$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/85b5591c-78f3-3264-a4a7-3216b1882c46.roa File: 85b5591c-78f3-3264-a4a7-3216b1882c46.roa (raw, json) Hash identifier: oIQqbOlXQn+39vAyyD3jyNpQeoiI2SV31izDu1rJ+6Y= Subject key identifier: B6:3D:F0:DA:EF:DC:07:2E:85:20:91:2F:E9:17:03:A6:56:BD:10:08 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B6BC758C42259545221848480 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/85b5591c-78f3-3264-a4a7-3216b1882c46.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 14618 IP address blocks: 130.137.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:58:c4:22:59:54:52:21:84:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=045ef588-75ce-4826-9181-cbef31695461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:97:e4:58:c2:58:10:b1:f5:fa:4a:2f:ab:70: 89:bc:f6:d8:37:9f:31:11:08:0c:64:13:aa:de:6c: b3:47:31:d5:45:d8:5c:e6:4f:dc:68:31:87:b0:69: 85:7a:21:4d:2c:91:b4:5e:e3:c9:65:e6:23:4e:9e: 23:6a:b8:ce:1c:10:e1:f3:8d:c7:29:03:a1:71:4e: eb:2f:ea:d4:fa:c8:44:f0:79:29:63:02:51:e4:fc: f2:31:66:30:0f:68:79:09:c4:54:b7:c6:4f:ae:24: 7e:1c:b6:46:d7:8f:20:73:2b:ea:af:4c:48:6c:29: b4:d8:28:f9:51:14:41:17:8f:02:a2:23:79:9b:dc: 65:1c:5a:76:22:8f:e5:32:bc:cf:93:6b:3a:28:d7: 64:f1:5d:69:49:b0:b8:24:9e:cb:f8:20:9e:25:8f: 24:1f:b8:c9:04:d0:2c:86:cb:67:47:e7:c9:f4:54: 28:28:32:a4:9d:e5:8e:94:18:18:fa:76:b8:ce:85: df:15:91:40:10:4f:4e:25:39:93:d3:38:73:f6:d5: 46:08:a6:25:29:ed:21:06:91:d0:ea:af:09:6b:24: a0:aa:50:27:73:07:e7:a2:b9:63:f2:c6:27:dc:be: b3:45:1a:2d:a1:4d:1c:f7:7f:d9:ff:65:4a:b3:e6: 6c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3D:F0:DA:EF:DC:07:2E:85:20:91:2F:E9:17:03:A6:56:BD:10:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/85b5591c-78f3-3264-a4a7-3216b1882c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d4:14:90:2b:1b:d2:fc:d6:0a:1d:9f:b8:00:bd:ec:8e:ae: 5a:f6:f7:25:a4:19:47:6a:da:d2:a7:c7:50:3b:da:67:41:56: 72:2d:02:89:69:64:f3:b1:8c:af:dd:d3:41:3b:8c:3b:f5:41: da:8f:dd:c2:22:81:50:4d:77:13:a5:69:05:8e:64:80:3f:6b: ca:ba:fe:5a:a1:e5:f2:e3:0e:d1:7c:2b:31:51:0b:f2:ef:34: 13:91:a5:70:9e:8c:33:1a:62:a4:e1:01:b0:ab:93:44:43:f6: 01:b2:0f:c2:21:67:06:65:41:2b:d0:fc:d6:86:47:31:40:21: 23:a2:1c:b5:53:b4:76:ee:7e:78:3c:07:34:ab:6d:e7:a1:3e: 80:3c:9c:fa:95:08:16:08:a2:8f:19:1d:bb:ff:87:ea:95:74: d0:bf:2e:7b:c4:e6:b7:ec:ff:e8:43:8d:27:e1:4b:f4:dc:33: 41:de:5c:db:73:85:af:9f:1f:d5:77:25:96:58:8a:2b:65:f6: e9:60:91:88:26:48:b4:bc:72:cc:d1:96:fe:d2:d0:a2:48:1d: 82:ad:1b:5d:bb:07:49:96:fe:ec:41:56:2c:c4:cb:be:80:0d: 95:bd:d7:dc:87:40:88:7a:1d:cc:cd:2f:5a:04:10:23:25:4c: ba:70:ee:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1jEIllUUiGEhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MDQ1ZWY1ODgtNzVjZS00ODI2LTkxODEtY2JlZjMxNjk1NDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJfkWMJYELH1+kovq3CJvPbYN58xEQgMZBOq 3myzRzHVRdhc5k/caDGHsGmFeiFNLJG0XuPJZeYjTp4jarjOHBDh843HKQOhcU7r L+rU+shE8HkpYwJR5PzyMWYwD2h5CcRUt8ZPriR+HLZG148gcyvqr0xIbCm02Cj5 URRBF48CoiN5m9xlHFp2Io/lMrzPk2s6KNdk8V1pSbC4JJ7L+CCeJY8kH7jJBNAs hstnR+fJ9FQoKDKkneWOlBgY+na4zoXfFZFAEE9OJTmT0zhz9tVGCKYlKe0hBpHQ 6q8JaySgqlAncwfnorlj8sYn3L6zRRotoU0c93/Z/2VKs+ZsWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY98Nrv3AcuhSCRL+kXA6ZWvRAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvODViNTU5MWMtNzhmMy0z MjY0LWE0YTctMzIxNmIxODgyYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjUFJArG9L81godn7gAveyOrlr29yWkGUdq2tKnx1A72mdBVnItAolp ZPOxjK/d00E7jDv1QdqP3cIigVBNdxOlaQWOZIA/a8q6/lqh5fLjDtF8KzFRC/Lv NBORpXCejDMaYqThAbCrk0RD9gGyD8IhZwZlQSvQ/NaGRzFAISOiHLVTtHbufng8 BzSrbeehPoA8nPqVCBYIoo8ZHbv/h+qVdNC/LnvE5rfs/+hDjSfhS/TcM0HeXNtz ha+fH9V3JZZYiitl9ulgkYgmSLS8cszRlv7S0KJIHYKtG127B0mW/uxBVizEy76A DZW919yHQIh6HczNL1oEECMlTLpw7sU= -----END CERTIFICATE-----Generated at Fri Oct 17 04:38:03 2025 by rpki-client