$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa File: b8891b9b-22d6-354f-9592-c7a2be892635.roa (raw, json) Hash identifier: pmRfruXmIIk9ewyh9/pzgnNtL/tkKXDzVPj1AE89XLk= Subject key identifier: 9C:0F:48:A0:2C:01:34:3B:5D:AB:29:4A:43:C9:EF:ED:F5:63:95:3A Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D492A5A49504E85E340406700 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 130.137.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:5a:49:50:4e:85:e3:40:40:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=7dc2e0b1-a58a-47c1-b472-7d193f037a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:c0:6a:b1:52:50:b4:fd:38:ad:d3:ac:03: 9d:6f:bb:db:bf:73:7f:5c:a1:76:64:91:d1:c4:d9: b5:f4:1b:c5:f8:9d:0a:a2:de:58:70:87:45:83:01: a6:f6:33:56:a7:a5:20:c0:57:80:56:f6:60:d3:bc: 52:f9:9f:14:b0:d1:a8:12:e4:4e:01:bb:13:7c:0e: 78:8e:14:d1:e1:31:2a:34:40:e1:63:97:4d:31:e3: 92:c8:5b:73:e0:06:07:b4:fc:92:49:56:ed:9c:fb: 76:e8:5d:47:97:59:01:b1:ae:df:8a:74:b8:7e:ed: d2:b8:ed:67:dc:64:b3:8e:15:28:53:95:b0:1d:f3: 7a:60:46:9f:63:24:a1:f5:a3:ac:a2:8f:13:66:d8: fa:43:a4:6c:91:64:f6:3d:11:06:cf:dc:89:d8:ec: cf:13:85:c2:db:b9:bc:8a:26:70:28:c3:db:ae:24: 64:20:f7:a5:52:2b:3e:4c:92:93:8c:6b:d1:d6:b5: 5a:6b:64:46:0a:99:77:ec:61:33:c8:0a:0e:b9:67: d3:20:f8:7f:d1:a1:51:26:d8:ca:88:9f:c1:3b:8d: a4:c1:1f:c6:65:ad:b5:2d:e2:64:2f:7f:68:5a:a0: 4f:e7:ec:50:a6:76:20:84:45:fa:9b:b4:23:2e:a3: 45:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0F:48:A0:2C:01:34:3B:5D:AB:29:4A:43:C9:EF:ED:F5:63:95:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:52:b4:fb:1a:48:d4:d7:4c:5e:0d:fc:d8:65:97:76:c7:51: 92:43:8e:72:fc:90:5c:9a:b4:7d:3b:d4:46:4d:0c:d2:58:e0: d9:b1:65:02:58:9f:cb:ae:e2:68:9e:51:bf:35:8a:4f:03:57: e8:78:0d:4f:28:3c:d2:27:90:0e:f2:50:66:05:b1:a3:96:96: 93:9a:61:65:93:9c:d7:99:46:24:5a:8d:59:7c:07:fb:ee:b4: c6:e2:99:9b:87:3c:c3:47:13:c5:4d:b7:22:9b:3f:10:ea:a7: c8:72:1f:e4:4a:a9:30:91:a1:ab:4a:c3:93:9f:cb:74:65:6c: 09:3f:31:ad:22:8d:6b:71:9a:a6:1d:b4:af:c4:d1:05:ec:37: ae:fc:2e:76:1d:f6:0d:21:2d:10:a4:1b:2c:90:10:b1:07:b9: b2:9f:2c:bb:05:b2:d6:0f:4e:7d:a1:dc:03:cb:65:b6:21:3a: bb:6f:6a:44:56:42:63:53:e7:a3:94:f5:4d:3b:9f:f2:69:2d: f3:17:c9:04:f2:b1:26:71:fb:c2:6c:f0:88:bc:fc:ae:a9:0e: bc:37:19:68:e9:4c:16:25:ff:63:71:03:24:f7:ed:77:0d:4c: 01:5e:a1:5e:1b:61:93:dc:cc:f5:44:7d:08:a3:03:83:35:77: 7f:c1:e8:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKlpJUE6F40BAZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk N2RjMmUwYjEtYTU4YS00N2MxLWI0NzItN2QxOTNmMDM3YTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXnAarFSULT9OK3TrAOdb7vbv3N/XKF2ZJHR xNm19BvF+J0Kot5YcIdFgwGm9jNWp6UgwFeAVvZg07xS+Z8UsNGoEuROAbsTfA54 jhTR4TEqNEDhY5dNMeOSyFtz4AYHtPySSVbtnPt26F1Hl1kBsa7finS4fu3SuO1n 3GSzjhUoU5WwHfN6YEafYySh9aOsoo8TZtj6Q6RskWT2PREGz9yJ2OzPE4XC27m8 iiZwKMPbriRkIPelUis+TJKTjGvR1rVaa2RGCpl37GEzyAoOuWfTIPh/0aFRJtjK iJ/BO42kwR/GZa21LeJkL39oWqBP5+xQpnYghEX6m7QjLqNFSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwPSKAsATQ7XaspSkPJ7+31Y5U6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjg4OTFiOWItMjJkNi0z NTRmLTk1OTItYzdhMmJlODkyNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1StPsaSNTXTF4N/Nhll3bHUZJDjnL8kFyatH071EZNDNJY4NmxZQJY n8uu4mieUb81ik8DV+h4DU8oPNInkA7yUGYFsaOWlpOaYWWTnNeZRiRajVl8B/vu tMbimZuHPMNHE8VNtyKbPxDqp8hyH+RKqTCRoatKw5Ofy3RlbAk/Ma0ijWtxmqYd tK/E0QXsN678LnYd9g0hLRCkGyyQELEHubKfLLsFstYPTn2h3APLZbYhOrtvakRW QmNT56OU9U07n/JpLfMXyQTysSZx+8Js8Ii8/K6pDrw3GWjpTBYl/2NxAyT37XcN TAFeoV4bYZPczPVEfQijA4M1d3/B6Gk= -----END CERTIFICATE-----Generated at Thu Mar 26 03:55:09 2026 by rpki-client