$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbeca169-4170-30f0-b354-aa143422f326.roa File: bbeca169-4170-30f0-b354-aa143422f326.roa (raw, json) Hash identifier: YgRPxPrlDOH+0tnm7cXtEJjj29iiGQPs6vv5htUEOdM= Subject key identifier: 60:67:9E:EC:F9:E4:28:63:76:67:07:21:84:9F:48:1E:9F:28:AA:C9 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F02421A68384E196D0C4EDFB0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbeca169-4170-30f0-b354-aa143422f326.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 16509 IP address blocks: 130.137.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:1a:68:38:4e:19:6d:0c:4e:df:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=6f46eb47-9ae3-4bc1-acc7-13f1059fae10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:af:7b:c0:75:e2:c8:6a:66:0e:82:5b:45: 51:d3:9d:7b:64:40:87:80:f2:26:03:a5:4a:38:08: e4:6c:bb:9e:51:9b:cc:df:55:e8:1d:08:78:4e:fe: 88:9c:23:60:94:98:14:6f:28:75:2a:9b:60:d4:2f: 07:27:b1:28:8a:a1:79:c7:ff:f8:bf:c7:7a:e8:8e: b3:e8:c3:4d:bc:a3:ad:c3:bb:7e:af:75:3a:7d:a5: 70:dd:cc:65:56:10:8e:ef:4c:9c:89:49:f2:68:46: 76:d2:9e:6b:83:2b:2d:e3:79:14:86:30:c6:32:0b: 1d:48:0e:2c:ef:fa:ca:8c:51:3e:5c:58:6c:00:7c: 86:23:bf:ce:e7:16:14:b5:22:39:00:bf:03:ec:46: 5e:14:e9:75:18:68:89:55:82:87:c4:98:20:cc:e6: ed:7a:af:5c:1a:82:87:d0:fb:ab:5f:f6:2a:49:d7: 5a:bb:98:c5:41:53:ca:af:f4:b8:20:3d:e7:6b:d2: 39:10:a7:5f:52:b2:23:4c:90:df:d6:f7:5a:0c:53: d2:15:7e:32:33:9d:8e:3d:3a:f4:08:b3:65:95:d5: be:4b:69:85:34:d8:7e:4f:36:d2:a7:26:6c:34:d6: b1:1f:1d:06:f5:49:53:ad:cf:9a:77:45:37:10:54: ca:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:67:9E:EC:F9:E4:28:63:76:67:07:21:84:9F:48:1E:9F:28:AA:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbeca169-4170-30f0-b354-aa143422f326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6b:dd:c4:15:fe:e7:ca:27:5b:7a:b1:e7:de:49:17:73:3f: 94:a3:82:d4:87:74:40:6f:97:57:70:02:ea:2e:c8:18:41:ea: 4e:36:9b:d8:5b:3c:b7:1d:07:c1:f1:bf:07:d3:1a:02:27:d2: 67:4a:18:24:fc:59:2c:54:42:45:88:c1:6c:0c:60:65:b6:a8: fa:c3:46:2f:3a:45:6d:73:64:cd:d9:95:11:c0:82:39:ef:09: 9e:e4:c8:06:ed:19:04:c6:97:2a:fe:fa:34:67:ef:8a:1a:92: af:98:ca:ef:be:06:50:98:b0:7d:2a:28:4d:d4:00:3f:80:12: 09:d1:00:9f:13:5e:19:1a:1f:45:50:14:e6:ea:8d:f2:54:b6: f9:76:99:20:4a:28:67:bb:b9:84:eb:ab:12:3e:84:67:13:dc: f0:2f:33:ec:43:14:dc:9c:0c:75:e8:7b:8d:17:82:c2:0f:90: 59:4b:bc:3e:a7:14:d5:b6:ac:54:41:9e:e5:56:e0:e4:78:39: eb:00:3b:c9:a9:2a:40:2a:6b:c7:8a:2c:f4:87:92:30:88:f3: a6:4a:8c:14:ce:6c:b8:3b:4c:0a:ed:f9:3f:3d:97:99:4f:b6: 87:6a:90:f2:8f:24:2e:74:04:44:90:48:d0:e8:d6:bc:da:bb: d3:0a:6c:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhpoOE4ZbQxO37AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NmY0NmViNDctOWFlMy00YmMxLWFjYzctMTNmMTA1OWZhZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTuve8B14shqZg6CW0VR0517ZECHgPImA6VK OAjkbLueUZvM31XoHQh4Tv6InCNglJgUbyh1Kptg1C8HJ7EoiqF5x//4v8d66I6z 6MNNvKOtw7t+r3U6faVw3cxlVhCO70yciUnyaEZ20p5rgyst43kUhjDGMgsdSA4s 7/rKjFE+XFhsAHyGI7/O5xYUtSI5AL8D7EZeFOl1GGiJVYKHxJggzObteq9cGoKH 0PurX/YqSddau5jFQVPKr/S4ID3na9I5EKdfUrIjTJDf1vdaDFPSFX4yM52OPTr0 CLNlldW+S2mFNNh+TzbSpyZsNNaxHx0G9UlTrc+ad0U3EFTKBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBnnuz55ChjdmcHIYSfSB6fKKrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmJlY2ExNjktNDE3MC0z MGYwLWIzNTQtYWExNDM0MjJmMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZr3cQV/ufKJ1t6sefeSRdzP5SjgtSHdEBvl1dwAuouyBhB6k42m9hb PLcdB8HxvwfTGgIn0mdKGCT8WSxUQkWIwWwMYGW2qPrDRi86RW1zZM3ZlRHAgjnv CZ7kyAbtGQTGlyr++jRn74oakq+Yyu++BlCYsH0qKE3UAD+AEgnRAJ8TXhkaH0VQ FObqjfJUtvl2mSBKKGe7uYTrqxI+hGcT3PAvM+xDFNycDHXoe40XgsIPkFlLvD6n FNW2rFRBnuVW4OR4OesAO8mpKkAqa8eKLPSHkjCI86ZKjBTObLg7TArt+T89l5lP todqkPKPJC50BESQSNDo1rzau9MKbLo= -----END CERTIFICATE-----Generated at Sun Oct 4 01:24:19 2026 by rpki-client