$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc6acee1-05dc-3606-87fa-450e4ed6f02d.roa File: dc6acee1-05dc-3606-87fa-450e4ed6f02d.roa (raw, json) Hash identifier: GFJLuS3AIyCU/Nb0clYnKAm+mqGjQBOMp1cKcOuB6XY= Subject key identifier: BF:DB:06:98:86:16:5D:A1:1E:AB:58:FB:9E:22:C2:AA:90:14:AD:84 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584E94EA56BC498CE2BC2B0AB080 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc6acee1-05dc-3606-87fa-450e4ed6f02d.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 14618 IP address blocks: 130.137.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:56:bc:49:8c:e2:bc:2b:0a:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=597b158e-d6ef-4f3b-927c-cb4d4c9a1780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:89:a3:15:a9:ec:fc:b7:75:e9:68:a1:94: ee:42:62:0d:8f:b3:32:51:41:1f:d6:3f:b6:65:17: 71:7c:04:ef:06:bd:ee:01:1e:63:20:44:0c:2e:b9: 52:c5:04:1b:6b:c1:65:1a:50:40:2e:5c:d4:71:45: f5:96:c9:31:96:c5:e9:08:5b:63:4e:7b:00:40:67: 25:a7:d9:e9:27:3d:90:75:42:fb:1e:41:e8:32:78: e7:5e:73:c8:af:1b:07:1c:de:fa:67:20:3c:74:0d: 21:29:b6:6c:4d:75:54:0d:76:50:bb:44:4c:35:b6: e1:9b:7a:6d:d2:66:36:40:72:c1:ac:d8:8f:ed:b9: e1:5f:55:38:97:d2:f3:0b:2f:3f:21:58:e6:92:59: 12:6d:cc:54:7f:56:19:47:f8:71:de:bc:7c:d6:79: 8a:cf:cc:a7:4d:62:f5:ff:9f:65:c2:79:07:0b:60: 8f:e3:2f:c8:1a:df:bf:71:8b:58:b6:fd:23:2d:52: 6a:5e:99:9e:b1:2a:8d:00:00:0f:aa:6c:ce:24:27: fe:c1:8f:b8:30:ee:d5:a7:17:69:79:2b:7a:d9:bb: 55:70:16:d4:27:d7:e2:e2:6e:01:dd:71:eb:43:fd: 59:bd:45:c4:15:5b:0d:00:1d:41:70:c3:60:0f:d4: 15:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DB:06:98:86:16:5D:A1:1E:AB:58:FB:9E:22:C2:AA:90:14:AD:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc6acee1-05dc-3606-87fa-450e4ed6f02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:67:39:c9:2a:58:df:6c:46:2b:99:19:db:49:29:25:b4:7f: 28:68:5f:f9:32:50:77:8e:b7:08:0a:1d:6b:76:25:36:c8:50: 7a:34:1a:e1:e7:80:90:f2:e3:04:b7:96:13:ee:ff:66:3e:4d: 6d:6f:4e:7b:b1:a9:49:0f:30:5b:4d:9c:01:ab:f0:c8:f5:63: 14:5e:37:10:33:64:07:10:6a:f0:7b:aa:27:04:76:e2:44:3f: 5a:02:99:9e:f9:44:ee:05:ff:61:c8:a0:e0:b0:2c:df:9d:98: 11:56:17:ec:11:5b:cd:22:8d:8f:eb:fa:89:13:4a:1b:2e:b1: c1:3e:7b:5d:cd:de:60:3c:04:83:29:43:a7:1e:94:b1:c1:25: 08:51:1f:35:9c:e6:ba:2f:6f:d6:03:30:af:2d:99:9d:42:a4: a0:80:af:31:13:d2:13:51:30:d5:3a:9a:ba:83:c4:d9:17:c6: 4f:cd:d9:5f:55:9f:58:5c:f4:c3:52:d9:44:3b:8b:4f:3c:a0: 6a:94:80:9b:3a:47:c5:c4:8f:e7:7f:22:ee:d2:89:da:d1:1f: 06:59:29:ab:34:bf:9a:ce:5e:c2:3e:ca:9e:91:90:fd:ea:bb: c2:7a:5c:d2:a0:5c:fc:e5:e2:b8:fd:70:d9:40:60:56:f6:5e: b1:d0:55:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6la8SYzivCsKsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk NTk3YjE1OGUtZDZlZi00ZjNiLTkyN2MtY2I0ZDRjOWExNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFSJoxWp7Py3delooZTuQmINj7MyUUEf1j+2 ZRdxfATvBr3uAR5jIEQMLrlSxQQba8FlGlBALlzUcUX1lskxlsXpCFtjTnsAQGcl p9npJz2QdUL7HkHoMnjnXnPIrxsHHN76ZyA8dA0hKbZsTXVUDXZQu0RMNbbhm3pt 0mY2QHLBrNiP7bnhX1U4l9LzCy8/IVjmklkSbcxUf1YZR/hx3rx81nmKz8ynTWL1 /59lwnkHC2CP4y/IGt+/cYtYtv0jLVJqXpmesSqNAAAPqmzOJCf+wY+4MO7Vpxdp eSt62btVcBbUJ9fi4m4B3XHrQ/1ZvUXEFVsNAB1BcMNgD9QV4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/bBpiGFl2hHqtY+54iwqqQFK2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZGM2YWNlZTEtMDVkYy0z NjA2LTg3ZmEtNDUwZTRlZDZmMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1nOckqWN9sRiuZGdtJKSW0fyhoX/kyUHeOtwgKHWt2JTbIUHo0GuHn gJDy4wS3lhPu/2Y+TW1vTnuxqUkPMFtNnAGr8Mj1YxReNxAzZAcQavB7qicEduJE P1oCmZ75RO4F/2HIoOCwLN+dmBFWF+wRW80ijY/r+okTShsuscE+e13N3mA8BIMp Q6celLHBJQhRHzWc5rovb9YDMK8tmZ1CpKCArzET0hNRMNU6mrqDxNkXxk/N2V9V n1hc9MNS2UQ7i088oGqUgJs6R8XEj+d/Iu7SidrRHwZZKas0v5rOXsI+yp6RkP3q u8J6XNKgXPzl4rj9cNlAYFb2XrHQVck= -----END CERTIFICATE-----Generated at Fri Jul 24 09:06:27 2026 by rpki-client