$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b08c318-5db7-308c-86b2-5b5466ad5b0d.roa File: 2b08c318-5db7-308c-86b2-5b5466ad5b0d.roa (raw, json) Hash identifier: oKLa29gLGPdk91AJsne0PnmOjk0opUdC8O6e+xKldwk= Subject key identifier: EF:A6:F8:2D:15:75:B3:10:3E:39:56:34:45:96:F2:73:22:79:A0:65 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D300A5E9E03A60EA46F965F00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b08c318-5db7-308c-86b2-5b5466ad5b0d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 130.137.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:5e:9e:03:a6:0e:a4:6f:96:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=90d4a352-092a-49f9-a5f9-8ae1390e4d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e2:a8:7f:b9:f9:58:f0:30:9e:e4:96:8d:95: ca:c2:b6:42:71:33:e2:07:d4:18:09:ef:4f:b1:e1: 10:b2:35:2c:7c:44:f5:62:6f:42:0f:e5:a5:44:ec: 23:4c:1e:1c:83:ee:87:ac:58:6e:b2:b2:c6:69:08: 8b:3c:4d:bc:ab:66:2e:30:77:f9:1b:52:dd:af:f5: a2:25:2b:61:5b:05:f7:c4:6d:70:0e:0e:fc:d0:62: 6b:67:69:48:28:ee:6e:8f:e5:37:8d:34:61:50:97: 0c:0e:6a:1f:24:0a:19:62:72:b6:c5:bf:58:bd:ed: 0a:2e:0f:b4:f4:f5:a7:f8:d4:1f:cd:2b:77:bf:83: e9:85:81:87:ad:27:14:5d:6f:36:5f:70:d0:8c:c7: c6:c4:1a:3d:49:1e:da:1b:df:d5:fe:d9:4e:eb:44: 19:a5:95:38:b8:97:44:4e:a2:31:e4:1e:52:0d:79: ef:22:52:ad:f8:4a:40:39:e4:c0:ba:69:5a:b3:d0: 8b:a0:25:b3:17:fb:95:d4:34:2e:48:92:56:a2:a4: 6d:68:2f:e0:10:26:be:1f:7b:6d:c1:8f:6d:ac:0f: 20:73:76:24:78:6c:36:b6:68:0b:2e:36:64:55:6d: 1f:86:77:f9:5e:f9:e9:06:6a:12:b6:a6:4f:a0:ee: ad:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A6:F8:2D:15:75:B3:10:3E:39:56:34:45:96:F2:73:22:79:A0:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b08c318-5db7-308c-86b2-5b5466ad5b0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ec:0c:a9:bc:15:ef:5c:f7:c8:e7:81:8f:74:f2:81:3d:74: 40:ca:2e:48:95:17:9e:5e:43:cc:5d:f2:01:8e:18:e4:60:4c: 2e:28:1d:fd:c1:35:8e:05:d2:b3:dd:c7:bd:84:20:20:3c:a2: bf:48:8f:b4:e3:44:93:b7:71:ab:be:88:bd:c4:69:af:f8:e1: df:42:eb:98:b2:42:17:1c:e8:c0:75:3b:79:56:b0:89:78:e5: f1:88:63:9b:30:ad:d4:3b:91:f3:c5:fe:ff:8c:6d:97:65:6a: ec:40:b9:8f:d8:61:ed:35:fd:8c:b9:70:9c:b3:a3:31:d4:cd: 5f:80:92:23:99:d3:b1:2d:4d:25:f7:4b:61:cc:9c:00:56:51: 35:7a:a6:47:c8:17:ca:a1:42:1d:4e:87:21:55:b6:c3:a7:f9: b6:56:a7:09:70:05:1b:e0:ab:be:5d:4e:54:75:78:dc:42:18: db:87:86:c3:b2:46:91:17:ca:22:94:a5:02:8a:64:8a:0e:f8: 1b:e3:ee:ff:fc:41:be:30:66:0e:5e:b7:81:b0:c1:90:23:f1: fd:61:94:fe:ba:94:bd:de:a4:98:b1:9d:3b:b9:52:2b:91:88: da:76:56:3d:7a:40:00:54:22:86:e2:b9:7e:11:bc:e0:9d:d5: fe:a6:bd:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCl6eA6YOpG+WXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTBkNGEzNTItMDkyYS00OWY5LWE1ZjktOGFlMTM5MGU0ZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Kof7n5WPAwnuSWjZXKwrZCcTPiB9QYCe9P seEQsjUsfET1Ym9CD+WlROwjTB4cg+6HrFhusrLGaQiLPE28q2YuMHf5G1Ldr/Wi JSthWwX3xG1wDg780GJrZ2lIKO5uj+U3jTRhUJcMDmofJAoZYnK2xb9Yve0KLg+0 9PWn+NQfzSt3v4PphYGHrScUXW82X3DQjMfGxBo9SR7aG9/V/tlO60QZpZU4uJdE TqIx5B5SDXnvIlKt+EpAOeTAumlas9CLoCWzF/uV1DQuSJJWoqRtaC/gECa+H3tt wY9trA8gc3YkeGw2tmgLLjZkVW0fhnf5XvnpBmoStqZPoO6tKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+m+C0VdbMQPjlWNEWW8nMieaBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmIwOGMzMTgtNWRiNy0z MDhjLTg2YjItNWI1NDY2YWQ1YjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3sDKm8Fe9c98jngY908oE9dEDKLkiVF55eQ8xd8gGOGORgTC4oHf3B NY4F0rPdx72EICA8or9Ij7TjRJO3cau+iL3Eaa/44d9C65iyQhcc6MB1O3lWsIl4 5fGIY5swrdQ7kfPF/v+MbZdlauxAuY/YYe01/Yy5cJyzozHUzV+AkiOZ07EtTSX3 S2HMnABWUTV6pkfIF8qhQh1OhyFVtsOn+bZWpwlwBRvgq75dTlR1eNxCGNuHhsOy RpEXyiKUpQKKZIoO+Bvj7v/8Qb4wZg5et4GwwZAj8f1hlP66lL3epJixnTu5UiuR iNp2Vj16QABUIobiuX4RvOCd1f6mvcA= -----END CERTIFICATE-----Generated at Thu Mar 26 03:53:05 2026 by rpki-client