$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0a4fda2a-ba49-3d0d-98fd-705954168569.roa File: 0a4fda2a-ba49-3d0d-98fd-705954168569.roa (raw, json) Hash identifier: xORaKxIxbiJytgv2Acc6WYFah8GlmB6IprefRB0nceY= Subject key identifier: CA:0F:BE:9D:10:1A:8C:F2:FE:78:BF:9A:41:BF:01:52:13:97:7F:07 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D4A8FB16CE35AE3D3F996F8E0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0a4fda2a-ba49-3d0d-98fd-705954168569.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 130.137.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:b1:6c:e3:5a:e3:d3:f9:96:f8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=85ce506d-d8cb-4030-bead-04fc6631f470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ac:b1:a7:ab:5a:cf:2c:48:9b:48:bc:f7:ab: f8:ca:77:75:a5:32:f2:5e:55:6b:ee:79:65:a8:52: 6a:aa:72:e4:6f:7f:46:2c:20:46:1f:bc:8d:56:4e: c9:2e:d5:b6:45:d0:41:df:5b:af:ec:c5:25:3a:32: 91:f2:7d:cf:b4:e0:46:c7:68:02:33:ab:3b:43:d1: 0a:20:f3:7b:45:2a:c2:6e:f0:b1:6c:39:5d:40:91: 70:9c:22:98:c4:fb:a9:4a:d9:fb:e8:d9:fd:7a:3d: 09:04:ca:81:a0:20:c0:5a:15:16:42:72:4f:39:1b: 73:72:a5:41:4c:2e:02:43:d6:8d:f1:20:9b:03:5a: 71:bd:50:96:e2:94:d5:2e:ec:f4:fb:a1:1d:b5:3c: f0:0d:8f:c2:66:ac:e9:ed:0b:87:bc:a0:03:2c:e7: f5:75:21:c1:5d:c2:f4:00:23:a5:3b:e1:94:ba:3f: b4:b2:fc:2f:bb:e5:91:0c:61:76:55:d7:a6:1e:71: b4:60:31:5d:98:40:64:51:b5:b7:51:ef:8b:f6:95: bc:c0:99:7f:2f:26:8b:49:dd:f1:69:05:2e:94:a6: 74:de:73:e3:45:c0:fc:2a:37:29:5e:6d:c1:a2:b0: 76:36:3f:a6:c5:fb:8b:82:6e:03:db:23:0f:ad:12: 86:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0F:BE:9D:10:1A:8C:F2:FE:78:BF:9A:41:BF:01:52:13:97:7F:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0a4fda2a-ba49-3d0d-98fd-705954168569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3b:dc:5b:89:8f:6f:b0:32:48:9a:78:11:bb:e8:c1:25:99: 66:d2:6c:10:f7:83:54:44:20:e2:74:b1:2d:c5:b8:68:cf:29: c8:f6:e7:8b:ca:3f:b8:e0:b7:ea:bd:eb:cc:a6:b6:71:db:93: ff:47:c6:66:b9:61:2c:a3:21:a6:08:d7:74:70:12:0d:bb:ff: c2:69:19:b1:64:6e:5f:d9:2b:cd:a7:44:19:78:f2:ad:45:1f: 1c:10:19:aa:6c:e5:fa:30:99:15:7f:e5:09:99:04:0a:37:ec: 63:04:0f:e2:fe:fd:da:79:bb:b0:da:f1:3a:38:43:ee:33:75: 1c:85:4a:85:30:fc:66:95:3e:6a:05:97:a4:b6:ef:a7:97:86: ed:be:53:58:f2:7c:69:84:01:34:21:39:93:7a:31:4a:df:fa: 7d:46:38:8c:27:31:71:7f:ba:0a:cf:80:53:ca:7e:f4:f7:02: 48:f4:43:29:25:e1:d5:51:ee:d3:c9:ae:a5:7e:3e:25:1c:08: eb:82:fa:47:71:4a:84:c8:fa:b2:19:73:c9:32:fd:d4:16:82: 53:73:eb:01:c8:cf:8c:0c:e9:a5:b5:53:e6:ba:0a:ce:fb:0a: 87:48:3a:82:e0:48:40:ba:0b:17:5a:83:64:2c:b6:52:db:5d: a2:3c:7b:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj7Fs41rj0/mW+OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ODVjZTUwNmQtZDhjYi00MDMwLWJlYWQtMDRmYzY2MzFmNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqyxp6tazyxIm0i896v4ynd1pTLyXlVr7nll qFJqqnLkb39GLCBGH7yNVk7JLtW2RdBB31uv7MUlOjKR8n3PtOBGx2gCM6s7Q9EK IPN7RSrCbvCxbDldQJFwnCKYxPupStn76Nn9ej0JBMqBoCDAWhUWQnJPORtzcqVB TC4CQ9aN8SCbA1pxvVCW4pTVLuz0+6EdtTzwDY/CZqzp7QuHvKADLOf1dSHBXcL0 ACOlO+GUuj+0svwvu+WRDGF2VdemHnG0YDFdmEBkUbW3Ue+L9pW8wJl/LyaLSd3x aQUulKZ03nPjRcD8KjcpXm3BorB2Nj+mxfuLgm4D2yMPrRKGVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoPvp0QGozy/ni/mkG/AVITl38HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMGE0ZmRhMmEtYmE0OS0z ZDBkLTk4ZmQtNzA1OTU0MTY4NTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgok7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM73FuJj2+wMkiaeBG76MElmWbSbBD3g1REIOJ0sS3FuGjPKcj254vK P7jgt+q968ymtnHbk/9Hxma5YSyjIaYI13RwEg27/8JpGbFkbl/ZK82nRBl48q1F HxwQGaps5fowmRV/5QmZBAo37GMED+L+/dp5u7Da8To4Q+4zdRyFSoUw/GaVPmoF l6S276eXhu2+U1jyfGmEATQhOZN6MUrf+n1GOIwnMXF/ugrPgFPKfvT3Akj0Qykl 4dVR7tPJrqV+PiUcCOuC+kdxSoTI+rIZc8ky/dQWglNz6wHIz4wM6aW1U+a6Cs77 CodIOoLgSEC6Cxdag2QstlLbXaI8e9w= -----END CERTIFICATE-----Generated at Thu Mar 26 14:34:02 2026 by rpki-client