$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa File: 443a0997-c399-3ce3-a707-a3b7e8ec5700.roa (raw, json) Hash identifier: t34k7RDOf64mUC94G05SizLcumUnUwOxCbIT1InxHRg= Subject key identifier: 28:7A:31:CB:0E:1C:21:53:71:7D:ED:7C:29:9E:DC:85:34:F2:0A:B8 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D2644B6ECC44649C4EF701480 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 130.137.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b6:ec:c4:46:49:c4:ef:70:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=735ec5cb-aa60-412b-8b2e-12fb182e0ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:53:7b:b4:8f:f5:5f:65:3f:55:f8:f8:a1:b5: 70:61:04:2e:5b:07:c4:74:86:63:e3:5b:ab:59:90: 75:be:99:ac:2f:a4:ec:6d:68:b4:cc:60:d4:22:78: 5c:8f:68:d7:85:4c:84:67:56:78:8b:af:88:55:b0: 16:f4:d0:bb:c2:4d:e1:a7:61:a8:de:ea:e9:69:c4: 07:66:07:38:28:c6:77:a1:bd:e2:38:39:2e:59:4c: a6:00:cb:52:bf:57:12:80:6c:51:d6:f2:b9:d0:8e: 74:1b:61:bf:56:b5:e4:50:30:e6:98:2c:a0:da:c3: 99:ac:98:b4:4c:28:51:46:0d:a8:7a:56:57:aa:98: 96:eb:26:b5:9d:1e:e7:20:b7:f1:73:92:5e:b6:4d: 10:c7:33:6c:ec:d2:78:65:c2:18:69:cd:f5:c3:5b: 30:f3:2b:f7:7b:9a:70:9c:cc:82:60:a1:45:c4:92: 01:a7:13:20:6f:a5:5f:58:7a:23:91:72:63:8d:79: 0c:4c:d7:05:da:10:2b:64:7e:7b:a8:37:3c:43:a0: 3b:e5:67:10:56:88:0a:0e:75:5d:27:b1:86:4b:9f: 42:88:2c:2d:ac:98:6b:db:8c:e6:44:fe:7e:95:21: bd:63:f2:1b:65:f3:5e:fc:d1:b3:ed:15:42:4d:5e: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7A:31:CB:0E:1C:21:53:71:7D:ED:7C:29:9E:DC:85:34:F2:0A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:bf:db:3c:e0:f2:87:88:a9:fc:20:fc:81:c8:5e:0c:8b:64: 5d:ac:12:1b:ec:a3:09:f4:e9:2f:b5:3b:49:32:97:fd:73:69: 0a:69:a0:25:d3:b7:f9:ae:ce:0f:dd:95:b5:66:c5:7f:33:b4: 04:89:69:dd:e8:cc:35:33:e8:2d:51:9f:80:92:44:70:e3:db: 28:c1:6f:d9:ef:b0:da:5b:62:9f:ce:b8:81:3b:32:93:12:88: a1:45:d9:83:a1:bb:7d:cb:5e:a3:a6:1b:d7:12:8e:0a:b7:24: 1c:30:d0:df:38:c3:c6:4c:a1:83:2f:50:9c:d0:8f:58:be:80: da:74:76:9e:31:83:06:fa:18:ab:a9:0d:87:14:5b:a0:54:10: 89:62:c6:6c:53:23:06:55:e3:86:58:40:98:48:1d:e3:03:4e: 5e:47:d4:fa:f6:23:5e:78:65:e2:0f:6e:31:8a:bd:ba:3c:df: 85:64:d6:2d:f2:7f:17:70:e6:9d:f6:d2:f7:2a:d4:99:8e:a0: 7d:dd:f9:8f:2a:2c:a3:d2:c3:6a:32:03:d8:ae:66:66:e5:c5: fd:89:1f:23:1a:6b:00:1b:b2:6f:39:b7:4c:a5:11:14:c9:76: a7:e8:49:0a:d9:3c:8d:15:76:e9:42:45:26:91:14:4b:14:c1: 1b:a2:8a:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLbsxEZJxO9wFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk NzM1ZWM1Y2ItYWE2MC00MTJiLThiMmUtMTJmYjE4MmUwY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FN7tI/1X2U/Vfj4obVwYQQuWwfEdIZj41ur WZB1vpmsL6TsbWi0zGDUInhcj2jXhUyEZ1Z4i6+IVbAW9NC7wk3hp2Go3urpacQH Zgc4KMZ3ob3iODkuWUymAMtSv1cSgGxR1vK50I50G2G/VrXkUDDmmCyg2sOZrJi0 TChRRg2oelZXqpiW6ya1nR7nILfxc5Jetk0QxzNs7NJ4ZcIYac31w1sw8yv3e5pw nMyCYKFFxJIBpxMgb6VfWHojkXJjjXkMTNcF2hArZH57qDc8Q6A75WcQVogKDnVd J7GGS59CiCwtrJhr24zmRP5+lSG9Y/IbZfNe/NGz7RVCTV5y+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCh6McsOHCFTcX3tfCme3IU08gq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDQzYTA5OTctYzM5OS0z Y2UzLWE3MDctYTNiN2U4ZWM1NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG/2zzg8oeIqfwg/IHIXgyLZF2sEhvsown06S+1O0kyl/1zaQppoCXT t/muzg/dlbVmxX8ztASJad3ozDUz6C1Rn4CSRHDj2yjBb9nvsNpbYp/OuIE7MpMS iKFF2YOhu33LXqOmG9cSjgq3JBww0N84w8ZMoYMvUJzQj1i+gNp0dp4xgwb6GKup DYcUW6BUEIlixmxTIwZV44ZYQJhIHeMDTl5H1Pr2I154ZeIPbjGKvbo834Vk1i3y fxdw5p320vcq1JmOoH3d+Y8qLKPSw2oyA9iuZmblxf2JHyMaawAbsm85t0ylERTJ dqfoSQrZPI0VdulCRSaRFEsUwRuiiro= -----END CERTIFICATE-----Generated at Thu Mar 26 02:07:59 2026 by rpki-client