$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f0c1c12-64ae-39de-80a7-8a8c75568950.roa File: 5f0c1c12-64ae-39de-80a7-8a8c75568950.roa (raw, json) Hash identifier: bKqXv0KmynAZoB+JQlkFUlPDJoNEjSZZrSwM2j1I1wM= Subject key identifier: EA:15:90:05:BA:05:28:9F:C0:28:92:B7:40:D7:68:F9:FA:A7:4D:45 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F4C3D458C0A1ABD46E07B7FC0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f0c1c12-64ae-39de-80a7-8a8c75568950.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 14618 IP address blocks: 130.137.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:45:8c:0a:1a:bd:46:e0:7b:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=19e35557-81ec-498a-854a-af91abd17a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:7e:43:f3:b0:48:cc:b8:cb:b1:f8:ee:ee: 1a:07:d0:d4:56:a6:7f:e4:22:19:bf:bd:08:00:c2: 88:fb:c4:1c:66:b7:fc:41:43:88:2d:c1:6a:d1:ba: f8:cf:9c:63:ac:9f:b1:b1:40:85:01:43:04:f4:b3: a5:99:2d:aa:a8:cb:7f:79:72:95:97:bb:01:16:de: 6b:48:14:34:59:a1:8b:bd:eb:a2:48:a7:41:b5:cf: 05:46:e8:63:78:08:ca:a0:49:5f:df:fe:f4:95:b6: 98:ff:db:de:58:f5:b5:ec:0a:26:bf:94:98:c5:f3: cb:56:fc:33:72:ea:df:70:c8:9c:58:95:73:4c:dc: 0e:27:47:36:6d:c7:93:28:39:7e:a7:04:0d:00:01: 52:b2:23:56:7c:a6:59:96:1d:33:a9:9f:e8:b7:c2: 50:61:51:f5:99:3a:ff:d0:e2:e4:84:13:09:21:ef: 86:1e:8f:44:55:56:c1:aa:e5:06:3b:65:25:a6:5f: 8c:9a:e0:2b:f6:70:f5:3a:7d:24:d2:27:10:6e:58: 84:3c:57:5d:27:da:d8:37:9b:f8:38:bc:13:f8:f8: 77:76:ff:04:83:2c:f1:16:80:ef:fc:bf:f5:de:2e: a1:b1:f0:dd:a8:43:0e:fb:a3:13:be:53:f5:7f:91: 85:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:15:90:05:BA:05:28:9F:C0:28:92:B7:40:D7:68:F9:FA:A7:4D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f0c1c12-64ae-39de-80a7-8a8c75568950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:4d:55:0b:ab:0c:06:69:95:b2:80:29:8c:37:3e:f7:82:dc: 28:00:43:99:82:2c:fe:74:5d:af:fa:8f:c4:d4:57:21:31:20: 6f:64:8d:00:f4:ae:06:fd:e2:fd:8e:fa:07:0f:61:76:b4:59: 1c:f1:97:96:69:7f:bd:42:5e:37:e7:9e:99:56:a1:f1:f2:6b: ed:94:20:ce:c7:84:a1:0f:d3:cd:e0:9f:33:01:e3:1b:65:38: 9a:a7:28:25:99:da:7a:be:56:c9:83:9d:82:a3:1b:50:b4:16: 33:53:9d:f1:db:ef:8d:bd:f4:dd:90:b9:26:bc:8b:d9:fa:0f: 54:cf:3f:1c:67:ce:78:6c:b7:9b:70:0b:f0:15:33:47:68:f2: 87:ae:9b:5e:4a:fa:27:57:23:cf:0f:41:f7:4d:eb:71:e4:0e: 95:e7:8d:73:19:69:e0:59:97:9e:68:2c:00:88:f2:f7:d0:e9: 85:2a:4b:85:44:3f:08:0f:b0:29:20:ce:40:63:33:b4:25:53: 54:9d:7f:48:44:63:54:0e:d8:33:6b:34:7b:87:6e:f8:67:c0: 95:85:9c:2e:8a:17:76:d2:4f:9b:41:27:84:da:c1:8b:a2:30: df:a9:7a:eb:24:db:4b:5b:63:51:4c:2d:d7:4f:cb:64:bd:11: cf:6f:cc:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUWMChq9RuB7f8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MTllMzU1NTctODFlYy00OThhLTg1NGEtYWY5MWFiZDE3YTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPt+Q/OwSMy4y7H47u4aB9DUVqZ/5CIZv70I AMKI+8QcZrf8QUOILcFq0br4z5xjrJ+xsUCFAUME9LOlmS2qqMt/eXKVl7sBFt5r SBQ0WaGLveuiSKdBtc8FRuhjeAjKoElf3/70lbaY/9veWPW17Aomv5SYxfPLVvwz curfcMicWJVzTNwOJ0c2bceTKDl+pwQNAAFSsiNWfKZZlh0zqZ/ot8JQYVH1mTr/ 0OLkhBMJIe+GHo9EVVbBquUGO2Ulpl+MmuAr9nD1On0k0icQbliEPFddJ9rYN5v4 OLwT+Ph3dv8EgyzxFoDv/L/13i6hsfDdqEMO+6MTvlP1f5GFjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoVkAW6BSifwCiSt0DXaPn6p01FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWYwYzFjMTItNjRhZS0z OWRlLTgwYTctOGE4Yzc1NTY4OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgommMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlNVQurDAZplbKAKYw3PveC3CgAQ5mCLP50Xa/6j8TUVyExIG9kjQD0 rgb94v2O+gcPYXa0WRzxl5Zpf71CXjfnnplWofHya+2UIM7HhKEP083gnzMB4xtl OJqnKCWZ2nq+VsmDnYKjG1C0FjNTnfHb74299N2QuSa8i9n6D1TPPxxnznhst5tw C/AVM0do8oeum15K+idXI88PQfdN63HkDpXnjXMZaeBZl55oLACI8vfQ6YUqS4VE PwgPsCkgzkBjM7QlU1Sdf0hEY1QO2DNrNHuHbvhnwJWFnC6KF3bST5tBJ4TawYui MN+peusk20tbY1FMLddPy2S9Ec9vzFU= -----END CERTIFICATE-----Generated at Sun Sep 27 06:03:59 2026 by rpki-client