$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa File: 2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa (raw, json) Hash identifier: WYizxJ4L+AODt5n4IXJLF0pwAqprpdH+vmLNRMZenWw= Subject key identifier: 0A:F1:27:87:40:6A:CF:88:37:DC:A4:A1:78:7F:BE:71:5E:94:A5:91 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D8EF562248B81EC905196B920 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 130.137.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:62:24:8b:81:ec:90:51:96:b9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f1d150fe-3069-4f3d-a5bf-8c1a20bccad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0f:9e:0a:21:2b:6b:67:51:8f:3c:ca:85:6d: 7a:15:cb:77:03:49:57:15:2c:2c:b9:2c:db:ad:05: 25:9b:6b:b8:90:ab:11:f7:bf:9c:3f:8b:f7:02:a4: f0:b2:f4:d1:8c:fe:73:f0:bc:76:0d:44:c7:60:4b: 6a:55:09:2e:30:c2:5c:62:df:99:4b:c7:3e:85:b7: 96:94:5a:9e:e4:cc:fd:bf:b9:02:5a:28:14:f3:23: 91:b2:9e:51:ef:7d:ef:88:b0:30:25:4f:f9:72:b6: 85:52:37:81:fc:08:74:69:0e:75:60:80:51:29:d0: 33:d8:57:52:59:b9:35:b5:29:ad:82:d5:2b:b5:8d: 96:4c:4d:62:1c:90:aa:60:0d:26:f5:dc:37:97:ce: cd:60:d0:e4:9e:f9:69:04:92:54:b9:1d:6b:39:f8: e7:cc:80:2e:70:47:15:76:8d:91:a8:fe:76:5f:30: 17:bd:b4:c9:3b:53:0e:a8:30:8e:b5:c6:73:43:d5: 3f:ea:e7:7e:81:c1:8f:d1:24:84:fe:f2:4d:9d:3f: 2d:16:53:56:de:cb:52:06:37:98:04:95:f8:18:11: 59:12:c4:b0:f1:55:da:46:38:1f:e1:bb:a5:fe:3f: 0e:a9:89:0e:85:18:bb:13:41:4f:d7:a8:ef:cf:61: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F1:27:87:40:6A:CF:88:37:DC:A4:A1:78:7F:BE:71:5E:94:A5:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:8b:ba:48:b0:b1:3b:22:2c:51:19:47:41:3e:31:e8:e9:e0: 8e:07:3b:fc:c2:6c:70:9e:6f:22:b2:67:27:d4:57:ca:a7:c7: 29:6a:36:06:ce:1c:b0:4f:6a:c4:e4:b6:e2:8c:a4:57:08:78: 7f:d1:36:ce:c0:d6:31:75:87:2e:9c:85:1a:e2:98:e9:22:a9: 86:18:2a:bb:9a:bd:01:a8:7b:c2:a8:7c:ce:f2:ef:3e:28:bc: a3:af:37:8e:40:03:c8:3b:32:de:c9:67:c0:ed:92:35:2a:cf: eb:25:01:e5:ff:ab:8f:2c:9d:15:15:47:35:50:2c:1e:6d:38: 4f:ed:3a:e7:2b:d0:ff:87:5e:69:d2:cb:30:a4:58:37:b4:b2: 7e:0e:71:da:75:af:83:ea:6d:08:ca:09:90:a8:84:03:c8:9d: 82:05:53:d4:6f:20:d7:fc:4d:ba:1c:6e:4e:f4:04:0a:c2:81: 58:29:62:6b:07:4c:6d:7d:bb:4a:b1:7b:b7:c2:be:c8:dd:ed: ea:51:fe:34:9d:b0:bf:1b:67:5b:90:56:6a:e4:0d:f6:b7:ca: 30:ac:99:1d:77:24:19:1c:e9:23:68:26:ad:3a:aa:19:18:8c: 7b:b1:22:4a:2b:e1:ad:3a:00:f1:34:0d:0d:0d:5d:fa:7a:9e: aa:01:c0:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WIki4HskFGWuSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjFkMTUwZmUtMzA2OS00ZjNkLWE1YmYtOGMxYTIwYmNjYWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA+eCiEra2dRjzzKhW16Fct3A0lXFSwsuSzb rQUlm2u4kKsR97+cP4v3AqTwsvTRjP5z8Lx2DUTHYEtqVQkuMMJcYt+ZS8c+hbeW lFqe5Mz9v7kCWigU8yORsp5R733viLAwJU/5craFUjeB/Ah0aQ51YIBRKdAz2FdS Wbk1tSmtgtUrtY2WTE1iHJCqYA0m9dw3l87NYNDknvlpBJJUuR1rOfjnzIAucEcV do2RqP52XzAXvbTJO1MOqDCOtcZzQ9U/6ud+gcGP0SSE/vJNnT8tFlNW3stSBjeY BJX4GBFZEsSw8VXaRjgf4bul/j8OqYkOhRi7E0FP16jvz2EFgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArxJ4dAas+IN9ykoXh/vnFelKWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmE0YWI3YTAtMjVhOS0z Mzc5LThlM2UtNmFkY2M0MDMzZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaLukiwsTsiLFEZR0E+Mejp4I4HO/zCbHCebyKyZyfUV8qnxylqNgbO HLBPasTktuKMpFcIeH/RNs7A1jF1hy6chRrimOkiqYYYKruavQGoe8KofM7y7z4o vKOvN45AA8g7Mt7JZ8DtkjUqz+slAeX/q48snRUVRzVQLB5tOE/tOucr0P+HXmnS yzCkWDe0sn4Ocdp1r4PqbQjKCZCohAPInYIFU9RvINf8Tbocbk70BArCgVgpYmsH TG19u0qxe7fCvsjd7epR/jSdsL8bZ1uQVmrkDfa3yjCsmR13JBkc6SNoJq06qhkY jHuxIkor4a06APE0DQ0NXfp6nqoBwFA= -----END CERTIFICATE-----Generated at Wed May 13 10:16:00 2026 by rpki-client