$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4e9acd02-d9dd-32c4-8a27-4949a587bf12.roa File: 4e9acd02-d9dd-32c4-8a27-4949a587bf12.roa (raw, json) Hash identifier: E17x2DzwadK2vZHmolmfETsHt1k/HMNpbc9a+lWSXq0= Subject key identifier: 60:29:64:6C:63:C1:74:BC:DF:F7:47:C6:68:BA:E0:06:66:00:C5:AC Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D492A5B2229A0FC0C2FCAE500 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4e9acd02-d9dd-32c4-8a27-4949a587bf12.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 130.137.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:5b:22:29:a0:fc:0c:2f:ca:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=d7748e73-a5ec-4ff6-bb7f-052a304353ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b9:09:0e:1e:db:b4:ab:ce:26:6c:7e:e5:c7: 66:f5:55:53:d2:d7:9b:96:26:f2:08:de:f9:10:0c: 55:2a:c5:dd:99:82:7a:90:46:2a:2e:b8:60:7a:09: 85:95:0f:61:86:70:ed:44:68:e7:20:78:e7:2f:a6: 62:c5:0c:c0:9d:6d:0a:5d:5b:65:db:a0:32:5b:28: 1c:68:de:c2:28:c5:16:e5:c9:d0:6f:0e:31:a5:23: 7a:6d:87:00:f3:41:75:0a:b1:14:95:5b:b9:d1:ac: fa:92:84:13:eb:19:16:b4:4a:80:5c:98:10:c2:76: 9d:01:e8:3b:1a:8e:c7:35:af:f6:37:b6:56:66:9c: 67:35:ac:25:3b:3c:48:8d:20:bb:ad:bb:2d:b5:9b: f5:6e:cc:f3:ab:0a:30:7a:63:00:df:ba:c3:6f:73: b8:9f:35:e9:32:97:99:8d:6b:5e:e6:29:c8:71:08: c0:9e:65:08:1d:01:9d:1e:3d:fd:76:e6:9b:61:c4: 36:ba:c0:b4:cb:30:e3:90:8c:e8:11:67:39:a5:de: 40:aa:e7:36:2e:0f:b5:bc:ef:24:d4:30:8b:71:7c: c2:a8:c2:ad:dc:88:85:f5:28:77:44:2a:38:3a:74: 8f:c2:85:8a:21:a2:88:2e:83:18:10:c0:c8:d7:cb: e5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:29:64:6C:63:C1:74:BC:DF:F7:47:C6:68:BA:E0:06:66:00:C5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4e9acd02-d9dd-32c4-8a27-4949a587bf12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f5:ac:d9:1f:91:0e:69:a2:51:f9:16:2c:8a:7a:3c:44:2f: 52:db:0a:93:58:ba:df:b1:a5:9e:b9:4f:e7:0d:eb:56:2d:a9: c3:6c:5d:37:39:39:40:ae:e4:fe:4b:c1:d0:f4:ae:71:1f:6e: f3:d1:01:ce:34:80:09:88:e4:69:28:7b:b5:ad:43:ee:d0:3c: 7c:fc:b8:7a:fd:62:0a:6b:d4:2c:54:44:91:05:59:d6:34:7b: 1d:cd:2a:a5:f7:21:d8:7a:e2:4c:05:94:66:32:a1:51:1c:29: c0:72:ea:3d:8d:ca:45:12:71:4c:ac:76:0f:bf:9b:cd:4d:79: c1:45:b7:b7:77:83:f0:ba:21:a5:84:b7:f3:77:10:2a:88:a5: 0c:b0:8b:44:82:bc:dc:05:ab:bf:53:b4:af:69:5c:90:22:99: 41:92:57:a7:8d:e6:96:0d:0b:ca:0c:be:f1:aa:25:1c:4f:4a: ab:10:ef:69:59:4c:5d:38:33:be:db:b0:87:51:f1:a8:26:e2: 1f:40:3c:1c:bf:6b:24:0d:3d:6a:2d:ed:9e:53:8d:45:19:cb: e4:3c:da:ce:b7:64:54:45:ec:fc:12:89:0a:03:c3:c8:27:1c: ef:f0:e6:ef:08:ff:dc:99:4a:d5:1d:c0:c1:37:11:b7:ce:d4: 28:04:1e:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKlsiKaD8DC/K5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZDc3NDhlNzMtYTVlYy00ZmY2LWJiN2YtMDUyYTMwNDM1M2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LkJDh7btKvOJmx+5cdm9VVT0teblibyCN75 EAxVKsXdmYJ6kEYqLrhgegmFlQ9hhnDtRGjnIHjnL6ZixQzAnW0KXVtl26AyWygc aN7CKMUW5cnQbw4xpSN6bYcA80F1CrEUlVu50az6koQT6xkWtEqAXJgQwnadAeg7 Go7HNa/2N7ZWZpxnNawlOzxIjSC7rbsttZv1bszzqwowemMA37rDb3O4nzXpMpeZ jWte5inIcQjAnmUIHQGdHj39duabYcQ2usC0yzDjkIzoEWc5pd5Aquc2Lg+1vO8k 1DCLcXzCqMKt3IiF9Sh3RCo4OnSPwoWKIaKILoMYEMDI18vlhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGApZGxjwXS83/dHxmi64AZmAMWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNGU5YWNkMDItZDlkZC0z MmM0LThhMjctNDk0OWE1ODdiZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX1rNkfkQ5polH5FiyKejxEL1LbCpNYut+xpZ65T+cN61YtqcNsXTc5 OUCu5P5LwdD0rnEfbvPRAc40gAmI5Gkoe7WtQ+7QPHz8uHr9Ygpr1CxURJEFWdY0 ex3NKqX3Idh64kwFlGYyoVEcKcBy6j2NykUScUysdg+/m81NecFFt7d3g/C6IaWE t/N3ECqIpQywi0SCvNwFq79TtK9pXJAimUGSV6eN5pYNC8oMvvGqJRxPSqsQ72lZ TF04M77bsIdR8agm4h9APBy/ayQNPWot7Z5TjUUZy+Q82s63ZFRF7PwSiQoDw8gn HO/w5u8I/9yZStUdwME3EbfO1CgEHq4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:36:50 2026 by rpki-client