$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8cd9c448-cb0d-3f94-99b8-39cfc442d41d.roa File: 8cd9c448-cb0d-3f94-99b8-39cfc442d41d.roa (raw, json) Hash identifier: gQXPGsDQ9OY4z1wJEtnzKOVmmlFRH+4wABF/2SvzoJc= Subject key identifier: E5:F6:9A:4A:16:28:0A:39:DC:10:3F:F3:DF:70:ED:31:FA:BC:80:B1 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D95EFEBD33E32B82A34982A80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8cd9c448-cb0d-3f94-99b8-39cfc442d41d.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 130.137.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:eb:d3:3e:32:b8:2a:34:98:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=e5c2700f-d34f-4aae-a95c-312bdd35c6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:eb:e4:b4:31:5a:43:33:c8:ff:4f:b8:c1: ba:da:7a:f8:8b:8d:05:74:cc:71:a3:08:7a:3a:26: f1:20:44:fe:84:65:89:0d:ad:eb:3f:71:36:32:13: bc:72:91:21:e6:46:4e:05:19:95:61:94:d8:0c:ce: 54:5d:92:29:6b:39:30:10:bd:6a:c6:b9:fb:d8:36: fe:2e:0c:d4:0d:6c:f4:ac:e0:76:fe:2a:65:f1:2f: 21:2a:d3:43:c8:6c:1b:51:a5:f3:f2:68:b3:16:fb: af:b4:ec:d8:00:46:ae:50:05:76:38:d9:f8:3a:03: 80:b0:42:26:46:be:a2:e3:5a:33:55:a3:da:bd:a4: af:29:d8:05:e3:1d:e7:cd:29:ed:35:54:7a:9d:6e: 59:32:f1:a3:ed:30:53:9d:9b:2d:4f:e2:69:4d:06: 39:b3:3a:cd:97:3c:16:bb:fd:50:23:59:30:b8:9a: 35:23:c2:b1:f3:2c:64:ea:16:9c:f3:fb:40:a1:bd: d8:69:78:82:83:b4:1a:24:bc:b4:4a:2e:c7:93:67: 86:d7:1e:dd:4b:0d:36:40:59:11:cd:e0:21:a9:50: 6a:6d:1e:41:72:56:c8:65:c5:82:1f:bc:d9:ba:26: 0c:41:04:44:3d:13:3b:05:44:aa:37:91:4b:3a:bd: eb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F6:9A:4A:16:28:0A:39:DC:10:3F:F3:DF:70:ED:31:FA:BC:80:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8cd9c448-cb0d-3f94-99b8-39cfc442d41d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:98:91:61:f4:81:1d:6e:a0:60:96:4e:91:33:dc:ce:c5:70: 14:c9:2d:71:bc:8d:85:bb:b4:f3:3a:c4:b9:5d:66:27:b6:61: cb:42:37:28:ef:72:56:b3:c3:8b:80:30:18:c6:24:fa:0d:7d: 63:7d:2a:e9:16:65:df:12:b9:3e:84:7b:55:13:98:b1:d2:e0: 2b:28:73:6e:69:ce:34:a9:a0:da:4d:d6:1d:f4:a7:d3:d0:95: ae:b6:0a:bb:ca:21:9e:f2:e4:1c:cc:5f:9b:3f:3d:f7:68:bb: 14:9e:fd:1d:8b:73:8e:d6:b6:bf:f9:3a:3b:49:0a:b9:45:a7: 9e:4a:51:07:c0:db:4f:3c:bf:66:af:3e:63:2b:04:04:9e:2b: 81:35:35:9d:f2:07:9a:29:af:07:f6:11:4d:af:cf:30:6f:bc: 3a:f3:cf:71:57:38:cc:f2:2e:95:8f:36:4b:16:5f:f4:9a:d2: 61:d9:85:1a:71:ce:ae:6d:57:09:f7:40:6a:24:a5:d8:d2:8a: 29:bd:07:d5:57:a7:18:1d:c0:a8:0d:33:cf:4c:ec:46:69:c2: b7:ce:34:9b:49:e6:14:61:63:94:b4:6b:fd:fd:dd:c0:e8:51: 83:54:a2:44:fa:ff:a4:70:e0:c8:de:46:b4:c1:f6:03:28:59: e9:2e:ab:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7+vTPjK4KjSYKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk ZTVjMjcwMGYtZDM0Zi00YWFlLWE5NWMtMzEyYmRkMzVjNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0br5LQxWkMzyP9PuMG62nr4i40FdMxxowh6 OibxIET+hGWJDa3rP3E2MhO8cpEh5kZOBRmVYZTYDM5UXZIpazkwEL1qxrn72Db+ LgzUDWz0rOB2/ipl8S8hKtNDyGwbUaXz8mizFvuvtOzYAEauUAV2ONn4OgOAsEIm Rr6i41ozVaPavaSvKdgF4x3nzSntNVR6nW5ZMvGj7TBTnZstT+JpTQY5szrNlzwW u/1QI1kwuJo1I8Kx8yxk6hac8/tAob3YaXiCg7QaJLy0Si7Hk2eG1x7dSw02QFkR zeAhqVBqbR5BclbIZcWCH7zZuiYMQQREPRM7BUSqN5FLOr3rAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOX2mkoWKAo53BA/899w7TH6vICxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGNkOWM0NDgtY2IwZC0z Zjk0LTk5YjgtMzljZmM0NDJkNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuYkWH0gR1uoGCWTpEz3M7FcBTJLXG8jYW7tPM6xLldZie2YctCNyjv clazw4uAMBjGJPoNfWN9KukWZd8SuT6Ee1UTmLHS4Csoc25pzjSpoNpN1h30p9PQ la62CrvKIZ7y5BzMX5s/PfdouxSe/R2Lc47Wtr/5OjtJCrlFp55KUQfA2088v2av PmMrBASeK4E1NZ3yB5oprwf2EU2vzzBvvDrzz3FXOMzyLpWPNksWX/Sa0mHZhRpx zq5tVwn3QGokpdjSiim9B9VXpxgdwKgNM89M7EZpwrfONJtJ5hRhY5S0a/393cDo UYNUokT6/6Rw4MjeRrTB9gMoWekuq5U= -----END CERTIFICATE-----Generated at Wed May 13 10:16:05 2026 by rpki-client