$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/55cfdf9a-ea77-353b-809b-7e5c45d11b20.roa File: 55cfdf9a-ea77-353b-809b-7e5c45d11b20.roa (raw, json) Hash identifier: xncT1PTT4PMXfUni4kaahxqBLQhfqgI6b1ROGf1LjDg= Subject key identifier: EC:18:FC:C6:1A:A5:4E:CF:A0:E8:29:FB:69:07:77:05:4B:AB:5E:C0 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B891760E655F42D8E805F2100 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/55cfdf9a-ea77-353b-809b-7e5c45d11b20.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 130.137.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:60:e6:55:f4:2d:8e:80:5f:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=d8bc6ae4-c8fd-4fdd-be12-94ee2c7c1ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:62:d6:55:e2:ad:b8:89:3d:4e:28:6a:7f:8f: 3f:24:47:f9:6c:dc:18:98:c0:50:fc:1e:81:9f:e3: 1a:03:26:d5:53:01:03:54:0c:8f:a7:9c:f6:09:14: 05:90:3d:52:39:93:2a:a5:a1:53:6d:34:d3:bf:7a: 09:ce:56:bc:15:6c:3f:45:8e:b0:5c:b7:76:d2:fb: be:5b:a6:83:ca:88:ac:08:10:3d:42:e8:f0:18:c6: 7b:ce:8a:bc:b4:92:d3:64:e6:f9:3c:1f:ea:ac:77: 5a:3f:c0:11:98:1c:21:05:f4:c6:25:f4:84:be:f9: 97:22:f1:21:3a:cf:c4:3b:65:1c:cc:55:cd:52:bd: 84:f8:bd:ba:21:d4:c3:fe:f4:28:b6:ff:c1:93:6e: b8:89:22:1f:6a:5b:5b:82:ae:dc:29:ab:38:41:a3: 14:01:62:ee:f5:4a:9c:9b:82:70:d4:d1:b8:b4:1d: 5e:80:8a:2f:a4:07:57:a5:c5:66:a7:b8:c6:07:39: 27:df:55:27:e5:d8:25:be:42:2b:17:00:ec:6a:b4: 3d:c4:df:a5:0c:fd:1e:ab:69:00:5b:e5:43:15:96: 17:20:c7:9e:d8:60:d3:cf:f7:28:e7:02:d6:d2:ba: 6d:e5:47:a1:d0:ed:b0:9d:43:4e:3d:8e:7d:29:4b: bb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:18:FC:C6:1A:A5:4E:CF:A0:E8:29:FB:69:07:77:05:4B:AB:5E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/55cfdf9a-ea77-353b-809b-7e5c45d11b20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2c:19:64:b2:18:37:21:1e:ed:a1:28:58:b7:7c:ff:38:4b: e7:14:18:11:7d:6b:3b:4e:33:3f:68:dd:1f:5f:b4:60:4d:5b: 8c:88:3e:8d:46:17:6e:60:58:97:95:a9:48:4a:64:2d:98:63: 60:35:5c:8e:f2:34:1c:84:9e:77:23:30:ae:47:08:db:a6:7a: 85:08:dc:b4:16:74:af:8e:bf:a6:c0:c3:c7:6e:85:08:48:11: 43:95:03:43:c9:37:f6:e9:c5:ae:08:83:da:eb:9f:89:98:3b: e2:a7:42:b7:12:93:44:bd:8f:e6:47:84:42:88:42:5a:09:8d: 0e:fd:78:50:7a:63:9c:97:37:ac:fe:b2:57:79:0f:39:dc:46: 62:74:46:6d:97:22:16:f6:8a:e3:76:a4:a1:4b:e8:0c:c2:1b: 23:5a:6a:31:42:56:5f:7a:c6:05:a3:09:62:e7:53:61:52:3a: 15:2b:35:23:7f:58:06:ae:3c:0b:e6:b0:ec:c2:be:33:ae:4d: 3d:dc:da:d3:8a:13:6c:ea:97:9c:53:ff:6f:5f:cc:f4:ae:2f: fd:35:5d:ef:74:75:99:32:d4:ea:88:6a:50:d8:66:53:db:65: 46:33:8b:81:84:5b:f8:e8:b5:cf:d8:6b:18:ef:e2:63:64:b1: e0:b1:d6:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2DmVfQtjoBfIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ZDhiYzZhZTQtYzhmZC00ZmRkLWJlMTItOTRlZTJjN2MxYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGLWVeKtuIk9Tihqf48/JEf5bNwYmMBQ/B6B n+MaAybVUwEDVAyPp5z2CRQFkD1SOZMqpaFTbTTTv3oJzla8FWw/RY6wXLd20vu+ W6aDyoisCBA9QujwGMZ7zoq8tJLTZOb5PB/qrHdaP8ARmBwhBfTGJfSEvvmXIvEh Os/EO2UczFXNUr2E+L26IdTD/vQotv/Bk264iSIfaltbgq7cKas4QaMUAWLu9Uqc m4Jw1NG4tB1egIovpAdXpcVmp7jGBzkn31Un5dglvkIrFwDsarQ9xN+lDP0eq2kA W+VDFZYXIMee2GDTz/co5wLW0rpt5Ueh0O2wnUNOPY59KUu7XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwY/MYapU7PoOgp+2kHdwVLq17AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTVjZmRmOWEtZWE3Ny0z NTNiLTgwOWItN2U1YzQ1ZDExYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAssGWSyGDchHu2hKFi3fP84S+cUGBF9aztOMz9o3R9ftGBNW4yIPo1G F25gWJeVqUhKZC2YY2A1XI7yNByEnncjMK5HCNumeoUI3LQWdK+Ov6bAw8duhQhI EUOVA0PJN/bpxa4Ig9rrn4mYO+KnQrcSk0S9j+ZHhEKIQloJjQ79eFB6Y5yXN6z+ sld5DzncRmJ0Rm2XIhb2iuN2pKFL6AzCGyNaajFCVl96xgWjCWLnU2FSOhUrNSN/ WAauPAvmsOzCvjOuTT3c2tOKE2zql5xT/29fzPSuL/01Xe90dZky1OqIalDYZlPb ZUYzi4GEW/jotc/Yaxjv4mNkseCx1mg= -----END CERTIFICATE-----Generated at Fri Oct 17 04:38:36 2025 by rpki-client