$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bec75a78-8e2a-39d3-8032-81988783931a.roa File: bec75a78-8e2a-39d3-8032-81988783931a.roa (raw, json) Hash identifier: c9GVvN6f28qHeHEff4VbiOj3aQNn2XxEyRtr7IGH68A= Subject key identifier: 5D:6E:53:86:34:5E:04:66:06:BE:34:BD:3C:46:DC:D2:BE:F0:E4:E7 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D93254276CFF262D0E17D5300 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bec75a78-8e2a-39d3-8032-81988783931a.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 130.137.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:42:76:cf:f2:62:d0:e1:7d:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=3b14efd8-335e-4ddd-b3fb-e64c92cf8e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:54:02:3c:6a:b5:70:7f:81:09:ac:1b:20: 01:68:53:ad:5c:30:b7:59:cd:4b:f3:a3:dc:6e:b4: 9e:72:32:4e:15:2e:8f:75:05:ba:ef:56:36:69:bc: 3a:65:41:82:14:33:48:4f:30:2f:05:52:fd:f2:80: 47:af:7c:ee:09:e6:b3:d5:9d:15:27:7e:5e:dc:24: 77:56:b0:a8:6e:a8:20:ca:c6:22:ac:e8:99:7e:81: fc:2c:bc:58:84:bd:66:2b:f6:78:65:7e:b4:66:48: 16:47:c6:39:5c:8a:b1:96:ee:e6:15:5a:9f:15:4c: 46:33:4b:3a:7b:35:c1:89:a0:9b:2d:17:73:9f:b1: 9f:ee:38:d9:64:98:a9:f1:f5:e4:41:af:27:99:ca: da:1e:16:f3:bd:ba:c7:cd:60:26:fb:32:30:46:b8: 5e:1c:92:51:67:7f:d4:a4:46:6a:6e:db:fb:3c:f0: 59:3c:18:2a:2c:34:03:e4:bf:25:aa:17:9c:b2:2d: d9:31:6f:35:c0:36:ca:e3:1b:33:9b:dd:1a:60:9e: 50:92:ec:96:76:29:12:ea:c8:33:ae:16:ca:ca:92: 92:41:75:a9:9f:96:54:5a:cc:ae:fe:18:e3:46:7d: ba:a0:9a:73:8d:55:56:85:4d:29:50:af:41:34:a0: 25:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6E:53:86:34:5E:04:66:06:BE:34:BD:3C:46:DC:D2:BE:F0:E4:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bec75a78-8e2a-39d3-8032-81988783931a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:5c:19:a9:2f:51:eb:09:30:ca:53:ca:d4:bd:ba:98:31:5f: 4d:5a:70:91:cc:7b:bb:ec:bd:83:57:af:5b:7f:04:c3:92:2a: 7e:f2:19:b9:70:d4:6a:a1:93:dc:64:ee:27:30:aa:4a:d4:d7: de:7d:c3:78:8e:bc:3f:97:ca:05:e3:46:98:a9:03:ec:d5:17: f3:da:5e:13:38:47:ed:0f:83:de:7c:af:0e:e2:dd:37:67:39: 10:59:a5:32:90:52:c6:75:2c:b0:78:b7:ee:e3:07:d9:a0:c2: 81:df:06:f9:e1:bb:92:e4:0c:55:b8:10:3b:ce:6f:5d:69:f9: 1e:49:f2:70:80:c0:4d:da:7f:2c:d1:17:4c:7e:29:15:13:83: 18:be:ce:a4:b6:9e:a9:0f:11:39:9c:44:cd:fb:2f:28:11:5b: 27:97:23:ba:74:9a:04:68:47:91:4e:d6:2a:1b:06:1f:dc:33: 82:f8:eb:50:97:90:22:8d:2b:ea:78:02:00:4e:28:98:21:db: 53:e2:e9:e9:15:e5:03:84:36:65:fe:bd:48:ac:e0:89:78:1b: 0b:53:c6:00:f8:04:98:d2:cb:ea:ac:e3:c8:fb:29:e7:ea:6c: 0b:a4:42:5f:6f:31:65:5e:fc:8d:bc:ee:43:4c:c0:86:34:72: 98:bc:4c:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUJ2z/Ji0OF9UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk M2IxNGVmZDgtMzM1ZS00ZGRkLWIzZmItZTY0YzkyY2Y4ZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYVUAjxqtXB/gQmsGyABaFOtXDC3Wc1L86Pc brSecjJOFS6PdQW671Y2abw6ZUGCFDNITzAvBVL98oBHr3zuCeaz1Z0VJ35e3CR3 VrCobqggysYirOiZfoH8LLxYhL1mK/Z4ZX60ZkgWR8Y5XIqxlu7mFVqfFUxGM0s6 ezXBiaCbLRdzn7Gf7jjZZJip8fXkQa8nmcraHhbzvbrHzWAm+zIwRrheHJJRZ3/U pEZqbtv7PPBZPBgqLDQD5L8lqhecsi3ZMW81wDbK4xszm90aYJ5QkuyWdikS6sgz rhbKypKSQXWpn5ZUWsyu/hjjRn26oJpzjVVWhU0pUK9BNKAlPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1uU4Y0XgRmBr40vTxG3NK+8OTnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmVjNzVhNzgtOGUyYS0z OWQzLTgwMzItODE5ODg3ODM5MzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgoktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNcGakvUesJMMpTytS9upgxX01acJHMe7vsvYNXr1t/BMOSKn7yGblw 1Gqhk9xk7icwqkrU1959w3iOvD+XygXjRpipA+zVF/PaXhM4R+0Pg958rw7i3Tdn ORBZpTKQUsZ1LLB4t+7jB9mgwoHfBvnhu5LkDFW4EDvOb11p+R5J8nCAwE3afyzR F0x+KRUTgxi+zqS2nqkPETmcRM37LygRWyeXI7p0mgRoR5FO1iobBh/cM4L461CX kCKNK+p4AgBOKJgh21Pi6ekV5QOENmX+vUis4Il4GwtTxgD4BJjSy+qs48j7Kefq bAukQl9vMWVe/I287kNMwIY0cpi8TD4= -----END CERTIFICATE-----Generated at Wed May 13 13:02:04 2026 by rpki-client