$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/baf2010e-1789-353a-a4c9-fdd1885da1c6.roa File: baf2010e-1789-353a-a4c9-fdd1885da1c6.roa (raw, json) Hash identifier: xxFbQ2NxZ1uZOyJUDqkuQot8+TsqZWfCkju1wHeCRw0= Subject key identifier: 74:7C:EB:B8:0F:E7:90:43:CE:BA:84:68:DB:1E:81:9C:63:37:81:20 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ED861ECA0E398DE5F39E7AF40 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/baf2010e-1789-353a-a4c9-fdd1885da1c6.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 16509 IP address blocks: 130.137.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:ec:a0:e3:98:de:5f:39:e7:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=53d66f82-75a9-4fcb-9c7f-2777d29a16ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a8:e7:4f:33:c9:df:70:21:b7:b9:f1:da:20: 3c:87:89:c0:3c:de:b3:b9:fe:b1:88:73:b8:8b:28: 6d:1f:dc:26:49:f9:a7:94:ef:63:9a:8c:e7:51:cf: 9b:cb:83:6e:c8:21:e1:51:71:c6:35:e5:4d:07:48: 30:ce:b9:a5:f7:f1:7c:32:83:05:60:6e:ac:3f:67: 14:27:af:f3:46:7b:cf:77:fc:89:51:7a:3f:c3:0c: 99:86:cf:2d:81:ce:18:89:72:ff:f8:ab:2a:61:5a: 8a:d8:28:98:72:07:02:61:ac:27:d6:ca:ee:65:ac: 79:e4:0c:41:f0:c6:2c:ef:b4:45:f7:59:e2:98:8d: 0d:81:03:70:1d:d0:e6:e0:be:e3:2e:ad:3b:62:f5: f9:17:35:fe:a7:3f:3c:de:a2:ac:2a:0f:88:16:12: 22:48:c3:bb:7b:d4:97:38:c9:12:96:cd:7a:b0:01: cc:58:09:41:d1:d6:a2:4f:72:12:f6:79:b0:28:bd: 3b:d9:c6:e6:a5:bc:df:d1:4f:96:19:b9:7f:ec:61: 89:c8:57:18:5f:ad:bd:6e:f3:fc:ed:6c:17:45:25: 50:b3:c3:82:39:de:1b:48:ea:40:a4:b1:46:92:20: d8:0f:c2:e7:c7:82:f5:25:1d:4b:91:5a:83:78:e0: b5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7C:EB:B8:0F:E7:90:43:CE:BA:84:68:DB:1E:81:9C:63:37:81:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/baf2010e-1789-353a-a4c9-fdd1885da1c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a0:dc:ed:13:61:f9:4a:bc:91:f1:3f:53:14:f0:96:3a:3a: 5b:56:ca:c7:22:14:13:7f:7d:fc:97:92:c0:40:76:5a:32:50: 76:90:ce:3a:4b:45:3d:ef:45:bc:fc:34:1a:49:af:05:64:ee: a2:ab:dc:19:10:a1:ea:c4:0c:2b:d7:5e:4f:16:bc:3f:ca:5f: 99:93:17:13:bc:0b:49:fc:bf:a8:08:6a:95:3d:ad:f0:a5:6f: 05:fa:c8:0f:b5:53:41:1d:91:89:7d:41:69:8e:b4:5e:9a:60: 3a:64:99:ab:c9:69:22:73:8e:7c:0d:47:29:f0:2f:3f:3e:d4: 04:e8:3e:36:c4:a5:3a:98:5d:a2:22:a8:73:6a:8e:a0:59:30: 67:a9:a8:28:07:b7:09:0b:d4:61:4a:40:25:4c:dc:3a:3e:39: 15:2b:8e:bf:85:0f:43:33:2e:8f:b9:60:cc:e8:f3:55:b5:7d: c3:b8:f4:91:4f:3a:f3:1e:08:f9:45:af:e1:2e:08:05:51:45: e0:de:a7:e7:d4:18:c9:4a:d8:6c:2e:64:f7:f3:00:d8:d4:a1: 53:8e:1c:0e:43:c7:58:d6:8a:0f:1a:ac:38:0b:65:64:0c:84: e0:fc:87:c7:1a:9f:a1:98:2c:b7:b0:28:f8:7a:0a:38:46:0a: ed:49:76:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYeyg45jeXznnr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NTNkNjZmODItNzVhOS00ZmNiLTljN2YtMjc3N2QyOWExNmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKjnTzPJ33Aht7nx2iA8h4nAPN6zuf6xiHO4 iyhtH9wmSfmnlO9jmoznUc+by4NuyCHhUXHGNeVNB0gwzrml9/F8MoMFYG6sP2cU J6/zRnvPd/yJUXo/wwyZhs8tgc4YiXL/+KsqYVqK2CiYcgcCYawn1sruZax55AxB 8MYs77RF91nimI0NgQNwHdDm4L7jLq07YvX5FzX+pz883qKsKg+IFhIiSMO7e9SX OMkSls16sAHMWAlB0daiT3IS9nmwKL072cbmpbzf0U+WGbl/7GGJyFcYX629bvP8 7WwXRSVQs8OCOd4bSOpApLFGkiDYD8Lnx4L1JR1LkVqDeOC1twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHR867gP55BDzrqEaNsegZxjN4EgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmFmMjAxMGUtMTc4OS0z NTNhLWE0YzktZmRkMTg4NWRhMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+g3O0TYflKvJHxP1MU8JY6OltWysciFBN/ffyXksBAdloyUHaQzjpL RT3vRbz8NBpJrwVk7qKr3BkQoerEDCvXXk8WvD/KX5mTFxO8C0n8v6gIapU9rfCl bwX6yA+1U0EdkYl9QWmOtF6aYDpkmavJaSJzjnwNRynwLz8+1AToPjbEpTqYXaIi qHNqjqBZMGepqCgHtwkL1GFKQCVM3Do+ORUrjr+FD0MzLo+5YMzo81W1fcO49JFP OvMeCPlFr+EuCAVRReDep+fUGMlK2GwuZPfzANjUoVOOHA5Dx1jWig8arDgLZWQM hOD8h8can6GYLLewKPh6CjhGCu1Jdp8= -----END CERTIFICATE-----Generated at Sun Oct 11 10:27:15 2026 by rpki-client