$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/12f30ab1-7407-335b-be4f-2acd749e3f62.roa File: 12f30ab1-7407-335b-be4f-2acd749e3f62.roa (raw, json) Hash identifier: CBefxJLLYqXukfOWQE5+VOdbxel4JIGe+/OSzHFPg1Q= Subject key identifier: 50:49:AF:B7:1C:A4:02:6F:EB:10:0F:E1:9E:41:B5:02:AC:D1:B6:6C Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584EFF7772579B972BDF04B92B00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/12f30ab1-7407-335b-be4f-2acd749e3f62.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 14618 IP address blocks: 130.137.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:72:57:9b:97:2b:df:04:b9:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=4246814f-2fa4-42c4-97ac-2173b60e3084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:d2:40:23:8c:3e:af:66:8f:33:84:0a:c1: b3:26:58:97:c6:01:7f:09:dd:90:9e:f6:ed:9e:5c: 40:6c:97:b1:e6:e5:e7:22:25:20:d9:94:7b:d2:85: 2e:9d:a7:24:50:b4:88:3f:28:f3:8a:4e:7d:5a:58: 47:1a:76:5c:5f:b2:92:45:f4:f7:c7:3f:f1:60:2d: ff:07:46:6f:04:7f:e2:dc:33:fc:ed:08:6e:2b:29: ea:cd:ed:0e:6d:2a:5f:ea:b3:e9:ca:3a:80:c1:66: 55:ae:6c:a9:ec:c9:32:94:60:3f:3c:51:9d:9d:06: e3:87:87:d8:e7:5c:5f:f5:03:0d:a7:ce:0f:20:8f: 4d:7f:6c:e0:54:5f:1c:78:a6:0b:ab:49:9a:31:75: 2b:56:b2:cb:70:26:13:bf:72:91:42:5f:bd:9f:c5: a4:38:d4:8d:7c:a0:4d:74:dc:44:7f:47:8a:4e:41: df:de:89:52:16:ec:9e:f5:69:6d:db:9a:7d:09:65: 2b:64:39:65:e7:5c:84:b6:c4:c9:39:7f:8c:70:d2: 95:f6:d5:11:bf:3f:76:5d:3d:9c:e3:b6:ee:3d:f4: 2c:74:9d:70:8f:97:82:24:9c:9a:26:95:d1:8e:1b: fd:32:33:af:19:12:d1:76:80:0c:98:5b:c7:73:33: 2c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:49:AF:B7:1C:A4:02:6F:EB:10:0F:E1:9E:41:B5:02:AC:D1:B6:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/12f30ab1-7407-335b-be4f-2acd749e3f62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5c:61:26:ba:01:96:82:35:49:3f:1c:c3:a9:dc:97:86:d1: 91:75:6a:f1:9d:a8:76:ad:e3:b7:c6:1b:1d:ef:07:fd:71:ce: b1:f8:a3:1b:f2:4b:c3:26:ad:85:50:e7:27:1a:8f:08:82:63: 0a:0b:90:1a:0b:da:71:43:7b:e2:e6:d2:e1:16:6d:43:7a:2d: 22:1b:18:d8:cb:3f:a9:cc:20:41:32:ae:5e:7e:55:31:ce:82: 3f:a2:3f:18:ad:a7:24:d9:f7:de:2c:63:3e:c9:e5:de:04:0d: aa:17:0f:00:f4:9d:ea:2b:40:74:32:a1:c5:e7:12:87:43:66: 64:82:08:1d:c9:53:0a:e1:7b:15:dc:3c:c5:9f:cf:16:46:aa: 83:33:0c:9d:55:12:b0:95:6f:45:a4:f7:e2:58:50:31:8c:5a: 79:90:6a:6d:83:27:df:ad:75:e2:69:71:d7:a6:f4:4d:4e:2c: b4:15:75:e0:11:6f:7c:0c:7d:30:2d:c2:77:08:7b:7f:2e:5b: 87:79:b9:28:60:52:72:6d:1d:0a:f8:3b:ad:ba:26:78:80:6e: 9d:4b:3d:8e:0a:5b:b8:d0:7f:19:62:cf:b4:11:f8:0f:ca:6a: 7c:4f:d7:0f:26:60:67:c3:f9:f9:a6:b1:04:26:b4:34:82:64: 8a:76:b8:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3JXm5cr3wS5KwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk NDI0NjgxNGYtMmZhNC00MmM0LTk3YWMtMjE3M2I2MGUzMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb7SQCOMPq9mjzOECsGzJliXxgF/Cd2Qnvbt nlxAbJex5uXnIiUg2ZR70oUunackULSIPyjzik59WlhHGnZcX7KSRfT3xz/xYC3/ B0ZvBH/i3DP87QhuKynqze0ObSpf6rPpyjqAwWZVrmyp7MkylGA/PFGdnQbjh4fY 51xf9QMNp84PII9Nf2zgVF8ceKYLq0maMXUrVrLLcCYTv3KRQl+9n8WkONSNfKBN dNxEf0eKTkHf3olSFuye9Wlt25p9CWUrZDll51yEtsTJOX+McNKV9tURvz92XT2c 47buPfQsdJ1wj5eCJJyaJpXRjhv9MjOvGRLRdoAMmFvHczMs3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBJr7ccpAJv6xAP4Z5BtQKs0bZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMTJmMzBhYjEtNzQwNy0z MzViLWJlNGYtMmFjZDc0OWUzZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBcYSa6AZaCNUk/HMOp3JeG0ZF1avGdqHat47fGGx3vB/1xzrH4oxvy S8MmrYVQ5ycajwiCYwoLkBoL2nFDe+Lm0uEWbUN6LSIbGNjLP6nMIEEyrl5+VTHO gj+iPxitpyTZ994sYz7J5d4EDaoXDwD0neorQHQyocXnEodDZmSCCB3JUwrhexXc PMWfzxZGqoMzDJ1VErCVb0Wk9+JYUDGMWnmQam2DJ9+tdeJpcdem9E1OLLQVdeAR b3wMfTAtwncIe38uW4d5uShgUnJtHQr4O626JniAbp1LPY4KW7jQfxliz7QR+A/K anxP1w8mYGfD+fmmsQQmtDSCZIp2uMo= -----END CERTIFICATE-----Generated at Sat Oct 3 15:29:49 2026 by rpki-client