$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/41b1ae12-f0b7-39c3-96fa-e0ce923ff9e8.roa File: 41b1ae12-f0b7-39c3-96fa-e0ce923ff9e8.roa (raw, json) Hash identifier: CC+mwbl6YNOfRjXqjJkyd5PRVQis3InJ6YP2T+6N9rg= Subject key identifier: B9:EE:99:1E:0C:DA:95:85:FA:C6:77:94:F9:37:D3:7C:1D:21:0E:D2 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584E815F91244D1332C4D8C13C00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/41b1ae12-f0b7-39c3-96fa-e0ce923ff9e8.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 14618 IP address blocks: 130.137.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:91:24:4d:13:32:c4:d8:c1:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=ccd2bfde-06b5-49ca-a6ff-8db0d08edec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:95:40:35:36:2f:03:59:f2:07:00:e6:c2:53: 24:f3:a7:17:9a:bf:78:f5:1d:af:6e:cd:a9:3d:94: 10:1e:b3:49:6b:18:7c:ba:8e:80:9f:61:98:7a:ff: fb:fd:c5:55:45:1f:83:4e:70:fa:34:06:e8:63:94: be:b8:93:59:c7:4f:4a:31:3f:16:f7:62:f6:74:d0: c1:fe:e8:8e:6c:1e:47:33:ea:9e:3a:c6:70:50:ea: bc:61:9b:21:72:fa:98:04:18:85:c3:32:78:54:5b: 53:14:3f:97:76:c4:80:9d:77:02:7f:76:58:1a:05: 00:4c:10:ed:fd:73:8b:d3:1f:a1:2a:ff:56:d1:bc: 81:8f:4b:e6:79:7c:4a:ae:f9:65:84:29:ac:4c:cf: 84:41:99:6d:c0:fa:2b:ec:fa:3a:39:d9:4b:6d:12: 1d:65:22:eb:bc:19:38:91:e1:90:44:ec:49:33:21: ce:c9:3e:88:75:ee:89:31:96:66:fb:e1:4a:51:da: bf:ba:d6:c5:45:ab:0f:5a:fa:f8:33:9e:d1:00:ec: 68:bb:9b:dc:6c:47:6d:9e:7a:fb:9b:b5:7f:4f:89: 49:18:d6:ec:1e:4b:b6:92:21:5e:5e:b3:99:bc:e0: 4f:42:e0:46:12:da:70:70:95:a8:52:71:a0:2d:bb: 9c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EE:99:1E:0C:DA:95:85:FA:C6:77:94:F9:37:D3:7C:1D:21:0E:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/41b1ae12-f0b7-39c3-96fa-e0ce923ff9e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:4f:f3:09:60:00:c5:db:7a:ec:21:3d:98:51:91:fd:c1:9b: 30:35:eb:b3:2f:86:f7:b6:df:79:fb:f2:86:42:ad:cc:c6:da: 1f:01:00:a9:8e:86:6a:c4:02:6f:13:e8:2b:af:e8:65:9c:31: f7:2c:bf:09:79:f3:c2:20:92:c0:aa:35:ae:28:78:6f:d8:a2: e0:63:30:0f:95:01:87:9a:13:8e:32:2d:ed:fd:6a:8e:31:86: d8:31:12:08:7a:fd:d3:6e:f1:b9:45:26:b8:27:6f:fd:0e:c3: 85:ad:dd:f0:98:db:6c:1f:89:5c:c4:66:99:93:82:c3:ab:53: 5b:0b:dd:24:9e:13:fa:de:06:6b:c3:74:6a:06:43:3a:ec:8e: a9:25:6c:ca:0f:cc:c3:3f:66:ee:2f:07:2b:f3:6b:13:5c:04: 3e:72:11:e8:03:5c:b4:d9:49:d5:6d:d4:7a:29:c6:6d:cb:40: c1:7a:ef:b3:70:45:b6:9c:22:77:69:c1:de:6b:c1:47:6f:e1: 2c:53:ca:85:bd:b1:4a:06:b8:8b:df:6e:a4:1e:d8:91:4f:5d: ac:1e:c7:0e:79:5d:fd:e3:09:1e:c3:6d:04:37:6f:22:12:b0: dc:a2:cf:f2:ce:59:c5:a0:02:42:b0:e9:1a:5c:e6:d0:c8:8b: 77:17:de:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX5EkTRMyxNjBPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk Y2NkMmJmZGUtMDZiNS00OWNhLWE2ZmYtOGRiMGQwOGVkZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25VANTYvA1nyBwDmwlMk86cXmr949R2vbs2p PZQQHrNJaxh8uo6An2GYev/7/cVVRR+DTnD6NAboY5S+uJNZx09KMT8W92L2dNDB /uiObB5HM+qeOsZwUOq8YZshcvqYBBiFwzJ4VFtTFD+XdsSAnXcCf3ZYGgUATBDt /XOL0x+hKv9W0byBj0vmeXxKrvllhCmsTM+EQZltwPor7Po6OdlLbRIdZSLrvBk4 keGQROxJMyHOyT6Ide6JMZZm++FKUdq/utbFRasPWvr4M57RAOxou5vcbEdtnnr7 m7V/T4lJGNbsHku2kiFeXrOZvOBPQuBGEtpwcJWoUnGgLbucEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnumR4M2pWF+sZ3lPk303wdIQ7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDFiMWFlMTItZjBiNy0z OWMzLTk2ZmEtZTBjZTkyM2ZmOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINP8wlgAMXbeuwhPZhRkf3BmzA167Mvhve233n78oZCrczG2h8BAKmO hmrEAm8T6Cuv6GWcMfcsvwl588IgksCqNa4oeG/YouBjMA+VAYeaE44yLe39ao4x htgxEgh6/dNu8blFJrgnb/0Ow4Wt3fCY22wfiVzEZpmTgsOrU1sL3SSeE/reBmvD dGoGQzrsjqklbMoPzMM/Zu4vByvzaxNcBD5yEegDXLTZSdVt1Hopxm3LQMF677Nw RbacIndpwd5rwUdv4SxTyoW9sUoGuIvfbqQe2JFPXawexw55Xf3jCR7DbQQ3byIS sNyiz/LOWcWgAkKw6Rpc5tDIi3cX3oo= -----END CERTIFICATE-----Generated at Fri Jul 24 06:43:05 2026 by rpki-client