:c6:bc:d2:65:e8:13:b4:2f:98:10:d4:ea:1d: 42:5c:8d:19:8d:e4:b9:3c:dc:a1:f5:b7:78:2a:31:6b:38:f3: 33:1d:1e:00:ec:90:84:9e:14:92:4f:24:b1:0e:d5:be:77:4c: 9d:db:30:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGAn6zIIFBEpJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk MmY3Y2I2YTMtZTNiOC00MTNiLTkzNjgtZjdlNzA3YjAzMWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr3RcgKOOpr0MtVcCLmLleU9W+CK6XLzJpek Fd6SsSZ0I719QaMNJvLRJCo3ba+la6Xxj9X6VynWsJuWlzX38fY/QrPtE8PoH3Sk jkwyZi1wBzcemfPmW/rFuRuMuPUH5Xf8j0lUSXo5vLjjwNM19C/3UnbflbJX7EbC GW+iGKiXBy9tBKq2ypdzVs11DVmBQj8AmOVolmQewppq1jcFLlwSLD5yfSjzmD98 ByQta5Xf0PEs5BpOaXnqRGlUBRMm4Adi3T5a958yZ8GxoIQqpERnCQDfVKaCGMR0 Sb2z+uM830cA0WmWYV7R0SODb/0M9eTswWrAnA++XR6WXDzQRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPumHQgQyHFpbECbBjxB1VbhB9XLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTMxZDgzOTgtYjk1NS0z Y2EyLTkwMzItM2Q3NjA5ZTkyZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgOzy3frlwXUKJmSHpmkNcf5uMuwDtr936Fwltlv26/UOMmMltNgeDA nc8bYOZOkAlZTfoX+IHcOUB+4m+w1P+21iOqDAljq1WyTXfw9Ts4fxu5q+fLe+02 q46/1SAgN/YZ4eyIn9yNMz5bjyMWzku0tlfBAud8Jxz/RRVYUJ5+IzObdHVFYvM/ TL9VQC4IzjtC7FMY8VM5tuKsTKSgHHUSHs9S0rBdsN6zY/5Z6KQEFoxNnTcYCMqV libgqsGIiJaLi06lTgSZhHp3xrzSZegTtC+YENTqHUJcjRmN5Lk83KH1t3gqMWs4 8zMdHgDskISeFJJPJLEO1b53TJ3bMD4= -----END CERTIFICATE-----Generated at Sun Nov 16 05:52:17 2025 by rpki-client