$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/85b5591c-78f3-3264-a4a7-3216b1882c46.roa File: 85b5591c-78f3-3264-a4a7-3216b1882c46.roa (raw, json) Hash identifier: PF/Q0Qc/YECpTbOZniWdyYjDM5SO+wuEXw+EKgANnBU= Subject key identifier: 76:CC:29:3B:3A:ED:DD:1A:ED:FA:D1:9E:21:60:FE:AA:D1:2D:8E:A0 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D2BDA1CB58DE742235FF38D40 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/85b5591c-78f3-3264-a4a7-3216b1882c46.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 130.137.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:1c:b5:8d:e7:42:23:5f:f3:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=e99ed39c-a58e-402e-a911-2958988c639f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fd:ba:59:2b:28:de:77:3c:13:f1:ea:5f:e7: e8:7a:f4:ec:a0:d3:15:e5:ba:4f:53:f6:be:c5:c5: e8:e9:86:57:9a:17:18:4b:54:24:98:b6:9f:ab:ca: e9:9d:79:2d:35:47:7d:55:2d:01:fa:a3:bb:3d:74: ca:6b:4b:fc:fa:5e:29:77:03:fb:ac:0c:46:88:47: d0:ae:97:95:2f:68:93:e5:81:4d:c6:66:0f:9d:07: 15:9a:30:ac:56:95:b7:e6:ee:8b:bb:91:74:da:b6: f1:be:c3:9b:a6:0c:e8:af:5e:52:80:8f:1a:98:26: 6e:db:c7:ea:6f:46:85:a4:ad:ca:06:13:90:7f:7d: 59:9a:00:33:90:64:f4:92:cb:f5:28:56:b3:39:0e: 9d:1d:9d:b6:3a:18:89:b4:18:7a:07:c0:11:7e:1c: d2:c3:2e:3d:df:64:6e:03:2a:aa:37:02:56:d0:30: 64:16:ea:c7:01:c1:1b:c1:1b:05:98:c1:6c:54:9c: 70:5a:9d:67:28:c0:8f:2c:cb:c2:b1:96:0b:04:fa: bc:c0:39:f8:b1:01:1e:79:8c:eb:6a:84:ec:ca:4a: 0d:31:ea:4a:65:73:70:87:e7:0d:6d:88:5c:1b:a8: 5a:16:fa:9c:3e:cf:34:a1:57:2a:e2:04:1a:57:cc: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CC:29:3B:3A:ED:DD:1A:ED:FA:D1:9E:21:60:FE:AA:D1:2D:8E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/85b5591c-78f3-3264-a4a7-3216b1882c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:09:4c:6f:de:cb:c3:bd:91:bf:ad:16:37:4d:6e:e3:9d:8c: 28:7d:3b:ff:1a:10:06:68:c9:0e:56:a4:f8:b7:3d:48:a1:1d: 6b:71:de:0a:be:4d:14:ad:f4:17:a6:86:d3:95:89:aa:ac:4e: cf:64:b7:cd:75:8b:37:1d:89:cb:e4:1b:0a:c3:2b:49:40:5c: d2:46:d5:39:66:f4:42:79:ff:89:58:eb:46:84:68:ca:34:3b: 91:02:97:3f:4f:47:bc:36:a4:86:c5:9b:e3:8a:af:f9:c6:3e: 81:fe:fe:5e:ae:3b:5b:0b:b7:96:fd:c9:2e:38:6b:2c:d0:3e: f0:71:b3:86:15:72:6d:d3:bb:7c:5f:d7:03:bc:49:34:1f:8e: f5:f4:0a:aa:2c:cb:2e:f4:3e:55:76:a7:e8:7b:08:7a:e7:21: 80:14:dd:e8:47:98:ca:75:d5:36:fe:da:89:c5:94:29:62:80: 7d:b3:a1:07:af:e5:55:ce:5b:7e:ad:56:ad:8e:c6:3b:d3:c4: bc:76:87:9e:47:95:89:eb:51:11:5f:02:ad:40:d3:db:1c:16: 95:1d:8d:bd:70:82:d8:69:60:86:05:56:71:88:da:dd:45:54: fd:ed:8f:10:52:1b:ad:6f:e9:c8:35:7b:d8:0b:24:31:f4:6d: a1:44:d0:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hy1jedCI1/zjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZTk5ZWQzOWMtYTU4ZS00MDJlLWE5MTEtMjk1ODk4OGM2MzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/26WSso3nc8E/HqX+foevTsoNMV5bpPU/a+ xcXo6YZXmhcYS1QkmLafq8rpnXktNUd9VS0B+qO7PXTKa0v8+l4pdwP7rAxGiEfQ rpeVL2iT5YFNxmYPnQcVmjCsVpW35u6Lu5F02rbxvsObpgzor15SgI8amCZu28fq b0aFpK3KBhOQf31ZmgAzkGT0ksv1KFazOQ6dHZ22OhiJtBh6B8ARfhzSwy4932Ru AyqqNwJW0DBkFurHAcEbwRsFmMFsVJxwWp1nKMCPLMvCsZYLBPq8wDn4sQEeeYzr aoTsykoNMepKZXNwh+cNbYhcG6haFvqcPs80oVcq4gQaV8ylBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbMKTs67d0a7frRniFg/qrRLY6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvODViNTU5MWMtNzhmMy0z MjY0LWE0YTctMzIxNmIxODgyYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIJTG/ey8O9kb+tFjdNbuOdjCh9O/8aEAZoyQ5WpPi3PUihHWtx3gq+ TRSt9BemhtOViaqsTs9kt811izcdicvkGwrDK0lAXNJG1Tlm9EJ5/4lY60aEaMo0 O5EClz9PR7w2pIbFm+OKr/nGPoH+/l6uO1sLt5b9yS44ayzQPvBxs4YVcm3Tu3xf 1wO8STQfjvX0Cqosyy70PlV2p+h7CHrnIYAU3ehHmMp11Tb+2onFlCligH2zoQev 5VXOW36tVq2OxjvTxLx2h55HlYnrURFfAq1A09scFpUdjb1wgthpYIYFVnGI2t1F VP3tjxBSG61v6cg1e9gLJDH0baFE0KY= -----END CERTIFICATE-----Generated at Thu Mar 26 03:58:49 2026 by rpki-client