$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa File: 0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa (raw, json) Hash identifier: KGHa6hcRywJi3x7LzTJvQtnU8DhAzhvcknbY08lEWcA= Subject key identifier: 4B:BD:17:ED:23:9A:D9:85:2B:95:BE:08:15:28:F2:F8:03:DC:A2:11 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584EFCACC383700ED597F3EB89C4 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 130.137.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c3:83:70:0e:d5:97:f3:eb:89:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=88ca13eb-5084-4754-b19e-fa32ebb2ca44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7c:b7:bf:18:a3:7b:b0:77:f6:d7:4f:ea:f2: 4a:f4:11:17:c4:63:05:c4:e6:47:f6:28:18:d0:fa: 71:72:87:57:1c:dc:f8:59:7f:66:a7:2c:de:ac:66: e7:a2:ee:02:b1:bf:48:6e:5b:b6:b8:bc:c0:c7:64: 52:05:38:39:fa:2b:1b:57:63:c0:d4:79:18:d0:46: cd:d1:71:82:b7:1d:55:14:11:e0:24:95:24:a4:97: cf:a4:44:0a:bc:06:ff:93:7f:69:89:23:69:48:d4: ff:76:2c:03:9f:f6:27:ea:03:8c:8f:9b:72:14:5c: a6:70:44:a7:00:a9:b5:8b:d6:59:0d:46:d9:23:cb: 1c:a5:8a:35:fc:70:14:fe:17:7d:30:38:19:1e:d6: 3f:4f:40:d4:e0:32:2d:8d:c4:bf:ea:80:ee:3d:2c: 95:e0:3b:7f:c8:e9:f7:27:d8:70:3f:65:ae:83:71: 44:69:33:d6:90:f6:81:d8:4c:a2:9b:55:36:6c:dd: ce:04:57:d6:ba:aa:aa:dc:4a:e9:00:db:b4:bd:c8: 69:d0:73:8e:b4:af:a1:09:92:99:49:57:83:52:b1: c2:88:d8:52:88:a2:91:45:51:68:ce:ac:20:10:6b: 73:fb:1c:be:fe:52:d9:44:95:a8:fc:c3:5c:c6:f5: e1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BD:17:ED:23:9A:D9:85:2B:95:BE:08:15:28:F2:F8:03:DC:A2:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4b:24:ab:cd:2c:b5:e2:97:c8:64:00:e7:8f:63:9a:1b:af: f6:1e:d9:c8:87:5c:56:80:5d:40:f1:d9:a4:e6:3d:26:d8:39: 1d:7c:7f:52:0d:35:79:c3:c1:6e:e5:64:9a:7f:0f:93:e5:5b: 45:47:48:b2:61:c0:b0:0c:47:0b:91:4d:5b:90:eb:47:09:c7: a1:0b:da:2d:2e:53:f7:fb:1b:ab:4d:1f:4f:b8:73:8a:9a:ea: e3:25:f5:72:ec:5e:67:06:6e:37:d8:99:3c:0a:75:19:d4:86: 88:c2:4d:b9:be:17:24:29:37:b2:21:b2:e7:34:54:c9:7a:d1: 7f:65:23:f8:bc:e5:21:3c:f4:e6:14:3f:04:fa:c9:a8:7d:7d: d7:42:b9:8b:0b:f4:4b:e0:05:55:2f:11:77:b3:58:f6:52:cc: c7:50:29:c8:80:a5:73:89:d0:ed:b1:bd:ca:62:bc:34:50:30: 03:cd:e2:cd:75:75:95:21:3e:d8:5a:be:87:10:0e:d7:ff:72: d1:76:c3:13:62:5c:53:71:39:bc:ae:8a:37:a9:32:47:c8:c1: 35:45:c5:d8:b7:35:f4:c3:c5:6a:fc:ad:28:e3:4c:ba:48:be: e6:1f:58:66:32:d8:8e:e8:4d:ee:bf:2a:20:33:9f:fa:d5:0b: 0e:74:72:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMODcA7Vl/PricQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk ODhjYTEzZWItNTA4NC00NzU0LWIxOWUtZmEzMmViYjJjYTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3y3vxije7B39tdP6vJK9BEXxGMFxOZH9igY 0PpxcodXHNz4WX9mpyzerGbnou4Csb9Iblu2uLzAx2RSBTg5+isbV2PA1HkY0EbN 0XGCtx1VFBHgJJUkpJfPpEQKvAb/k39piSNpSNT/diwDn/Yn6gOMj5tyFFymcESn AKm1i9ZZDUbZI8scpYo1/HAU/hd9MDgZHtY/T0DU4DItjcS/6oDuPSyV4Dt/yOn3 J9hwP2Wug3FEaTPWkPaB2Eyim1U2bN3OBFfWuqqq3ErpANu0vchp0HOOtK+hCZKZ SVeDUrHCiNhSiKKRRVFozqwgEGtz+xy+/lLZRJWo/MNcxvXhiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu9F+0jmtmFK5W+CBUo8vgD3KIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMGY4ODcxYjQtYjdjOS0z OTE2LThlMzYtNGRlYWJhYjRjMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNLJKvNLLXil8hkAOePY5obr/Ye2ciHXFaAXUDx2aTmPSbYOR18f1IN NXnDwW7lZJp/D5PlW0VHSLJhwLAMRwuRTVuQ60cJx6EL2i0uU/f7G6tNH0+4c4qa 6uMl9XLsXmcGbjfYmTwKdRnUhojCTbm+FyQpN7Ihsuc0VMl60X9lI/i85SE89OYU PwT6yah9fddCuYsL9EvgBVUvEXezWPZSzMdQKciApXOJ0O2xvcpivDRQMAPN4s11 dZUhPthavocQDtf/ctF2wxNiXFNxObyuijepMkfIwTVFxdi3NfTDxWr8rSjjTLpI vuYfWGYy2I7oTe6/KiAzn/rVCw50cpE= -----END CERTIFICATE-----Generated at Mon Sep 28 10:54:23 2026 by rpki-client