$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8afe9ef4-a028-3ce3-9909-e7456dbc8602.roa File: 8afe9ef4-a028-3ce3-9909-e7456dbc8602.roa (raw, json) Hash identifier: QVM+HGSjl9Z436OIwZRhJh9XcHaF76cc0UO0Y5vH3vQ= Subject key identifier: 00:E6:9C:4F:DD:58:27:F1:61:B0:2C:14:6C:68:90:41:A8:C2:16:FF Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584DB4A5789FA8C30B9741B5BF00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8afe9ef4-a028-3ce3-9909-e7456dbc8602.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 8987 IP address blocks: 130.137.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:78:9f:a8:c3:0b:97:41:b5:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=65704a8a-be15-4cd4-86cb-01e5bd38638f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3b:c4:e8:41:df:f8:5b:f4:ca:57:a2:db:b9: 51:dc:63:66:39:8c:04:ce:ce:6c:ae:a6:de:e8:7a: 20:c5:54:94:8e:3c:c9:9e:54:b1:10:7f:b4:a5:2f: 5f:2c:86:c5:57:66:3e:ee:90:02:77:15:9a:6d:0e: 6f:25:91:40:c7:22:9a:89:a0:57:18:69:2c:b0:26: 95:2b:a7:20:c9:23:ec:6a:50:47:a3:a3:0c:e1:65: 06:82:96:e6:06:73:ea:99:25:11:d0:7f:74:af:99: 98:94:c5:af:41:93:d7:30:c0:ca:8a:7c:b8:78:b3: 57:e3:6b:17:4c:68:02:28:79:8f:02:41:a9:ca:a7: 0e:ff:3c:eb:d2:6f:55:42:00:db:da:da:cf:73:7c: 3c:73:63:48:02:31:6d:e9:9c:a7:c2:ef:29:2e:1a: 4a:21:60:85:ba:8f:0f:80:ad:28:41:c8:91:c5:05: 94:e9:c6:c8:f3:d4:ab:5f:d1:fe:5e:84:7a:f1:1a: 31:7b:13:6b:f8:cf:1e:9a:c5:5e:b6:3a:96:8a:3b: e0:c5:26:c5:6f:b8:83:9e:eb:5c:4b:cc:7d:44:75: 4a:fb:ad:5a:53:1c:c8:c3:09:94:2f:4c:7c:0b:4e: f7:87:a1:ea:e9:03:18:d3:55:b3:c6:ae:73:80:3c: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E6:9C:4F:DD:58:27:F1:61:B0:2C:14:6C:68:90:41:A8:C2:16:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8afe9ef4-a028-3ce3-9909-e7456dbc8602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:3f:c6:9f:f2:de:11:ca:fa:9b:93:4e:34:29:39:7a:f4:ad: f1:e1:4f:70:82:e4:6b:87:04:08:95:49:79:62:6e:e0:f1:2e: e0:be:21:ae:b1:4e:8b:52:80:56:52:4b:55:a7:5f:11:8c:80: ab:5f:16:bf:8a:46:46:62:9f:3a:53:bc:be:60:ff:f3:07:40: 93:4a:65:6a:65:82:b1:ad:5f:d8:19:0e:d7:68:80:cb:02:1a: f7:92:d9:73:69:82:c9:78:ef:30:0f:cb:ff:c7:fe:6c:f9:53: a6:c2:09:21:ca:a4:ab:e0:b8:da:18:51:47:c6:d0:c5:fb:f7: 85:b4:a4:ba:43:a7:00:c3:28:ce:38:e1:c1:cb:4a:f4:45:79: 0c:d6:50:92:cc:0b:8c:c4:44:94:1a:59:bc:91:6d:3c:aa:4b: d5:49:df:32:1f:98:4c:ff:b9:7d:dd:13:72:02:2c:09:19:e8: 4a:b2:58:bc:8b:1a:c3:23:30:61:4a:73:47:75:c9:40:d8:a3: f6:60:32:72:56:21:ec:bd:35:2b:4c:c2:82:77:ca:f3:d0:ac: bd:5f:b0:f0:98:cd:37:c6:c6:f7:f3:a7:b7:2d:8f:14:28:64: 43:a9:5d:57:57:52:e0:9a:ce:51:e6:2a:bc:2e:ec:5b:3e:dc: 43:5c:7d:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pXifqMMLl0G1vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk NjU3MDRhOGEtYmUxNS00Y2Q0LTg2Y2ItMDFlNWJkMzg2MzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjvE6EHf+Fv0ylei27lR3GNmOYwEzs5srqbe 6HogxVSUjjzJnlSxEH+0pS9fLIbFV2Y+7pACdxWabQ5vJZFAxyKaiaBXGGkssCaV K6cgySPsalBHo6MM4WUGgpbmBnPqmSUR0H90r5mYlMWvQZPXMMDKiny4eLNX42sX TGgCKHmPAkGpyqcO/zzr0m9VQgDb2trPc3w8c2NIAjFt6Zynwu8pLhpKIWCFuo8P gK0oQciRxQWU6cbI89SrX9H+XoR68RoxexNr+M8emsVetjqWijvgxSbFb7iDnutc S8x9RHVK+61aUxzIwwmUL0x8C073h6Hq6QMY01Wzxq5zgDyE7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADmnE/dWCfxYbAsFGxokEGowhb/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGFmZTllZjQtYTAyOC0z Y2UzLTk5MDktZTc0NTZkYmM4NjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8/xp/y3hHK+puTTjQpOXr0rfHhT3CC5GuHBAiVSXlibuDxLuC+Ia6x TotSgFZSS1WnXxGMgKtfFr+KRkZinzpTvL5g//MHQJNKZWplgrGtX9gZDtdogMsC GveS2XNpgsl47zAPy//H/mz5U6bCCSHKpKvguNoYUUfG0MX794W0pLpDpwDDKM44 4cHLSvRFeQzWUJLMC4zERJQaWbyRbTyqS9VJ3zIfmEz/uX3dE3ICLAkZ6EqyWLyL GsMjMGFKc0d1yUDYo/ZgMnJWIey9NStMwoJ3yvPQrL1fsPCYzTfGxvfzp7ctjxQo ZEOpXVdXUuCazlHmKrwu7Fs+3ENcffE= -----END CERTIFICATE-----Generated at Wed May 13 06:07:43 2026 by rpki-client