$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/43ea77a7-6f08-3adb-a385-f80b189b4be5.roa File: 43ea77a7-6f08-3adb-a385-f80b189b4be5.roa (raw, json) Hash identifier: LzbxIkzVlHyFzfpuIA1nutu5LBgENViS+adxWb/i06I= Subject key identifier: E6:95:62:79:0C:7F:B1:E4:BD:FE:93:E8:09:E2:F5:99:E9:74:AE:70 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D492A639F6BB1BCFC13BEB640 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/43ea77a7-6f08-3adb-a385-f80b189b4be5.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 130.137.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:63:9f:6b:b1:bc:fc:13:be:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=9a76f668-7d1b-467c-ba72-cac8dba914d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:54:1b:6e:20:b3:4e:5d:05:a4:e7:67:0c: dc:28:8a:d8:30:42:80:f6:ef:43:e7:5c:0a:7b:28: 48:0c:53:3f:59:c2:26:5e:66:e3:25:40:91:51:2e: 61:50:bb:4d:9c:c6:90:49:16:82:0e:64:56:12:4a: 31:5d:4d:e3:a2:9a:32:48:b0:5f:61:48:ae:f9:e4: e6:78:08:00:c2:39:cc:9d:40:4b:36:f6:82:9d:80: c1:2d:15:a2:ba:b3:41:5b:96:e9:02:3b:43:5f:e6: cf:cf:87:69:38:da:b1:51:06:79:dd:3b:fc:56:3f: 68:71:64:35:84:ea:d1:b2:33:f1:fa:1a:7e:eb:a4: a1:c8:96:68:45:64:1a:7b:e2:ea:75:7a:b1:65:d6: 4d:ce:72:8e:25:e2:6e:91:dc:55:86:b5:96:7f:bf: 3e:4c:89:bc:c3:58:53:c6:71:1c:dc:26:46:35:c3: 5f:2b:ac:11:0b:ff:29:e3:98:72:0c:60:d8:a6:a2: af:9d:9f:ce:47:01:f3:99:cf:7e:93:ca:29:47:ce: bf:2a:7c:47:15:47:aa:9e:1b:ef:09:e1:f3:6a:ba: fe:f7:e1:34:fd:d9:f3:d0:5b:f3:7a:70:8d:72:87: d9:d5:3d:70:55:95:a2:c2:7f:f6:60:b8:85:26:ce: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:95:62:79:0C:7F:B1:E4:BD:FE:93:E8:09:E2:F5:99:E9:74:AE:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/43ea77a7-6f08-3adb-a385-f80b189b4be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d9:64:e1:66:90:d1:c0:b6:4a:d4:d9:56:c4:6d:b0:2e:46: 1c:d0:ac:34:24:6f:f0:b6:17:be:70:ac:2c:8d:74:95:0b:01: 29:40:fd:33:0d:ed:df:16:e9:5f:3a:54:a1:3a:00:22:6a:05: 40:62:78:de:79:72:09:05:f7:73:67:bd:46:0b:1c:d6:94:3a: c0:79:91:b6:e5:87:b0:e0:bc:fa:5b:86:2e:5d:b2:8d:96:1e: 54:33:f2:1e:7d:20:bb:6e:54:3c:05:fa:d3:e5:8d:9f:6f:2d: 52:29:f6:72:35:7a:55:67:99:27:2d:13:b5:a4:3b:0f:9d:b1: af:ed:63:28:cf:95:b3:8b:7d:1c:20:38:d0:d1:ca:a8:30:8e: 35:22:a2:33:8d:60:0a:83:f4:6b:35:3c:fc:79:e7:de:89:e3: 73:98:ca:18:c1:42:8c:cd:0b:41:26:c5:02:b4:ab:ea:8b:0a: 68:d6:c5:77:2e:0a:77:ad:6b:89:c0:20:2f:75:49:e1:58:c3: 7a:ec:0d:42:a7:4b:54:38:2b:ae:52:eb:d6:a4:99:0d:82:f3: 34:e1:29:44:76:b6:d1:c8:a4:38:b9:96:24:3b:fb:89:f2:d6: 5c:8b:19:92:a7:ac:26:5c:3a:04:cb:48:c1:42:94:69:c3:49: 04:b9:9d:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmOfa7G8/BO+tkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk OWE3NmY2NjgtN2QxYi00NjdjLWJhNzItY2FjOGRiYTkxNGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOVUG24gs05dBaTnZwzcKIrYMEKA9u9D51wK eyhIDFM/WcImXmbjJUCRUS5hULtNnMaQSRaCDmRWEkoxXU3jopoySLBfYUiu+eTm eAgAwjnMnUBLNvaCnYDBLRWiurNBW5bpAjtDX+bPz4dpONqxUQZ53Tv8Vj9ocWQ1 hOrRsjPx+hp+66ShyJZoRWQae+LqdXqxZdZNznKOJeJukdxVhrWWf78+TIm8w1hT xnEc3CZGNcNfK6wRC/8p45hyDGDYpqKvnZ/ORwHzmc9+k8opR86/KnxHFUeqnhvv CeHzarr+9+E0/dnz0FvzenCNcofZ1T1wVZWiwn/2YLiFJs61jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaVYnkMf7Hkvf6T6Ani9ZnpdK5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDNlYTc3YTctNmYwOC0z YWRiLWEzODUtZjgwYjE4OWI0YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/ZZOFmkNHAtkrU2VbEbbAuRhzQrDQkb/C2F75wrCyNdJULASlA/TMN 7d8W6V86VKE6ACJqBUBieN55cgkF93NnvUYLHNaUOsB5kbblh7DgvPpbhi5dso2W HlQz8h59ILtuVDwF+tPljZ9vLVIp9nI1elVnmSctE7WkOw+dsa/tYyjPlbOLfRwg ONDRyqgwjjUiojONYAqD9Gs1PPx5596J43OYyhjBQozNC0EmxQK0q+qLCmjWxXcu Cneta4nAIC91SeFYw3rsDUKnS1Q4K65S69akmQ2C8zThKUR2ttHIpDi5liQ7+4ny 1lyLGZKnrCZcOgTLSMFClGnDSQS5nTs= -----END CERTIFICATE-----Generated at Thu Mar 26 15:53:41 2026 by rpki-client