$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa File: 443a0997-c399-3ce3-a707-a3b7e8ec5700.roa (raw, json) Hash identifier: LydbmpL+5hL5z1Q06deNd9N0BpVnOk7t9+zJY8XAmY4= Subject key identifier: F9:36:FA:31:E4:2F:B3:E4:2C:B8:7F:B0:86:8A:95:3F:9B:86:F5:42 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F4C3D493D75866CE7B18C5A40 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 16509 IP address blocks: 130.137.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:49:3d:75:86:6c:e7:b1:8c:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=49dfe390-eb4a-4163-b07a-59c17e69aa90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:cf:f3:ca:8d:6e:df:66:cb:73:ce:ac:31: d0:18:37:a4:99:8f:61:6f:dc:00:a6:5c:96:87:f2: e9:09:c9:3a:2c:f4:8c:ee:56:38:85:f6:a4:49:86: 4e:1b:b6:95:fc:fb:89:30:e9:6a:82:38:2b:e2:4d: 8c:0d:02:39:ee:7b:00:15:75:e3:66:22:77:00:9b: e1:9e:0d:3a:03:a2:26:dd:8d:c8:15:0e:4a:fb:ac: c3:af:a8:02:96:aa:47:80:f5:6a:01:f7:8d:b9:bf: 2f:fc:c2:41:4d:75:df:41:b0:70:ba:05:8e:8f:dc: a4:10:cc:6b:20:fd:fe:0b:6f:81:d1:09:91:dc:0e: fa:44:07:80:21:e8:fd:c9:44:e5:05:b4:83:84:83: c0:fd:89:60:22:fd:a5:ec:cb:69:75:be:33:1e:23: 08:18:a7:51:77:a1:06:59:d5:3e:ae:c2:46:2c:db: bc:8e:5d:7b:50:57:78:1d:e9:68:6e:bb:d0:73:8a: 29:1e:b1:12:d0:02:46:59:57:aa:f7:3e:93:79:53: af:9b:93:04:e9:7c:91:cc:01:65:c5:6f:7a:d6:f2: cd:b7:8f:4a:eb:5a:52:17:23:ae:8e:df:d8:56:37: 72:a0:70:ad:0f:0a:16:79:d6:8e:cb:44:c4:61:dc: de:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:36:FA:31:E4:2F:B3:E4:2C:B8:7F:B0:86:8A:95:3F:9B:86:F5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:11:74:9f:1a:ed:dc:f4:68:37:52:66:d9:82:f7:a4:0e:5d: 5e:bf:3c:64:68:e4:56:3f:cc:ea:38:52:87:62:4f:dc:0f:06: 52:6b:d9:36:a8:0a:0a:fa:01:5b:ef:2c:61:0d:36:4b:36:e0: de:a8:b5:d5:4a:f1:4b:64:09:bf:db:72:da:db:06:58:7f:ac: 50:f6:e3:b5:b9:a0:a0:4f:8e:ac:41:5a:dc:b5:d7:5b:11:a2: fd:fa:4f:2f:82:5e:2a:26:32:93:72:92:8f:6d:e7:16:bc:65: 26:a7:ea:58:8e:03:1f:6b:92:21:40:5b:67:07:77:1d:48:a0: 69:b7:fb:40:55:6a:a1:88:0a:6c:1b:e9:80:e3:26:05:49:27: 3a:ac:52:2c:a6:00:21:04:b1:39:f4:32:d1:5e:5f:e8:96:c1: 6f:f5:7f:d5:fc:9f:5c:d4:78:a6:75:0c:0a:00:f4:6b:d4:ad: 15:9f:bc:51:33:79:56:ba:44:78:89:42:13:e3:77:49:ba:fe: f5:03:a5:eb:97:dd:08:86:67:de:0b:45:ca:8f:19:49:b4:fe: 6d:95:7d:8e:0f:8b:ab:3f:9e:a3:78:67:e1:41:4c:2a:a3:0a: 36:ef:5b:51:37:79:4c:9d:e4:3a:61:e4:74:69:81:44:0a:db: 80:89:5c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUk9dYZs57GMWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NDlkZmUzOTAtZWI0YS00MTYzLWIwN2EtNTljMTdlNjlhYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcLP88qNbt9my3POrDHQGDekmY9hb9wAplyW h/LpCck6LPSM7lY4hfakSYZOG7aV/PuJMOlqgjgr4k2MDQI57nsAFXXjZiJ3AJvh ng06A6Im3Y3IFQ5K+6zDr6gClqpHgPVqAfeNub8v/MJBTXXfQbBwugWOj9ykEMxr IP3+C2+B0QmR3A76RAeAIej9yUTlBbSDhIPA/YlgIv2l7Mtpdb4zHiMIGKdRd6EG WdU+rsJGLNu8jl17UFd4HelobrvQc4opHrES0AJGWVeq9z6TeVOvm5ME6XyRzAFl xW961vLNt49K61pSFyOujt/YVjdyoHCtDwoWedaOy0TEYdzejQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPk2+jHkL7PkLLh/sIaKlT+bhvVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDQzYTA5OTctYzM5OS0z Y2UzLWE3MDctYTNiN2U4ZWM1NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACURdJ8a7dz0aDdSZtmC96QOXV6/PGRo5FY/zOo4UodiT9wPBlJr2Tao Cgr6AVvvLGENNks24N6otdVK8UtkCb/bctrbBlh/rFD247W5oKBPjqxBWty111sR ov36Ty+CXiomMpNyko9t5xa8ZSan6liOAx9rkiFAW2cHdx1IoGm3+0BVaqGICmwb 6YDjJgVJJzqsUiymACEEsTn0MtFeX+iWwW/1f9X8n1zUeKZ1DAoA9GvUrRWfvFEz eVa6RHiJQhPjd0m6/vUDpeuX3QiGZ94LRcqPGUm0/m2VfY4Pi6s/nqN4Z+FBTCqj CjbvW1E3eUyd5Dph5HRpgUQK24CJXBE= -----END CERTIFICATE-----Generated at Sun Sep 27 02:41:35 2026 by rpki-client