$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa File: af81503f-94d7-3c4a-82d3-477d600d79fc.roa (raw, json) Hash identifier: aLivzv3mm3R9KAGzJ9AdvgfCr0BAoBz9nCmYE0aZrX4= Subject key identifier: 92:08:55:DF:22:F8:28:88:5F:BE:B3:1D:FF:7B:02:FC:F1:6D:DC:F8 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F15CCE88DD25CE97CD1664600 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 8987 IP address blocks: 130.137.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e8:8d:d2:5c:e9:7c:d1:66:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=3db4e729-b181-4c54-8c58-cff867c71016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3c:aa:30:c6:f1:6e:7c:50:e9:ba:85:04:cd: ce:8a:95:83:03:c9:59:30:bb:6a:55:d4:79:87:00: 97:d7:5a:22:ea:38:aa:3d:98:4a:ad:0a:4f:b4:6f: 6a:42:e4:c6:70:97:99:69:bf:fa:a7:a5:3d:01:74: 1a:eb:1e:10:46:11:e7:bb:22:62:e6:ae:9c:c4:70: bd:3a:91:89:5f:2f:3d:36:8c:27:8d:b6:fb:e6:f8: eb:5e:73:1a:7a:b5:f9:25:73:38:79:75:31:51:a8: d1:5c:77:69:b9:f8:c0:7c:35:30:2c:bf:97:5e:35: 1b:a6:6b:33:23:cc:57:d1:9e:80:7d:ee:d3:52:5d: dd:25:b4:a9:48:37:a1:41:a1:f8:13:1c:56:42:a0: 54:27:96:cd:e9:5a:77:c6:ec:10:27:6e:77:49:6d: 04:76:6b:e5:3c:9d:1c:4e:72:ef:d4:7c:10:a6:7a: 08:a8:a5:39:d1:71:22:17:17:65:9e:c0:ae:e7:cb: 1a:d7:4c:0d:41:0c:f5:89:ea:96:d4:dc:f3:1a:43: c6:de:01:dd:e8:16:78:12:d9:27:88:d7:21:3f:bb: b5:4a:77:c3:e5:3d:7c:a3:06:2f:c5:97:ca:70:33: 3f:6f:28:e6:d8:6a:a3:0b:96:d8:33:4f:ad:30:02: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:08:55:DF:22:F8:28:88:5F:BE:B3:1D:FF:7B:02:FC:F1:6D:DC:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:96:26:d5:89:a4:fd:08:c8:06:c6:01:e7:7b:0d:61:ad:0a: e4:84:c2:1e:dc:b3:81:5f:48:62:d9:43:aa:80:c4:b0:61:31: ac:40:2c:e3:3c:de:ab:cb:9d:ad:ee:92:25:60:5b:47:ed:fa: 2e:02:47:4a:52:9e:cd:6b:d2:aa:48:b2:56:ff:81:e9:bf:52: 87:fd:2c:9c:54:89:a6:5b:9c:2d:9b:e6:d7:44:57:be:b1:70: cf:c8:5e:98:bd:fa:0f:6b:a3:c5:9d:eb:92:69:95:93:86:0a: 85:c8:65:7e:1f:3e:6d:a6:2f:44:53:21:77:b3:d8:7c:e6:d9: e8:94:75:17:3f:c9:d9:78:f5:25:4e:47:77:e9:93:6a:8c:0b: 9c:f9:65:a8:69:62:2d:3a:ed:50:53:e5:10:3c:02:e5:58:59: 45:2a:6e:26:38:6b:ce:2a:9a:c3:0d:59:fd:75:c3:ca:b4:5e: e8:80:f4:7d:2c:3d:45:76:21:b3:26:4c:4c:6a:dc:70:68:1e: db:1e:51:a3:a4:a7:52:ed:72:08:ab:1e:8f:0b:13:48:0c:d0: 8b:4d:2f:5e:fd:25:ab:e6:31:82:bd:17:b6:7e:7c:8a:a0:60: 59:8d:98:dd:c2:b3:12:ee:da:d4:fd:36:33:a9:3e:ce:cd:52: f7:66:2a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzOiN0lzpfNFmRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk M2RiNGU3MjktYjE4MS00YzU0LThjNTgtY2ZmODY3YzcxMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jyqMMbxbnxQ6bqFBM3OipWDA8lZMLtqVdR5 hwCX11oi6jiqPZhKrQpPtG9qQuTGcJeZab/6p6U9AXQa6x4QRhHnuyJi5q6cxHC9 OpGJXy89Nownjbb75vjrXnMaerX5JXM4eXUxUajRXHdpufjAfDUwLL+XXjUbpmsz I8xX0Z6Afe7TUl3dJbSpSDehQaH4ExxWQqBUJ5bN6Vp3xuwQJ253SW0EdmvlPJ0c TnLv1HwQpnoIqKU50XEiFxdlnsCu58sa10wNQQz1ieqW1NzzGkPG3gHd6BZ4Etkn iNchP7u1SnfD5T18owYvxZfKcDM/byjm2GqjC5bYM0+tMAKfewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIIVd8i+CiIX76zHf97Avzxbdz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYWY4MTUwM2YtOTRkNy0z YzRhLTgyZDMtNDc3ZDYwMGQ3OWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSWJtWJpP0IyAbGAed7DWGtCuSEwh7cs4FfSGLZQ6qAxLBhMaxALOM8 3qvLna3ukiVgW0ft+i4CR0pSns1r0qpIslb/gem/Uof9LJxUiaZbnC2b5tdEV76x cM/IXpi9+g9ro8Wd65JplZOGCoXIZX4fPm2mL0RTIXez2Hzm2eiUdRc/ydl49SVO R3fpk2qMC5z5ZahpYi067VBT5RA8AuVYWUUqbiY4a84qmsMNWf11w8q0XuiA9H0s PUV2IbMmTExq3HBoHtseUaOkp1LtcgirHo8LE0gM0ItNL179JavmMYK9F7Z+fIqg YFmNmN3CsxLu2tT9NjOpPs7NUvdmKvg= -----END CERTIFICATE-----Generated at Fri Sep 25 09:39:45 2026 by rpki-client