$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbf4e6a9-7140-3d40-9399-e744892289fa.roa File: bbf4e6a9-7140-3d40-9399-e744892289fa.roa (raw, json) Hash identifier: CbyIGm43aQttFV41evWCdXTXCeHF7xREsdLPKGlzRdA= Subject key identifier: F2:85:FB:59:20:6F:37:40:7D:C5:DF:F0:31:56:C4:7C:82:BD:E1:4A Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D932541AE36F487CC3FA19340 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbf4e6a9-7140-3d40-9399-e744892289fa.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 8987 IP address blocks: 130.137.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:41:ae:36:f4:87:cc:3f:a1:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=b7a35a34-ec14-440f-9b4e-1ef20669e105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:61:16:f4:03:d8:08:ae:29:61:65:30:cb:2f: 22:69:8e:ad:92:7b:2f:1a:99:f5:8c:db:81:22:41: 9a:a4:b0:c6:99:94:8a:f7:9f:06:fa:a3:3e:f9:1f: cf:41:8c:19:2e:39:3a:e8:c8:50:28:af:2b:65:bd: 57:f5:b8:82:7b:6e:c8:f8:db:f0:92:40:c2:5c:31: 80:38:5c:e7:8e:52:f9:b8:b4:d2:fd:2e:24:c8:07: 5e:1a:3a:17:9e:03:72:88:0b:be:a3:09:00:ef:ad: 5a:51:f3:d3:2d:ce:4f:1c:5f:32:8a:a2:2e:90:e0: 59:c1:ae:4b:9b:d7:ec:d9:9a:57:19:62:00:13:16: 1c:1b:d6:53:3f:91:92:97:c1:35:63:43:5a:a4:75: 74:90:f0:71:46:30:1a:b7:ef:a7:45:4a:8a:1f:de: f6:cb:4d:36:f5:81:6d:6f:20:14:b0:aa:86:30:62: 0d:d8:a0:87:fe:fc:01:61:de:24:89:ac:60:c0:73: 28:db:98:7f:56:bb:ed:3d:25:76:d3:7e:a3:2c:c7: 13:f4:87:76:56:c5:03:a4:db:0d:18:04:d2:55:88: b5:34:de:42:bd:12:80:54:ae:73:60:ff:2c:e9:a6: 89:c5:26:08:e2:f0:f1:2b:d0:99:6e:b6:ee:58:00: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:85:FB:59:20:6F:37:40:7D:C5:DF:F0:31:56:C4:7C:82:BD:E1:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbf4e6a9-7140-3d40-9399-e744892289fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:1a:4b:b6:39:94:cf:9d:72:ca:55:35:f4:fc:cc:5e:1b:a4: ea:f1:07:4f:56:f4:39:4d:4e:11:38:3d:1d:1a:5d:de:e9:d6: 69:09:ba:65:b6:c6:b2:5d:6b:4a:64:48:c5:e5:f8:ec:9f:dc: c0:29:69:5f:73:be:4f:fd:a8:93:d7:d7:ee:2f:ec:a5:d3:bd: 21:2a:98:71:5a:39:e7:ba:d5:11:69:9e:7b:31:2d:41:04:cd: d5:48:d1:ad:f3:b6:1d:7c:f0:29:2c:97:11:aa:fa:0a:0c:35: e8:df:80:59:a6:b9:de:e4:46:35:fa:84:40:d1:68:5c:53:98: 71:4e:2c:ad:c1:15:28:95:70:0b:d9:5b:a2:4e:f7:06:54:61: f8:3f:4a:24:55:d7:a6:5d:07:45:ff:ae:c5:79:b7:ba:d5:5e: 27:c1:90:23:59:4b:45:f4:44:ae:96:cd:d5:a8:87:de:8f:ec: db:e2:4d:22:d7:12:d4:2b:e1:81:bb:44:12:16:4e:d3:cb:e1: 3f:42:82:9d:4f:b1:d5:8d:01:83:c1:08:4a:ed:1e:3f:9e:fe: 89:f0:49:33:c0:aa:da:36:a0:9f:79:a5:ca:14:fe:84:db:8a: 39:b0:1a:57:0b:7f:f6:66:46:be:1c:fc:28:d0:0a:58:2d:2f: 23:ef:df:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUGuNvSHzD+hk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk YjdhMzVhMzQtZWMxNC00NDBmLTliNGUtMWVmMjA2NjllMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mEW9APYCK4pYWUwyy8iaY6tknsvGpn1jNuB IkGapLDGmZSK958G+qM++R/PQYwZLjk66MhQKK8rZb1X9biCe27I+NvwkkDCXDGA OFznjlL5uLTS/S4kyAdeGjoXngNyiAu+owkA761aUfPTLc5PHF8yiqIukOBZwa5L m9fs2ZpXGWIAExYcG9ZTP5GSl8E1Y0NapHV0kPBxRjAat++nRUqKH972y0029YFt byAUsKqGMGIN2KCH/vwBYd4kiaxgwHMo25h/VrvtPSV2036jLMcT9Id2VsUDpNsN GATSVYi1NN5CvRKAVK5zYP8s6aaJxSYI4vDxK9CZbrbuWAAMFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKF+1kgbzdAfcXf8DFWxHyCveFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmJmNGU2YTktNzE0MC0z ZDQwLTkzOTktZTc0NDg5MjI4OWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYaS7Y5lM+dcspVNfT8zF4bpOrxB09W9DlNThE4PR0aXd7p1mkJumW2 xrJda0pkSMXl+Oyf3MApaV9zvk/9qJPX1+4v7KXTvSEqmHFaOee61RFpnnsxLUEE zdVI0a3zth188CkslxGq+goMNejfgFmmud7kRjX6hEDRaFxTmHFOLK3BFSiVcAvZ W6JO9wZUYfg/SiRV16ZdB0X/rsV5t7rVXifBkCNZS0X0RK6WzdWoh96P7NviTSLX EtQr4YG7RBIWTtPL4T9Cgp1PsdWNAYPBCErtHj+e/onwSTPAqto2oJ95pcoU/oTb ijmwGlcLf/ZmRr4c/CjQClgtLyPv3wQ= -----END CERTIFICATE-----Generated at Wed May 13 07:22:23 2026 by rpki-client