$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/003e1f7c-b17e-3677-ae3f-bd43fdcc7822.roa File: 003e1f7c-b17e-3677-ae3f-bd43fdcc7822.roa (raw, json) Hash identifier: jVSPw6ultblsGG+VApS7mGOaGvFOeNkhSG8DPrBPRxk= Subject key identifier: 89:B9:BB:9B:11:BC:DB:20:27:BC:EE:7F:9C:29:64:1A:BD:6F:35:67 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D492A671767D0C3AFF5FA7D80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/003e1f7c-b17e-3677-ae3f-bd43fdcc7822.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 130.137.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:67:17:67:d0:c3:af:f5:fa:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=ff016b02-69fe-441d-9126-c2cf91b74d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:53:52:44:bd:52:2e:99:e4:0f:e5:8c:ce: bf:f4:ae:8a:d6:9a:ff:ca:04:05:36:67:86:df:2c: 33:01:0d:c4:79:10:c8:9f:5a:5f:55:f3:35:62:b6: eb:c5:fb:97:29:3e:43:f4:4d:dd:7b:ac:3f:79:6d: f4:f2:18:17:a3:de:6e:a6:27:14:0f:2a:f4:ea:a1: 4d:ae:77:e9:4e:71:8c:b8:09:84:12:f1:04:94:52: 2d:07:3e:7d:7a:8e:e4:ac:ac:d2:1a:61:43:0d:90: 32:f9:38:f4:ab:be:83:d8:7b:23:be:c4:e6:32:15: 8a:c6:cb:26:80:e0:9a:d6:7c:41:68:07:74:67:84: 4e:ba:f7:fe:f9:2b:65:57:ed:38:88:14:2d:66:a9: 26:fd:16:9f:46:41:a3:68:9b:40:f9:56:8e:24:9b: d8:84:79:58:f0:b2:de:41:95:f5:e7:73:d5:3a:b5: 15:ef:c0:d2:49:9b:a9:c1:51:f2:42:dd:9f:56:4a: 2d:fb:4b:47:0c:fa:74:96:6a:8f:07:13:39:a2:25: 35:fc:36:a1:65:fa:2b:3f:02:c4:58:6a:31:00:93: e1:40:71:70:40:1c:a3:92:02:c7:e8:17:dd:0c:59: ed:53:a0:f1:6f:15:18:d5:61:be:9f:09:7d:5e:5a: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B9:BB:9B:11:BC:DB:20:27:BC:EE:7F:9C:29:64:1A:BD:6F:35:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/003e1f7c-b17e-3677-ae3f-bd43fdcc7822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:39:16:1a:4c:96:b1:be:87:d4:9b:c9:7a:a9:3d:44:41:4e: 00:b0:eb:12:84:34:ef:26:ca:49:15:40:c7:af:a9:83:ad:4e: 1c:3e:82:d5:79:0d:cf:ea:1d:ab:44:e6:bc:f6:75:6c:a8:c1: 5f:bf:45:59:04:a6:a4:62:c1:15:51:e8:79:70:7e:1a:5a:d4: 1c:7b:1c:77:e5:d4:1a:53:36:2c:c9:a7:a1:00:9a:2c:5c:d7: f1:59:fd:d8:94:26:e9:3b:53:d9:55:be:0d:2a:59:9b:81:6b: 78:57:ed:cc:4f:56:06:1a:54:2b:e4:52:99:9a:08:ce:a1:d0: bd:2c:83:a1:51:c4:72:57:f9:cf:80:b5:9a:2e:90:ce:ca:48: ca:e7:0d:96:f4:fb:e3:e8:02:6e:49:85:17:a4:a2:84:d9:5e: e2:30:ff:32:84:f6:9e:bd:a6:21:99:3d:67:ea:63:84:c9:9d: 41:a5:f5:d6:1d:b8:3a:f6:43:84:1b:d0:17:92:de:4e:a2:df: 6d:95:cf:b1:97:d4:4b:92:af:d5:73:7e:06:a5:25:37:f8:fa: c5:e3:dd:cc:c4:40:f1:ed:59:52:6e:d3:90:46:e8:a1:b7:05: b0:78:00:62:83:1e:3a:da:69:0d:32:cd:59:0f:93:65:e8:56: 31:e2:83:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmcXZ9DDr/X6fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZmYwMTZiMDItNjlmZS00NDFkLTkxMjYtYzJjZjkxYjc0ZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBhTUkS9Ui6Z5A/ljM6/9K6K1pr/ygQFNmeG 3ywzAQ3EeRDIn1pfVfM1YrbrxfuXKT5D9E3de6w/eW308hgXo95upicUDyr06qFN rnfpTnGMuAmEEvEElFItBz59eo7krKzSGmFDDZAy+Tj0q76D2HsjvsTmMhWKxssm gOCa1nxBaAd0Z4ROuvf++StlV+04iBQtZqkm/RafRkGjaJtA+VaOJJvYhHlY8LLe QZX153PVOrUV78DSSZupwVHyQt2fVkot+0tHDPp0lmqPBxM5oiU1/DahZforPwLE WGoxAJPhQHFwQByjkgLH6BfdDFntU6DxbxUY1WG+nwl9XlpuHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm5u5sRvNsgJ7zuf5wpZBq9bzVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMDAzZTFmN2MtYjE3ZS0z Njc3LWFlM2YtYmQ0M2ZkY2M3ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAk5FhpMlrG+h9SbyXqpPURBTgCw6xKENO8mykkVQMevqYOtThw+gtV5 Dc/qHatE5rz2dWyowV+/RVkEpqRiwRVR6Hlwfhpa1Bx7HHfl1BpTNizJp6EAmixc 1/FZ/diUJuk7U9lVvg0qWZuBa3hX7cxPVgYaVCvkUpmaCM6h0L0sg6FRxHJX+c+A tZoukM7KSMrnDZb0++PoAm5JhRekooTZXuIw/zKE9p69piGZPWfqY4TJnUGl9dYd uDr2Q4Qb0BeS3k6i322Vz7GX1EuSr9VzfgalJTf4+sXj3czEQPHtWVJu05BG6KG3 BbB4AGKDHjraaQ0yzVkPk2XoVjHig90= -----END CERTIFICATE-----Generated at Thu Mar 26 02:02:05 2026 by rpki-client