$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa File: 2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa (raw, json) Hash identifier: fxzAUOHjQXlOd3t4j68leW8Cc/QqeYfkxlr1aJmAGb0= Subject key identifier: 17:E5:84:79:40:D3:C1:D0:86:61:89:3D:5D:F8:ED:96:36:C0:45:7F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F119CF586116B387B26EE1CA5 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 130.137.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f5:86:11:6b:38:7b:26:ee:1c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=fc5c40b9-5d93-4478-b4b1-1105de249418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:26:20:3e:f9:21:4b:f2:d9:60:85:ed:da:0d: 69:61:cf:72:71:b4:f0:f5:91:97:a3:9d:31:6d:4e: c8:92:5c:d7:3d:fe:ad:d7:62:d8:89:45:aa:cc:10: ce:64:11:09:22:9e:fc:46:3d:d0:a7:e7:3f:4c:44: 65:27:ce:ce:ff:7f:4e:cb:d2:f4:31:36:0d:6b:82: 85:54:7c:6d:5e:47:51:cb:2b:ea:7e:bb:f1:09:b3: 0d:60:af:18:6a:b6:51:25:f0:7b:ed:b9:b7:08:9b: 46:52:29:1c:84:c5:79:f0:ed:1c:83:6c:da:d9:9a: ec:80:5e:4c:b3:02:10:b3:69:bc:d3:ce:6c:ab:f9: fc:ce:1f:c7:8c:e5:11:91:1f:a3:60:e9:e0:16:df: e6:7d:7b:a8:3e:d4:fb:ab:ff:18:e1:bf:d5:ed:2f: 22:24:a0:7e:da:13:6d:bf:77:00:d3:17:81:57:c4: 29:47:a3:90:e2:be:7f:c6:a9:83:8b:83:18:9e:c7: e8:43:fb:19:d7:b4:c7:d4:8d:88:6b:7f:97:2d:22: 47:be:57:67:e6:7f:8b:21:7e:f1:49:98:4c:4a:45: 20:a8:f3:7b:b1:9d:b2:09:d4:3b:32:bd:80:56:f1: 82:13:9b:b0:2f:4a:9f:7b:37:89:e3:14:10:16:b0: b7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E5:84:79:40:D3:C1:D0:86:61:89:3D:5D:F8:ED:96:36:C0:45:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:03:b1:77:2b:45:9c:86:ee:e4:63:a7:6f:b8:fe:c0:dd:3c: 6b:9e:00:a4:fd:f4:19:29:21:06:bf:fd:2f:95:47:67:0b:f9: 29:c5:cf:46:eb:15:d5:64:20:65:95:f9:1f:55:5a:51:c0:a6: a0:7a:ff:65:39:08:19:b1:93:f2:e6:c7:cc:bb:db:38:2b:97: b6:33:c7:9e:7c:25:56:80:f0:4b:9c:a7:c4:23:55:bc:0f:27: 49:e6:00:52:e1:d3:07:2d:bd:47:4e:34:fe:d2:83:d2:8c:5c: f3:f8:1c:5c:aa:8b:a9:df:82:1a:f3:58:b4:03:fa:69:42:c8: 92:18:9e:8b:54:f7:03:65:09:35:3c:ba:49:c7:29:3f:88:10: a1:dc:23:c8:a4:4f:15:70:75:93:41:45:e3:d0:b8:10:3e:90: 09:83:ee:96:d6:32:32:f7:10:6e:79:69:46:d9:f1:fd:e5:8d: 20:12:d9:15:16:b4:7e:cb:e0:3c:09:8b:75:65:95:29:9e:66: 53:65:f3:d9:ff:ab:71:2d:5c:d0:55:50:f5:12:cb:00:9a:71: 2b:aa:33:ca:37:69:22:a3:ad:b2:27:c0:bb:e6:01:05:68:5c: 3e:4b:e6:91:11:84:86:ff:d7:22:ea:b4:0c:86:a4:2e:c7:84: 29:3f:ba:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPWGEWs4eybuHKUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmM1YzQwYjktNWQ5My00NDc4LWI0YjEtMTEwNWRlMjQ5NDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCYgPvkhS/LZYIXt2g1pYc9ycbTw9ZGXo50x bU7IklzXPf6t12LYiUWqzBDOZBEJIp78Rj3Qp+c/TERlJ87O/39Oy9L0MTYNa4KF VHxtXkdRyyvqfrvxCbMNYK8YarZRJfB77bm3CJtGUikchMV58O0cg2za2ZrsgF5M swIQs2m8085sq/n8zh/HjOURkR+jYOngFt/mfXuoPtT7q/8Y4b/V7S8iJKB+2hNt v3cA0xeBV8QpR6OQ4r5/xqmDi4MYnsfoQ/sZ17TH1I2Ia3+XLSJHvldn5n+LIX7x SZhMSkUgqPN7sZ2yCdQ7Mr2AVvGCE5uwL0qfezeJ4xQQFrC39wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBflhHlA08HQhmGJPV347ZY2wEV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmE0YWI3YTAtMjVhOS0z Mzc5LThlM2UtNmFkY2M0MDMzZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwDsXcrRZyG7uRjp2+4/sDdPGueAKT99BkpIQa//S+VR2cL+SnFz0br FdVkIGWV+R9VWlHApqB6/2U5CBmxk/Lmx8y72zgrl7Yzx558JVaA8Eucp8QjVbwP J0nmAFLh0wctvUdONP7Sg9KMXPP4HFyqi6nfghrzWLQD+mlCyJIYnotU9wNlCTU8 uknHKT+IEKHcI8ikTxVwdZNBRePQuBA+kAmD7pbWMjL3EG55aUbZ8f3ljSAS2RUW tH7L4DwJi3VllSmeZlNl89n/q3EtXNBVUPUSywCacSuqM8o3aSKjrbInwLvmAQVo XD5L5pERhIb/1yLqtAyGpC7HhCk/urU= -----END CERTIFICATE-----Generated at Thu Sep 24 13:58:11 2026 by rpki-client