$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc6acee1-05dc-3606-87fa-450e4ed6f02d.roa File: dc6acee1-05dc-3606-87fa-450e4ed6f02d.roa (raw, json) Hash identifier: 8u+aGBJM1qlaraIcPPL3JE63BhFd+ltvGcE8+BNt9XA= Subject key identifier: 4D:BA:1C:98:4A:5C:4B:95:15:1B:23:D5:BD:08:86:CF:CC:E5:50:88 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B13D6B7D3F3D43E04A0E33A70 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc6acee1-05dc-3606-87fa-450e4ed6f02d.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 130.137.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:b7:d3:f3:d4:3e:04:a0:e3:3a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=7ae7f5b5-ab16-4e15-bf25-805e7cbb15a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:66:9b:d8:70:1f:71:bb:8a:c9:3e:e5:58:b0: b6:da:98:3f:5d:5c:a7:d6:eb:c6:52:c6:18:12:af: 26:5d:c8:46:b6:a0:b2:f0:12:43:de:4d:89:d9:66: 0d:bf:58:d6:aa:6e:5a:75:cd:1c:8c:1c:ed:1e:19: e0:e7:e8:97:2a:86:f4:fb:06:1e:94:7c:b8:fd:f7: 82:b0:9b:48:8c:20:36:5a:0c:a2:61:e9:c0:2d:18: 4c:82:e5:2a:af:ec:86:a6:8a:d2:d0:57:c8:e6:bd: d8:6e:0d:7e:e0:fc:f6:82:46:96:c0:31:55:80:9e: 19:94:bb:57:d3:3f:7e:37:0f:95:af:a5:26:31:61: 1a:c4:f0:1a:b8:c4:c5:f6:dc:67:ec:69:b8:89:4a: ad:df:43:cc:1d:38:2f:1f:a5:40:66:91:87:8a:17: 11:4d:ce:b5:56:a6:d4:ed:c9:40:da:e2:ca:6f:1f: 98:a7:3b:7b:72:4f:60:1e:55:29:e9:5e:d4:9d:31: 50:a3:7e:da:39:e6:e3:c0:3a:a1:c2:53:78:58:f1: 87:15:ac:2b:20:77:d8:91:65:e1:78:12:42:84:a2: 12:c7:35:bd:e5:20:14:83:8d:6d:90:44:66:b3:6a: ad:df:ab:2f:d8:35:a2:16:08:b1:f7:2d:bd:8f:a6: 54:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BA:1C:98:4A:5C:4B:95:15:1B:23:D5:BD:08:86:CF:CC:E5:50:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc6acee1-05dc-3606-87fa-450e4ed6f02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:0c:dd:e5:b1:32:15:f7:47:cf:25:7d:db:ba:d7:9d:16:49: 1b:3a:73:d0:7a:3b:46:7a:55:b6:4c:12:6c:dd:a1:6c:c6:38: f0:8e:5d:43:29:e0:56:3d:49:7d:41:05:5f:3a:77:68:f0:62: 14:85:9b:da:83:c0:a8:d9:e9:73:1e:32:38:a5:8b:c5:2a:81: 77:8c:db:77:af:15:62:1f:53:74:35:9e:e7:6b:45:0b:2a:2e: 0d:55:82:89:48:51:f3:93:d9:65:b4:9e:6d:e6:24:d6:91:8f: 03:77:65:b3:f5:a2:53:4a:1e:2a:db:e6:c4:26:fc:df:9f:64: 12:bd:6d:0a:67:5d:ee:49:a8:56:be:71:33:62:57:63:9a:51: f2:4f:71:4b:1b:28:12:64:49:d0:1a:e1:62:d2:20:f8:dc:dc: 8c:f6:64:68:e0:ee:5b:0f:bd:0b:0b:8f:72:e9:62:d5:35:54: 34:9f:66:91:0f:fe:d8:a0:2b:1e:dc:68:7f:12:04:59:de:56: 8d:d2:8f:65:06:c6:5f:0a:1d:ea:09:a4:60:d1:13:cd:11:7b: 57:f9:95:ec:5f:9c:29:6a:e7:f8:f2:5d:05:ce:5f:e1:78:4f: ef:e5:e6:dc:3c:98:a8:af:63:0e:76:82:63:92:18:17:04:77: a5:10:8d:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1rfT89Q+BKDjOnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk N2FlN2Y1YjUtYWIxNi00ZTE1LWJmMjUtODA1ZTdjYmIxNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWab2HAfcbuKyT7lWLC22pg/XVyn1uvGUsYY Eq8mXchGtqCy8BJD3k2J2WYNv1jWqm5adc0cjBztHhng5+iXKob0+wYelHy4/feC sJtIjCA2WgyiYenALRhMguUqr+yGporS0FfI5r3Ybg1+4Pz2gkaWwDFVgJ4ZlLtX 0z9+Nw+Vr6UmMWEaxPAauMTF9txn7Gm4iUqt30PMHTgvH6VAZpGHihcRTc61VqbU 7clA2uLKbx+Ypzt7ck9gHlUp6V7UnTFQo37aOebjwDqhwlN4WPGHFawrIHfYkWXh eBJChKISxzW95SAUg41tkERms2qt36sv2DWiFgix9y29j6ZUwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE26HJhKXEuVFRsj1b0Ihs/M5VCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZGM2YWNlZTEtMDVkYy0z NjA2LTg3ZmEtNDUwZTRlZDZmMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgM3eWxMhX3R88lfdu6150WSRs6c9B6O0Z6VbZMEmzdoWzGOPCOXUMp 4FY9SX1BBV86d2jwYhSFm9qDwKjZ6XMeMjili8UqgXeM23evFWIfU3Q1nudrRQsq Lg1VgolIUfOT2WW0nm3mJNaRjwN3ZbP1olNKHirb5sQm/N+fZBK9bQpnXe5JqFa+ cTNiV2OaUfJPcUsbKBJkSdAa4WLSIPjc3Iz2ZGjg7lsPvQsLj3LpYtU1VDSfZpEP /tigKx7caH8SBFneVo3Sj2UGxl8KHeoJpGDRE80Re1f5lexfnClq5/jyXQXOX+F4 T+/l5tw8mKivYw52gmOSGBcEd6UQjWM= -----END CERTIFICATE-----Generated at Fri Oct 17 04:41:01 2025 by rpki-client