$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/74f268fa-f60d-3a24-9d21-a0ccf1125e20.roa File: 74f268fa-f60d-3a24-9d21-a0ccf1125e20.roa (raw, json) Hash identifier: HqfSclO8AIVXEwSH4DfAcLSJZJPllzJqWRrDUDsHN+4= Subject key identifier: FC:B6:3E:BE:64:FD:8F:3C:AC:A7:E6:2D:D8:EA:87:F6:11:02:33:E0 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D492A669F933CB1682BA6A6C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/74f268fa-f60d-3a24-9d21-a0ccf1125e20.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 130.137.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:66:9f:93:3c:b1:68:2b:a6:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=331aa0bc-c26c-4be0-af92-cd458fb6483a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3e:81:7b:bb:46:f6:c1:ea:5d:8d:36:58:4b: c1:5d:5e:b2:d1:87:3a:25:43:59:48:a3:d0:8c:f9: 5a:2d:d0:53:96:83:02:25:7d:00:00:13:95:a4:71: 18:df:54:ce:a4:cb:5b:5f:58:ba:db:56:36:a7:a3: 2f:66:3e:0b:a5:87:8d:5a:5a:92:2e:a8:4d:a4:75: 19:ae:12:c9:c6:57:0a:5d:20:73:58:05:6c:78:65: 6c:47:19:30:a1:1b:25:8f:e8:d3:78:d6:6b:c7:af: 89:32:78:53:f0:2e:75:42:02:2f:e9:80:52:de:a5: 01:60:73:78:f6:53:ba:0f:a0:ab:85:95:36:58:ac: d8:54:5f:28:1a:b4:92:24:00:b9:82:2d:43:52:c3: eb:d8:db:ca:3b:a5:79:3b:2f:86:7b:32:15:c2:d4: 29:cf:0d:d1:f8:56:cd:27:63:42:5c:7c:bc:0c:a1: b7:48:5e:21:81:be:11:90:e0:6d:bb:33:f8:48:2d: e9:0e:5a:fd:27:4f:92:a7:8c:50:04:7d:04:e2:e6: 0d:65:9e:11:26:1e:51:bb:bd:1d:92:f4:bf:b2:24: 40:32:bd:dd:1a:ff:e5:d5:9e:e3:41:a5:32:a9:68: e2:df:30:8b:65:8c:8b:3b:48:15:27:17:30:a2:5e: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B6:3E:BE:64:FD:8F:3C:AC:A7:E6:2D:D8:EA:87:F6:11:02:33:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/74f268fa-f60d-3a24-9d21-a0ccf1125e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:de:be:8b:f6:58:39:17:36:2c:43:73:bd:e9:54:3e:3f:2c: 39:af:af:d0:77:5a:53:e0:e2:2f:d1:1a:c8:aa:b9:63:74:a6: c8:13:31:2e:57:07:c1:6e:37:dd:cd:12:1a:b6:cb:d5:70:b0: ba:cd:07:9d:a1:7d:e3:84:ec:f9:f3:ca:71:0f:1d:c4:98:aa: 99:38:8e:fc:91:7e:c0:dd:22:96:06:44:9d:47:5c:7b:88:34: c6:58:e3:43:ff:80:64:95:61:d8:50:b2:e3:d0:34:a5:93:9d: 5b:47:c7:f2:15:32:90:e3:3b:0a:e5:69:73:db:4e:20:1a:4b: d4:2f:f6:32:11:94:ae:94:56:a8:af:39:7b:8f:3f:db:b8:e2: c9:8b:9b:61:71:4b:f6:35:80:ce:27:77:6c:6e:00:8d:d3:fb: 9a:a6:49:8e:7c:84:f4:ba:91:09:77:a6:84:7b:10:f8:c5:98: 12:37:c3:b9:c8:a7:70:fe:e4:3e:66:b6:8f:63:6e:77:50:26: e4:86:bd:80:69:bb:86:05:78:ee:9b:89:66:f5:b5:e2:31:41: 17:ec:bd:07:26:af:1a:27:6b:ff:aa:a5:68:92:35:c3:b2:d4: 20:a3:6e:b5:90:2b:07:46:a0:ff:d9:b2:68:d5:28:3b:d0:72: cc:70:f8:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmafkzyxaCumpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MzMxYWEwYmMtYzI2Yy00YmUwLWFmOTItY2Q0NThmYjY0ODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz6Be7tG9sHqXY02WEvBXV6y0Yc6JUNZSKPQ jPlaLdBTloMCJX0AABOVpHEY31TOpMtbX1i621Y2p6MvZj4LpYeNWlqSLqhNpHUZ rhLJxlcKXSBzWAVseGVsRxkwoRslj+jTeNZrx6+JMnhT8C51QgIv6YBS3qUBYHN4 9lO6D6CrhZU2WKzYVF8oGrSSJAC5gi1DUsPr2NvKO6V5Oy+GezIVwtQpzw3R+FbN J2NCXHy8DKG3SF4hgb4RkOBtuzP4SC3pDlr9J0+Sp4xQBH0E4uYNZZ4RJh5Ru70d kvS/siRAMr3dGv/l1Z7jQaUyqWji3zCLZYyLO0gVJxcwol6nJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPy2Pr5k/Y88rKfmLdjqh/YRAjPgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNzRmMjY4ZmEtZjYwZC0z YTI0LTlkMjEtYTBjY2YxMTI1ZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgoljMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTevov2WDkXNixDc73pVD4/LDmvr9B3WlPg4i/RGsiquWN0psgTMS5X B8FuN93NEhq2y9VwsLrNB52hfeOE7PnzynEPHcSYqpk4jvyRfsDdIpYGRJ1HXHuI NMZY40P/gGSVYdhQsuPQNKWTnVtHx/IVMpDjOwrlaXPbTiAaS9Qv9jIRlK6UVqiv OXuPP9u44smLm2FxS/Y1gM4nd2xuAI3T+5qmSY58hPS6kQl3poR7EPjFmBI3w7nI p3D+5D5mto9jbndQJuSGvYBpu4YFeO6biWb1teIxQRfsvQcmrxona/+qpWiSNcOy 1CCjbrWQKwdGoP/ZsmjVKDvQcsxw+NM= -----END CERTIFICATE-----Generated at Thu Mar 26 02:06:57 2026 by rpki-client