$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f8f029f-f0ff-3193-9942-411b97005069.roa File: 1f8f029f-f0ff-3193-9942-411b97005069.roa (raw, json) Hash identifier: s3Y5xoVRkcoV0GY8yM+iuloiFBEkNaOXLpGkKbRGWBU= Subject key identifier: 57:B3:16:FB:1F:70:8F:8A:CB:6B:03:3B:21:4D:95:64:A3:25:A3:19 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584CB121D274C1A785E2B55A5400 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f8f029f-f0ff-3193-9942-411b97005069.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 14618 IP address blocks: 130.137.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:d2:74:c1:a7:85:e2:b5:5a:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=3438a4cd-d464-4460-a06d-d5685bbde232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:df:16:2c:2c:58:c9:fa:03:cb:49:9c:36: f3:74:cc:b6:0f:bc:06:ad:63:6c:97:ff:40:ba:0e: 23:0a:0a:b7:b9:b2:f3:b4:2f:8d:21:1c:4e:12:fb: d1:6b:2a:34:dd:28:f5:9d:f1:00:31:55:a1:5d:49: 83:40:e5:f1:e2:3d:c3:46:32:9d:ef:8b:f8:80:9b: df:8d:47:cb:e1:9e:84:23:a4:ef:5f:c4:07:d5:47: ce:26:4d:49:b6:10:2f:64:b2:0d:df:27:7f:10:dc: 72:07:e2:02:1c:06:91:9f:b6:92:f8:db:f5:3b:2f: a1:1e:57:99:c9:12:c6:83:3e:90:24:f1:64:49:be: e2:94:97:62:e8:36:61:0d:83:4a:44:bb:62:5e:0c: 13:f1:60:28:a7:85:e6:38:86:93:72:d6:94:53:27: 50:af:21:ef:56:b5:e5:65:08:01:5e:31:c9:ba:34: 37:f9:3a:38:ea:59:40:7a:9a:86:96:2d:9e:3e:cc: 85:90:f3:5a:57:c2:ba:ce:18:fc:d4:27:70:43:5f: af:ae:aa:0e:12:aa:ee:5f:95:f7:e3:ed:55:54:f8: 2f:bd:db:70:fe:ce:35:60:9e:0f:7b:ed:54:35:99: f3:e5:56:f2:37:fb:b1:18:71:51:f4:f4:46:dd:e9: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B3:16:FB:1F:70:8F:8A:CB:6B:03:3B:21:4D:95:64:A3:25:A3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f8f029f-f0ff-3193-9942-411b97005069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:23:99:73:fa:01:dd:d4:8d:59:1e:91:88:e3:e6:26:22:03: 2e:d7:20:45:1b:58:74:34:6f:92:38:b8:95:40:0b:5b:70:d9: c6:59:5d:6f:99:0e:d9:38:4d:1a:35:6f:2e:a4:ae:03:35:c2: 9e:9c:1c:18:58:56:ed:fa:e2:de:ca:4f:9d:96:15:de:59:1c: a4:37:6e:62:4b:eb:4e:5a:d1:62:13:a3:f9:08:34:d1:fa:cf: 97:0e:06:04:4e:a5:f3:b0:fa:36:a3:1e:8a:13:63:aa:ab:b2: 3c:12:0c:58:02:7d:b2:f8:b0:c3:b2:6f:4a:19:51:4a:27:d6: d4:c3:2d:f6:4b:9d:66:39:30:cb:51:a2:b3:21:99:d1:bc:43: e1:e9:45:0f:02:5a:71:d4:24:7f:b2:e9:c7:5b:59:52:48:79: 11:0b:b6:bd:b8:e8:d0:42:d6:c2:32:5a:9d:39:cd:87:c4:61: 0e:e8:5d:15:47:10:0c:eb:ff:96:f1:b7:61:b9:f3:c4:7f:ea: de:97:c3:39:b9:92:7a:87:42:16:98:26:8e:51:68:34:6b:fc: 67:b9:4a:62:72:b4:de:59:6b:fd:47:d1:f5:04:64:f1:24:a3: ef:81:f2:ee:ba:5c:9b:cd:43:1b:fe:3a:b4:3e:2e:07:5e:85: 95:bf:29:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIdJ0waeF4rVaVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk MzQzOGE0Y2QtZDQ2NC00NDYwLWEwNmQtZDU2ODViYmRlMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsrfFiwsWMn6A8tJnDbzdMy2D7wGrWNsl/9A ug4jCgq3ubLztC+NIRxOEvvRayo03Sj1nfEAMVWhXUmDQOXx4j3DRjKd74v4gJvf jUfL4Z6EI6TvX8QH1UfOJk1JthAvZLIN3yd/ENxyB+ICHAaRn7aS+Nv1Oy+hHleZ yRLGgz6QJPFkSb7ilJdi6DZhDYNKRLtiXgwT8WAop4XmOIaTctaUUydQryHvVrXl ZQgBXjHJujQ3+To46llAepqGli2ePsyFkPNaV8K6zhj81CdwQ1+vrqoOEqruX5X3 4+1VVPgvvdtw/s41YJ4Pe+1UNZnz5VbyN/uxGHFR9PRG3enmcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFezFvsfcI+Ky2sDOyFNlWSjJaMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMWY4ZjAyOWYtZjBmZi0z MTkzLTk5NDItNDExYjk3MDA1MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgoneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsjmXP6Ad3UjVkekYjj5iYiAy7XIEUbWHQ0b5I4uJVAC1tw2cZZXW+Z Dtk4TRo1by6krgM1wp6cHBhYVu364t7KT52WFd5ZHKQ3bmJL605a0WITo/kINNH6 z5cOBgROpfOw+jajHooTY6qrsjwSDFgCfbL4sMOyb0oZUUon1tTDLfZLnWY5MMtR orMhmdG8Q+HpRQ8CWnHUJH+y6cdbWVJIeRELtr246NBC1sIyWp05zYfEYQ7oXRVH EAzr/5bxt2G588R/6t6Xwzm5knqHQhaYJo5RaDRr/Ge5SmJytN5Za/1H0fUEZPEk o++B8u66XJvNQxv+OrQ+LgdehZW/KR0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:20:29 2026 by rpki-client