$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa File: 2b802f54-be87-3e85-b569-cf6fbafa55b0.roa (raw, json) Hash identifier: H22Aiq8SU79/BE979v3Id8/h2vC//n6ZazATd9K+wNI= Subject key identifier: 3D:7E:7D:C8:BF:4B:84:B6:37:EB:45:A5:B8:0D:6B:C4:28:33:ED:D6 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B758C90C44B92CC66FC068D00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 16509 IP address blocks: 130.137.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:90:c4:4b:92:cc:66:fc:06:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=005b5318-5677-4015-8f08-2cc498b07472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d7:88:06:d6:4a:63:58:b6:7b:8f:dc:6d:72: 97:55:58:71:83:6f:4e:6d:ea:67:74:45:a3:a4:cb: d2:80:54:90:c5:cc:ee:a6:d1:90:c4:dc:c2:a7:71: 27:1e:f0:d2:f7:e1:fd:06:22:fb:58:3e:b3:30:a4: 65:85:d8:13:58:3a:6c:5b:53:dd:0d:51:e1:75:20: fd:c4:16:b4:ff:29:5e:fa:01:dd:b4:8e:c4:30:52: ad:fe:f9:b3:99:be:c8:53:1c:b4:9a:ae:df:8c:aa: 4e:ac:39:f5:28:21:03:df:bf:7e:3b:2f:15:a9:ca: 81:cd:c3:ab:aa:17:c0:59:d4:96:48:a2:c5:72:a9: 69:3e:a6:7e:9a:42:d4:2b:5f:88:a5:62:bf:9f:1a: 36:9b:cf:80:ba:16:2e:cf:04:c5:7a:ef:65:fa:32: de:b4:22:84:93:0f:40:e5:46:1d:74:04:2c:b0:6d: 7b:c4:6e:c5:bf:69:3b:7f:2d:36:78:98:3c:09:08: f2:db:d8:d3:a2:aa:21:a6:62:6c:c2:ae:0f:a1:22: c1:c7:cc:1d:83:af:a2:17:9b:ea:6a:c3:47:d4:8e: 74:7c:ac:76:ed:3a:0a:13:24:a3:e3:7a:4d:28:55: 8c:80:95:95:dc:05:3f:13:14:42:ef:81:6c:c2:05: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7E:7D:C8:BF:4B:84:B6:37:EB:45:A5:B8:0D:6B:C4:28:33:ED:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:81:60:f2:47:45:1c:d8:bb:b2:45:6c:3b:df:17:21:c8:70: d4:d6:e0:fc:0f:b7:a2:b2:d1:91:49:ef:68:6e:29:e3:02:1f: 2f:42:88:9d:e6:8f:98:a0:e5:87:ca:86:f2:df:a0:72:ff:23: 20:42:62:8f:f9:c5:9d:5d:85:6d:dd:8e:0f:fb:db:c1:26:d0: a5:dd:bc:55:7f:d8:c7:75:55:e2:ad:36:76:18:f7:3f:db:80: c2:31:a7:96:3e:8c:15:27:13:29:c5:b9:d7:68:fb:a4:0c:f9: 81:a6:ea:0e:03:5d:9c:62:d5:87:e5:70:b6:94:bc:e6:94:0e: 97:14:e2:3b:e3:cf:88:b1:48:36:f0:57:0f:ff:08:73:bb:4d: df:3c:9d:96:c3:76:5f:ca:49:fa:92:43:0c:2c:ee:55:8a:78: 1f:8d:46:47:b5:76:40:3f:68:fa:d6:7a:f8:92:c5:e0:1b:53: c6:42:e4:54:9b:99:b6:e4:a7:0d:cb:9c:a6:a7:8f:36:8b:d2: 80:96:ba:40:4a:31:3b:ed:5d:93:29:84:3a:74:a0:aa:8b:41: 85:c5:d8:d4:f9:5a:7c:a3:08:df:bc:08:28:22:56:17:29:e5: 89:12:6b:58:13:02:f8:12:10:0f:e0:b0:bc:e4:82:26:d2:30: 71:38:9c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJDES5LMZvwGjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk MDA1YjUzMTgtNTY3Ny00MDE1LThmMDgtMmNjNDk4YjA3NDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNeIBtZKY1i2e4/cbXKXVVhxg29ObepndEWj pMvSgFSQxczuptGQxNzCp3EnHvDS9+H9BiL7WD6zMKRlhdgTWDpsW1PdDVHhdSD9 xBa0/yle+gHdtI7EMFKt/vmzmb7IUxy0mq7fjKpOrDn1KCED379+Oy8VqcqBzcOr qhfAWdSWSKLFcqlpPqZ+mkLUK1+IpWK/nxo2m8+AuhYuzwTFeu9l+jLetCKEkw9A 5UYddAQssG17xG7Fv2k7fy02eJg8CQjy29jToqohpmJswq4PoSLBx8wdg6+iF5vq asNH1I50fKx27ToKEySj43pNKFWMgJWV3AU/ExRC74FswgXmcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1+fci/S4S2N+tFpbgNa8QoM+3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmI4MDJmNTQtYmU4Ny0z ZTg1LWI1NjktY2Y2ZmJhZmE1NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGBYPJHRRzYu7JFbDvfFyHIcNTW4PwPt6Ky0ZFJ72huKeMCHy9CiJ3m j5ig5YfKhvLfoHL/IyBCYo/5xZ1dhW3djg/728Em0KXdvFV/2Md1VeKtNnYY9z/b gMIxp5Y+jBUnEynFuddo+6QM+YGm6g4DXZxi1YflcLaUvOaUDpcU4jvjz4ixSDbw Vw//CHO7Td88nZbDdl/KSfqSQwws7lWKeB+NRke1dkA/aPrWeviSxeAbU8ZC5FSb mbbkpw3LnKanjzaL0oCWukBKMTvtXZMphDp0oKqLQYXF2NT5WnyjCN+8CCgiVhcp 5YkSa1gTAvgSEA/gsLzkgibSMHE4nE0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:07:24 2025 by rpki-client