$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa File: 2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa (raw, json) Hash identifier: ZqlkVUlnxKWRAlkFvT2UlgWmi5e/nJpTKOh9LL+SxEs= Subject key identifier: 1F:03:45:35:6A:C2:F7:96:AA:7D:04:DB:06:12:73:02:F9:3F:C5:D1 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584CAE5E7B684C79387734D77B00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 16509 IP address blocks: 130.137.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:7b:68:4c:79:38:77:34:d7:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b3075bdb-3511-4ec4-befb-ee357691c5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:41:be:71:9e:35:ea:47:a3:22:d4:4a:3f: 79:8d:43:8c:b5:e6:83:b9:88:73:f4:a0:53:60:7e: bf:bd:ac:bc:e7:3b:69:bf:c1:ec:a1:4d:75:b3:b8: 4b:0d:b0:5e:e8:d7:bc:ab:d1:fb:6f:16:2d:18:74: c8:78:c2:7d:ea:a2:6c:14:dc:5b:9c:f1:27:d0:fe: b5:8b:36:c7:b4:50:a7:29:fb:29:36:ac:75:d5:12: a1:4b:59:24:f2:02:a5:5a:0c:e4:54:db:93:2c:80: 59:6a:ec:58:4e:0b:2f:52:4f:64:b1:89:67:e9:b7: 16:c4:e4:75:3c:52:1c:91:12:b4:c2:e0:be:c4:16: d1:6d:d0:be:2e:a1:d7:31:72:a8:bb:d2:2a:e0:7c: 0a:77:f8:d4:6a:f4:17:f2:4f:85:d0:28:df:8b:94: d7:67:91:2d:2d:c5:15:0e:3b:ab:bd:91:cd:2c:c6: 6e:f0:20:27:78:3e:a9:b3:91:8c:68:d2:37:af:b4: 44:1a:84:aa:09:36:be:c1:8a:ef:b9:ee:ee:72:5e: f3:40:93:82:03:5f:a5:3e:5f:4d:a9:61:74:46:75: 83:e0:17:85:a6:fe:e6:a0:ee:b6:ee:3b:00:3f:ad: f6:7e:27:ec:d1:24:86:56:71:18:63:87:f1:7b:fe: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:03:45:35:6A:C2:F7:96:AA:7D:04:DB:06:12:73:02:F9:3F:C5:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:dd:b2:5b:51:07:b5:a8:60:bb:3e:cf:dd:25:9b:52:96:1e: a7:ad:db:83:92:7f:65:30:a2:ed:26:85:50:a5:00:46:c4:fc: 81:b7:5f:a3:f2:2e:25:77:1a:d3:af:1e:34:8d:40:1a:cb:7b: 34:aa:50:de:b6:17:ad:93:28:2e:33:83:27:32:81:bc:9c:46: 8e:6b:da:dd:aa:0d:db:fb:3a:c1:39:28:d6:9d:a6:0e:9a:ca: 97:4b:c3:bd:df:f4:6c:67:7f:ad:5f:4b:85:ff:de:72:7c:da: 17:d6:6e:82:9f:8c:93:79:51:51:5d:52:f1:9d:89:93:ce:08: b9:68:bb:83:31:67:71:e3:38:7c:58:3c:8c:cb:4f:53:a9:29: a0:6b:29:cf:40:f5:1e:e7:94:93:63:a7:86:35:c1:3d:e4:46: b2:8e:b3:3e:de:b8:01:ba:3b:fc:cd:f0:d7:85:7e:b3:87:0c: 13:c7:02:02:50:3b:20:85:a3:22:57:6c:57:1d:75:ed:0f:3f: dc:20:30:61:12:e1:a2:bf:68:c6:45:9f:1d:be:48:cb:33:94: a4:ea:ee:92:42:73:a2:98:35:fe:70:60:1b:bf:0b:d4:61:dd: 99:08:fb:a8:62:57:ac:e6:44:12:15:50:fb:39:f2:bd:1d:79: f0:07:22:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXntoTHk4dzTXewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjMwNzViZGItMzUxMS00ZWM0LWJlZmItZWUzNTc2OTFjNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZdBvnGeNepHoyLUSj95jUOMteaDuYhz9KBT YH6/vay85ztpv8HsoU11s7hLDbBe6Ne8q9H7bxYtGHTIeMJ96qJsFNxbnPEn0P61 izbHtFCnKfspNqx11RKhS1kk8gKlWgzkVNuTLIBZauxYTgsvUk9ksYln6bcWxOR1 PFIckRK0wuC+xBbRbdC+LqHXMXKou9Iq4HwKd/jUavQX8k+F0Cjfi5TXZ5EtLcUV DjurvZHNLMZu8CAneD6ps5GMaNI3r7REGoSqCTa+wYrvue7ucl7zQJOCA1+lPl9N qWF0RnWD4BeFpv7moO627jsAP632fifs0SSGVnEYY4fxe/5A+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8DRTVqwveWqn0E2wYScwL5P8XRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmE0YWI3YTAtMjVhOS0z Mzc5LThlM2UtNmFkY2M0MDMzZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzdsltRB7WoYLs+z90lm1KWHqet24OSf2Uwou0mhVClAEbE/IG3X6Py LiV3GtOvHjSNQBrLezSqUN62F62TKC4zgycygbycRo5r2t2qDdv7OsE5KNadpg6a ypdLw73f9Gxnf61fS4X/3nJ82hfWboKfjJN5UVFdUvGdiZPOCLlou4MxZ3HjOHxY PIzLT1OpKaBrKc9A9R7nlJNjp4Y1wT3kRrKOsz7euAG6O/zN8NeFfrOHDBPHAgJQ OyCFoyJXbFcdde0PP9wgMGES4aK/aMZFnx2+SMszlKTq7pJCc6KYNf5wYBu/C9Rh 3ZkI+6hiV6zmRBIVUPs58r0defAHImo= -----END CERTIFICATE-----Generated at Sun Mar 1 23:08:51 2026 by rpki-client