$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/53484dda-0bc6-350c-be01-5a462cf2fd84.roa File: 53484dda-0bc6-350c-be01-5a462cf2fd84.roa (raw, json) Hash identifier: Jfv2AFuT4W8SOdFDHTdKtphli2K407zdQkmF1UDcpEg= Subject key identifier: FC:5A:4E:09:47:67:FE:71:04:3A:E5:D7:97:0A:29:02:F4:30:58:32 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B8BE23044635EB7E9B8884E00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/53484dda-0bc6-350c-be01-5a462cf2fd84.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 130.137.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:30:44:63:5e:b7:e9:b8:88:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=61b3a6c0-a987-44f6-af47-4643928d5757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3f:61:b9:a8:43:16:e9:4f:28:18:2b:80:7b: e1:c8:0b:40:80:22:3b:60:9b:14:e3:bd:e9:43:8c: ef:31:d0:b3:72:f1:ac:ce:e4:99:b4:9c:5d:75:98: 72:97:8b:9a:07:4f:e7:d3:b6:2f:1d:bf:2b:0a:da: e7:b9:fb:e2:13:cb:e7:db:07:d3:3c:77:21:07:26: 00:62:09:0e:d3:56:ce:4f:27:cc:f5:44:28:23:85: 99:24:a0:9e:d0:0d:3c:54:60:6a:36:74:f2:41:d2: 4b:17:c5:d7:46:f8:11:b9:f3:21:57:6d:74:01:4c: e4:92:03:2a:23:d4:7a:8e:f6:ff:b3:3d:62:e0:e3: a8:e3:58:30:71:94:cd:78:08:8c:ea:be:0f:57:d4: 87:13:64:4d:08:db:38:d9:b6:97:5b:45:c4:4b:a2: 2a:45:6b:9d:7e:7f:99:bf:25:df:e9:01:16:d0:86: 01:55:ed:ba:21:08:74:6a:6e:52:3a:5e:70:74:da: 80:bc:e9:5a:71:e7:c1:33:fe:4f:dc:c4:2e:c3:9b: f6:f2:8c:cb:a2:dc:37:d9:28:5c:49:a2:c0:88:d5: 8b:61:9a:a5:01:b7:57:a2:66:c5:bb:99:c3:72:9b: c6:3f:70:9b:c6:df:5a:32:fb:73:45:a4:57:5f:c9: d4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5A:4E:09:47:67:FE:71:04:3A:E5:D7:97:0A:29:02:F4:30:58:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/53484dda-0bc6-350c-be01-5a462cf2fd84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:10:6c:10:08:6c:82:a6:84:b1:66:04:29:33:60:89:53:13: 63:23:47:ce:95:7b:59:61:d0:48:88:52:d1:d5:f4:2b:df:ce: 98:35:b6:70:fb:d9:97:9c:c8:7e:10:c2:0d:f3:87:3d:58:5f: a8:01:7f:3b:e0:23:1e:e1:4b:31:52:42:f1:49:b7:9c:81:2b: 0b:7b:6d:41:79:c6:f6:4c:31:15:81:b4:47:a2:f9:fb:02:07: 27:f1:d5:10:98:aa:a0:fe:73:5c:f8:0b:cd:e6:9e:0c:fb:2a: cf:42:15:58:15:74:ea:09:5d:fc:c4:22:06:b5:d7:ef:57:16: f6:6a:78:7a:0a:0a:05:ff:9c:27:95:6c:d0:d6:9e:4f:e4:32: c1:ff:f0:38:7e:32:cf:70:97:65:a7:d1:51:7c:47:cb:39:31: 02:7c:86:29:7e:3f:51:9a:9e:fa:0a:d8:c9:74:d9:28:73:c5: e1:df:6c:0b:87:34:ae:51:f8:19:bd:d4:7e:59:0a:44:13:50: 76:cb:ff:1e:2e:a7:8b:56:f0:b2:05:eb:c3:c4:fc:58:7b:e1: 8e:b6:45:91:39:83:46:2b:0c:c4:0e:66:43:a3:05:c4:64:6f: 68:25:86:be:4e:f5:80:48:18:c6:23:9a:77:e1:83:62:58:07: 38:ab:a2:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jBEY1636biITgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NjFiM2E2YzAtYTk4Ny00NGY2LWFmNDctNDY0MzkyOGQ1NzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj9huahDFulPKBgrgHvhyAtAgCI7YJsU473p Q4zvMdCzcvGszuSZtJxddZhyl4uaB0/n07YvHb8rCtrnufviE8vn2wfTPHchByYA YgkO01bOTyfM9UQoI4WZJKCe0A08VGBqNnTyQdJLF8XXRvgRufMhV210AUzkkgMq I9R6jvb/sz1i4OOo41gwcZTNeAiM6r4PV9SHE2RNCNs42baXW0XES6IqRWudfn+Z vyXf6QEW0IYBVe26IQh0am5SOl5wdNqAvOlacefBM/5P3MQuw5v28ozLotw32Shc SaLAiNWLYZqlAbdXombFu5nDcpvGP3Cbxt9aMvtzRaRXX8nUZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxaTglHZ/5xBDrl15cKKQL0MFgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTM0ODRkZGEtMGJjNi0z NTBjLWJlMDEtNWE0NjJjZjJmZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgok/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQQbBAIbIKmhLFmBCkzYIlTE2MjR86Ve1lh0EiIUtHV9Cvfzpg1tnD7 2ZecyH4Qwg3zhz1YX6gBfzvgIx7hSzFSQvFJt5yBKwt7bUF5xvZMMRWBtEei+fsC Byfx1RCYqqD+c1z4C83mngz7Ks9CFVgVdOoJXfzEIga11+9XFvZqeHoKCgX/nCeV bNDWnk/kMsH/8Dh+Ms9wl2Wn0VF8R8s5MQJ8hil+P1GanvoK2Ml02ShzxeHfbAuH NK5R+Bm91H5ZCkQTUHbL/x4up4tW8LIF68PE/Fh74Y62RZE5g0YrDMQOZkOjBcRk b2glhr5O9YBIGMYjmnfhg2JYBziromg= -----END CERTIFICATE-----Generated at Mon Oct 20 18:15:43 2025 by rpki-client