$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/eda9be5a-20a9-3acf-acb5-bcfc41f15ad8.roa File: eda9be5a-20a9-3acf-acb5-bcfc41f15ad8.roa (raw, json) Hash identifier: ctPvdEVznnTSRogT1BqBspwP4I9r2jwUgwBZk9vJO8s= Subject key identifier: 12:EC:3A:FB:87:6D:F3:CC:70:A3:50:C3:CE:C3:CB:7E:36:24:F5:0A Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B891761522E64A0A031FD0470 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/eda9be5a-20a9-3acf-acb5-bcfc41f15ad8.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 130.137.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:61:52:2e:64:a0:a0:31:fd:04:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=82a49e2b-30e0-453a-999f-2162036a3c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6d:6b:e3:6a:13:b7:e0:61:50:4a:f3:30:c5: f9:b7:4f:4b:5f:95:e8:56:21:1c:f5:2b:7c:2b:0b: 08:a3:79:f2:2e:0e:3e:a6:5d:0d:17:83:4f:ff:51: 63:f5:23:66:23:09:c2:18:f1:72:3a:26:0b:f2:c4: 3f:99:5d:60:c0:bb:a1:85:c9:01:35:31:30:28:c3: fb:16:3d:bf:d3:e4:b3:13:70:12:a3:f2:42:15:29: 6f:45:ad:2d:52:29:f2:72:5c:da:8f:8b:bf:0d:ce: 63:05:86:b5:f4:c8:26:b7:7a:01:be:22:24:2d:e0: 6e:8a:6a:bb:34:22:44:17:0a:84:1d:8c:1f:f8:45: 54:0d:e5:cc:f2:b4:55:26:54:79:ad:6e:b7:91:2d: bd:3f:c2:bb:47:98:a2:9f:58:97:95:db:a1:23:58: b6:fe:9f:a0:e1:1c:ad:18:d1:53:f6:5b:81:fe:6d: a6:a2:ab:78:12:bd:80:ec:7e:fa:34:96:cb:4e:63: 4c:5f:b8:45:c9:83:53:e3:fc:d9:e9:99:b9:cb:ae: cb:b8:e6:1a:15:47:5a:1e:51:17:82:f2:41:4d:25: 77:dc:3f:41:1c:e4:ed:26:7d:5d:92:0b:45:5e:cb: 26:88:7e:26:77:6e:53:2c:7b:10:ce:76:f8:67:3f: 67:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EC:3A:FB:87:6D:F3:CC:70:A3:50:C3:CE:C3:CB:7E:36:24:F5:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/eda9be5a-20a9-3acf-acb5-bcfc41f15ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:cf:7b:71:cc:d7:93:19:07:fe:76:4b:0b:b6:d4:25:10:f3: bd:03:7d:37:9e:bc:7d:10:3d:2d:2f:fa:df:3d:02:bd:ee:44: 65:d7:94:4a:89:37:68:0b:f9:57:b4:59:b2:9b:50:ea:87:4a: a8:48:27:68:02:06:6b:cd:16:88:96:0b:d2:3e:94:9d:e6:41: bf:89:42:77:07:a3:4c:b4:39:1b:48:2d:bf:90:a5:c1:9a:c6: fb:a4:da:02:e3:ec:92:4b:ca:d8:02:52:49:a8:a8:c3:dd:04: 5e:cb:66:6c:88:2a:e7:40:71:32:f9:17:d6:be:a9:e4:50:09: b2:47:87:a6:39:1b:69:9d:f5:fb:96:e2:26:bb:e8:88:d0:d1: 3d:e9:c9:4b:38:26:95:54:a4:41:3c:3b:b0:72:0e:64:83:cd: a7:c2:31:61:3b:0c:f8:69:b2:32:5a:2a:68:c6:59:2a:f0:87: 3a:f7:85:55:d4:2c:c7:29:70:19:b3:ce:58:5f:1e:ca:50:69: 12:fb:83:05:5f:49:6a:be:05:ee:da:6a:1f:6f:71:5f:d5:8e: 63:f4:2e:a2:23:c1:39:e9:d3:0c:f9:00:08:54:f0:c9:00:35: de:48:7a:60:ac:44:95:bc:b2:92:23:53:5d:d2:3d:fe:26:f7: e9:ff:86:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2FSLmSgoDH9BHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ODJhNDllMmItMzBlMC00NTNhLTk5OWYtMjE2MjAzNmEzYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW1r42oTt+BhUErzMMX5t09LX5XoViEc9St8 KwsIo3nyLg4+pl0NF4NP/1Fj9SNmIwnCGPFyOiYL8sQ/mV1gwLuhhckBNTEwKMP7 Fj2/0+SzE3ASo/JCFSlvRa0tUinyclzaj4u/Dc5jBYa19Mgmt3oBviIkLeBuimq7 NCJEFwqEHYwf+EVUDeXM8rRVJlR5rW63kS29P8K7R5iin1iXlduhI1i2/p+g4Ryt GNFT9luB/m2moqt4Er2A7H76NJbLTmNMX7hFyYNT4/zZ6Zm5y67LuOYaFUdaHlEX gvJBTSV33D9BHOTtJn1dkgtFXssmiH4md25TLHsQznb4Zz9nRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLsOvuHbfPMcKNQw87Dy342JPUKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZWRhOWJlNWEtMjBhOS0z YWNmLWFjYjUtYmNmYzQxZjE1YWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHPe3HM15MZB/52Swu21CUQ870DfTeevH0QPS0v+t89Ar3uRGXXlEqJ N2gL+Ve0WbKbUOqHSqhIJ2gCBmvNFoiWC9I+lJ3mQb+JQncHo0y0ORtILb+QpcGa xvuk2gLj7JJLytgCUkmoqMPdBF7LZmyIKudAcTL5F9a+qeRQCbJHh6Y5G2md9fuW 4ia76IjQ0T3pyUs4JpVUpEE8O7ByDmSDzafCMWE7DPhpsjJaKmjGWSrwhzr3hVXU LMcpcBmzzlhfHspQaRL7gwVfSWq+Be7aah9vcV/VjmP0LqIjwTnp0wz5AAhU8MkA Nd5IemCsRJW8spIjU13SPf4m9+n/hgM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:38:44 2025 by rpki-client