$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/02d4dbb7-99e0-368d-bd3c-b8b09bf98779.roa File: 02d4dbb7-99e0-368d-bd3c-b8b09bf98779.roa (raw, json) Hash identifier: Bk8CgehYT5V6AlB5oqWx8QPWVnwoRuNqVc7Z1Cd9zaI= Subject key identifier: 40:FA:2E:B8:50:1A:90:A9:F9:AD:83:33:50:CE:A3:44:1D:41:52:50 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584EFF77710AB710E53FFAC1D8B0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/02d4dbb7-99e0-368d-bd3c-b8b09bf98779.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 14618 IP address blocks: 130.137.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:71:0a:b7:10:e5:3f:fa:c1:d8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=d39978f6-d2c8-4db0-b920-93e833aeba9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:41:32:f2:8c:30:04:2e:93:65:21:60:be: 78:80:f3:48:1c:7c:68:fe:ff:9d:58:4c:fd:59:7d: 57:78:e4:d1:17:c6:c4:5f:64:da:54:3d:03:7b:a9: cd:55:bf:1c:ea:eb:11:d5:d9:73:5d:6c:01:2a:0e: e1:a3:48:48:14:2d:a8:01:aa:9f:e6:e5:d9:2f:4a: f4:66:12:4e:29:ed:a1:bf:96:28:8b:8e:47:fc:01: d1:62:71:15:38:e2:bb:40:83:8c:50:34:23:ae:98: 82:e0:e1:47:c9:b6:73:05:86:f8:d9:6d:0e:6c:e8: d4:48:d3:33:00:96:45:9c:6a:1a:2d:87:9f:13:70: a1:e5:aa:b3:d6:bb:91:1d:79:87:20:73:61:f9:a1: c1:1f:d0:4f:b4:58:db:09:d7:ce:09:af:4e:84:b9: 7a:0e:97:b8:3c:c8:b2:ca:74:40:bc:94:a9:13:03: 7e:bf:48:4f:41:21:f3:cf:fa:fe:7b:5a:ec:39:2c: 87:2b:93:e7:66:3f:3b:b3:13:86:e9:a9:cd:c7:84: 4e:0d:51:90:56:ce:b3:92:81:2e:9d:4c:09:ba:fb: 55:25:2d:21:8f:d7:8c:5d:2b:b7:95:32:ad:db:1a: a2:bf:40:0c:22:76:35:c1:61:85:6c:83:b6:4a:54: b2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FA:2E:B8:50:1A:90:A9:F9:AD:83:33:50:CE:A3:44:1D:41:52:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/02d4dbb7-99e0-368d-bd3c-b8b09bf98779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:02:51:28:eb:f6:77:93:9f:71:a7:d7:21:54:17:ca:33:98: 11:64:75:4b:47:b7:63:11:18:7d:b3:33:a5:19:7c:e2:50:4c: 27:44:8c:73:68:7e:c2:70:d3:ea:1a:70:4c:e8:07:a2:e0:71: 0a:ea:5a:51:b9:9c:d7:2f:9b:16:3c:cd:01:39:16:78:c3:0b: aa:15:15:b7:db:e6:04:fa:9c:bf:42:ad:2e:54:45:16:b8:b1: fc:4c:0d:37:0b:f1:e9:0e:f9:88:55:33:da:9b:6f:5b:04:37: 10:58:57:37:c0:48:9c:ee:3b:63:de:2e:90:28:25:9b:43:72: 7f:fc:3d:f1:e0:c9:97:b6:fc:08:7c:52:de:7c:0f:30:19:6c: d7:72:35:5c:56:43:be:64:71:11:11:5e:75:c3:b0:b0:86:c2: 15:69:8d:19:cf:67:10:14:f0:a6:26:11:b3:c8:9c:67:5f:be: a4:9a:38:2e:d5:6b:e3:07:3e:7d:c2:96:4d:d1:26:a4:9c:00: 67:2a:77:91:d1:e7:9f:c7:28:41:8a:40:7e:62:84:76:0f:4d: 54:ef:d8:3b:a5:f1:30:b8:6b:c5:f6:0b:0d:cb:9f:be:3e:73: b4:26:a0:28:ba:39:ef:dd:d5:3a:a4:01:6f:02:ef:2b:b0:4f: 88:cc:34:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3EKtxDlP/rB2LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk ZDM5OTc4ZjYtZDJjOC00ZGIwLWI5MjAtOTNlODMzYWViYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx5BMvKMMAQuk2UhYL54gPNIHHxo/v+dWEz9 WX1XeOTRF8bEX2TaVD0De6nNVb8c6usR1dlzXWwBKg7ho0hIFC2oAaqf5uXZL0r0 ZhJOKe2hv5Yoi45H/AHRYnEVOOK7QIOMUDQjrpiC4OFHybZzBYb42W0ObOjUSNMz AJZFnGoaLYefE3Ch5aqz1ruRHXmHIHNh+aHBH9BPtFjbCdfOCa9OhLl6Dpe4PMiy ynRAvJSpEwN+v0hPQSHzz/r+e1rsOSyHK5PnZj87sxOG6anNx4RODVGQVs6zkoEu nUwJuvtVJS0hj9eMXSu3lTKt2xqiv0AMInY1wWGFbIO2SlSymwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFED6LrhQGpCp+a2DM1DOo0QdQVJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMDJkNGRiYjctOTllMC0z NjhkLWJkM2MtYjhiMDliZjk4Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0CUSjr9neTn3Gn1yFUF8ozmBFkdUtHt2MRGH2zM6UZfOJQTCdEjHNo fsJw0+oacEzoB6LgcQrqWlG5nNcvmxY8zQE5FnjDC6oVFbfb5gT6nL9CrS5URRa4 sfxMDTcL8ekO+YhVM9qbb1sENxBYVzfASJzuO2PeLpAoJZtDcn/8PfHgyZe2/Ah8 Ut58DzAZbNdyNVxWQ75kcRERXnXDsLCGwhVpjRnPZxAU8KYmEbPInGdfvqSaOC7V a+MHPn3Clk3RJqScAGcqd5HR55/HKEGKQH5ihHYPTVTv2Dul8TC4a8X2Cw3Ln74+ c7QmoCi6Oe/d1TqkAW8C7yuwT4jMNE0= -----END CERTIFICATE-----Generated at Sun Sep 20 21:44:24 2026 by rpki-client