$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/edd9dd46-4928-3443-a460-8cf89df14550.roa File: edd9dd46-4928-3443-a460-8cf89df14550.roa (raw, json) Hash identifier: zAl/wKDB5xQsSmP1bYnmUpYRkc716dyfraKHUJ2IFa0= Subject key identifier: 32:DD:54:2A:9F:7C:1A:65:87:51:93:18:64:D3:CD:A5:22:21:96:70 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584B6631EE8375A53E7FF41F47C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/edd9dd46-4928-3443-a460-8cf89df14550.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 16509 IP address blocks: 130.137.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:ee:83:75:a5:3e:7f:f4:1f:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=e3365ad0-ff54-4495-ab9a-7ea19f28ecdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:57:93:f6:fb:a8:38:80:c6:93:3f:44:a2: 1e:d4:2c:c4:1d:02:77:12:c5:65:79:8e:ef:a2:22: 66:cc:71:66:e3:f2:fc:a1:33:10:8c:e1:19:2d:a7: 38:65:04:61:0b:10:ca:dc:30:72:3a:97:3e:a1:70: e6:7b:76:fd:86:87:10:e6:3d:48:a1:e5:70:36:ff: 39:03:87:1d:53:ed:de:9b:46:5d:9d:32:82:a8:1a: d7:9a:eb:53:fa:02:5a:fd:7f:c1:82:1a:dd:78:49: 1f:de:0d:1c:68:f2:d1:d2:b1:b5:67:e0:48:3e:01: 4b:4a:2f:cd:0e:34:69:c4:c4:45:ca:d3:c1:f8:4d: 9b:64:81:00:0e:20:26:1b:4b:bc:37:44:30:02:00: da:bf:90:bd:c4:ee:36:4e:02:a0:18:ec:4e:b0:38: 32:8a:01:55:b0:e6:38:2e:40:99:42:c4:a7:12:69: d5:87:5e:2c:64:46:a9:d9:50:06:18:60:7a:80:33: 17:6b:12:72:7c:4d:31:44:77:ad:75:32:e3:2d:51: b5:11:04:16:3d:a0:60:65:af:04:df:fd:f4:e2:1e: bd:25:2b:1e:79:d4:eb:c4:c6:9b:e3:eb:06:a3:7d: 2a:84:90:cd:9a:24:ec:ca:1b:1d:9d:96:d8:f9:e6: d9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DD:54:2A:9F:7C:1A:65:87:51:93:18:64:D3:CD:A5:22:21:96:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/edd9dd46-4928-3443-a460-8cf89df14550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:19:66:ad:8d:19:48:0e:81:05:4a:4d:48:a8:f1:d4:44:e7: 1e:d0:1e:49:91:61:ac:d2:75:65:cb:a3:0b:23:37:9a:94:4b: d5:03:8c:e8:f4:c4:b7:1d:30:88:9a:ab:a1:86:11:5b:4b:3b: 7a:62:d9:0c:9f:75:b8:64:5d:ec:4d:1c:bb:55:75:f1:8a:29: 63:98:a0:c7:f5:cb:53:86:07:26:a3:d7:e2:05:59:20:84:d0: 43:38:7b:36:0f:f6:fe:70:91:9e:f7:79:52:a2:70:88:3d:0d: 2c:fd:1f:d8:91:7b:f0:a7:dc:4b:38:c1:fd:28:79:0a:43:84: 01:f6:25:d0:0a:3f:5f:f8:89:8a:93:77:2e:ad:6b:60:9c:78: 9d:91:de:93:b6:cb:9a:04:ab:ae:84:e8:96:e0:83:14:fb:ab: a9:c9:96:16:12:00:d3:39:79:1d:bd:23:70:3a:54:2c:bd:55: 43:60:c4:88:d1:93:54:19:12:fe:dd:d8:d8:30:97:f5:35:2c: bd:e8:30:a2:c0:6d:33:53:d3:5f:4b:d3:23:d6:d4:38:48:3b: 98:c3:e4:d0:c1:7c:45:3d:79:51:5a:48:1c:9e:bd:e0:55:70: bf:1a:77:10:b4:c8:0b:98:b9:50:6e:70:d6:0f:68:43:13:6a: 4d:e3:af:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMe6DdaU+f/QfR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZTMzNjVhZDAtZmY1NC00NDk1LWFiOWEtN2VhMTlmMjhlY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJxXk/b7qDiAxpM/RKIe1CzEHQJ3EsVleY7v oiJmzHFm4/L8oTMQjOEZLac4ZQRhCxDK3DByOpc+oXDme3b9hocQ5j1IoeVwNv85 A4cdU+3em0ZdnTKCqBrXmutT+gJa/X/BghrdeEkf3g0caPLR0rG1Z+BIPgFLSi/N DjRpxMRFytPB+E2bZIEADiAmG0u8N0QwAgDav5C9xO42TgKgGOxOsDgyigFVsOY4 LkCZQsSnEmnVh14sZEap2VAGGGB6gDMXaxJyfE0xRHetdTLjLVG1EQQWPaBgZa8E 3/304h69JSseedTrxMab4+sGo30qhJDNmiTsyhsdnZbY+ebZowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLdVCqffBplh1GTGGTTzaUiIZZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZWRkOWRkNDYtNDkyOC0z NDQzLWE0NjAtOGNmODlkZjE0NTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQZZq2NGUgOgQVKTUio8dRE5x7QHkmRYazSdWXLowsjN5qUS9UDjOj0 xLcdMIiaq6GGEVtLO3pi2QyfdbhkXexNHLtVdfGKKWOYoMf1y1OGByaj1+IFWSCE 0EM4ezYP9v5wkZ73eVKicIg9DSz9H9iRe/Cn3Es4wf0oeQpDhAH2JdAKP1/4iYqT dy6ta2CceJ2R3pO2y5oEq66E6JbggxT7q6nJlhYSANM5eR29I3A6VCy9VUNgxIjR k1QZEv7d2Ngwl/U1LL3oMKLAbTNT019L0yPW1DhIO5jD5NDBfEU9eVFaSByeveBV cL8adxC0yAuYuVBucNYPaEMTak3jr1Y= -----END CERTIFICATE-----Generated at Mon Oct 20 12:57:21 2025 by rpki-client