$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa File: 2b802f54-be87-3e85-b569-cf6fbafa55b0.roa (raw, json) Hash identifier: dkBhx5+H428nai2Jti5YMoDXVH321J//vgtFwK+LLJg= Subject key identifier: 8A:34:BB:05:D4:E0:F6:41:D1:6C:83:2B:52:D6:A9:F9:4F:B4:AF:01 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584E147ED79B4228CAEB00013B40 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa Signing time: Sat 06 Jun 2026 09:00:12 +0000 ROA not before: Sat 06 Jun 2026 09:00:12 +0000 ROA not after: Fri 04 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 130.137.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:7e:d7:9b:42:28:ca:eb:00:01:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jun 6 09:00:12 2026 GMT Not After : Sep 4 09:00:12 2026 GMT Subject: CN=bb11d7ed-e11d-4423-a951-ddab498aa133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:68:d9:49:6a:1e:4d:47:30:c2:6b:84:ba:d4: e8:b2:3f:5f:a5:4b:cc:ff:5b:b4:1e:7a:f0:66:61: 0b:0c:a8:cc:38:d2:b4:36:39:f5:f5:1b:84:5c:e9: d1:1c:0a:14:3c:ab:bd:38:0c:80:a6:47:a4:5f:78: 91:46:bc:ba:e0:66:51:65:f6:6e:cd:ab:83:8b:19: 53:c4:e2:5d:a5:52:e7:23:f9:2b:87:79:98:28:b7: 5b:5d:39:35:29:c7:14:93:5c:14:ee:2c:cb:66:3e: 1d:63:a8:b0:42:66:8d:63:f3:a7:a8:af:1e:32:6b: 64:ea:bd:c9:78:f5:de:6f:f7:aa:df:cd:a2:ef:d5: 29:dd:1e:9c:b1:40:28:f0:2d:a7:25:10:e7:0f:c4: 1a:f1:31:a0:18:ea:71:1e:e8:7a:58:be:93:de:f4: e4:e9:dc:90:fd:17:e8:9b:7f:7b:2c:f6:f3:ce:50: 4e:c7:be:7f:61:65:bb:f1:4d:67:b4:9a:3f:89:1d: 6e:83:97:11:1c:99:1b:ee:53:1d:31:d9:74:56:1a: 4c:57:41:60:cb:b8:02:34:33:5a:69:b1:08:78:9e: a0:ac:8b:02:5f:2e:2b:3d:e2:5c:34:ae:58:81:86: 96:6f:9d:05:19:45:af:13:0b:84:f6:ab:0c:ea:01: a3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:34:BB:05:D4:E0:F6:41:D1:6C:83:2B:52:D6:A9:F9:4F:B4:AF:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e7:ce:a0:fb:9e:ae:87:80:f7:25:58:d1:01:7c:1a:44:81: 82:cd:0f:84:86:d3:e3:9a:0e:4a:69:32:42:12:f3:0e:cf:9a: 84:27:1c:33:e5:48:9c:02:2a:a9:72:13:8f:60:40:22:73:13: c7:b8:9d:13:b6:31:19:8c:48:d6:64:e1:34:7f:3d:0b:d9:2c: bd:04:53:20:61:77:86:a6:57:c8:c1:8a:2b:57:e6:d1:df:df: 2e:0f:b3:ab:4e:be:4d:e5:7b:5c:57:68:10:c8:c8:a4:65:2e: 90:9f:19:a0:1f:da:07:4f:20:b0:d6:cb:81:71:5d:42:a5:7b: 66:ce:46:b2:3f:42:e9:bc:39:a0:62:df:b6:98:44:52:8d:55: bd:71:d0:a0:a4:7e:88:8e:c6:17:62:95:5d:91:b7:41:26:9e: 06:a3:7b:93:8c:7e:5e:17:ca:db:ed:54:a4:12:df:9b:65:61: 7b:7e:e3:de:7d:8f:39:00:a7:e2:4f:30:55:40:68:0c:13:74: b1:d0:ae:ab:b4:da:f6:0a:57:57:d7:f0:c9:d6:f0:7d:75:c1: 9d:53:67:12:e1:a2:f0:32:a1:93:21:37:77:1a:74:c3:02:2b: 63:7d:01:7b:b4:91:9f:98:6d:27:74:94:b9:4c:a8:9e:83:8c: b5:cf:99:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UftebQijK6wABO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk YmIxMWQ3ZWQtZTExZC00NDIzLWE5NTEtZGRhYjQ5OGFhMTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimjZSWoeTUcwwmuEutTosj9fpUvM/1u0Hnrw ZmELDKjMONK0Njn19RuEXOnRHAoUPKu9OAyApkekX3iRRry64GZRZfZuzauDixlT xOJdpVLnI/krh3mYKLdbXTk1KccUk1wU7izLZj4dY6iwQmaNY/OnqK8eMmtk6r3J ePXeb/eq382i79Up3R6csUAo8C2nJRDnD8Qa8TGgGOpxHuh6WL6T3vTk6dyQ/Rfo m397LPbzzlBOx75/YWW78U1ntJo/iR1ug5cRHJkb7lMdMdl0VhpMV0Fgy7gCNDNa abEIeJ6grIsCXy4rPeJcNK5YgYaWb50FGUWvEwuE9qsM6gGjbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo0uwXU4PZB0WyDK1LWqflPtK8BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmI4MDJmNTQtYmU4Ny0z ZTg1LWI1NjktY2Y2ZmJhZmE1NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3nzqD7nq6HgPclWNEBfBpEgYLND4SG0+OaDkppMkIS8w7PmoQnHDPl SJwCKqlyE49gQCJzE8e4nRO2MRmMSNZk4TR/PQvZLL0EUyBhd4amV8jBiitX5tHf 3y4Ps6tOvk3le1xXaBDIyKRlLpCfGaAf2gdPILDWy4FxXUKle2bORrI/Qum8OaBi 37aYRFKNVb1x0KCkfoiOxhdilV2Rt0Emngaje5OMfl4XytvtVKQS35tlYXt+4959 jzkAp+JPMFVAaAwTdLHQrqu02vYKV1fX8MnW8H11wZ1TZxLhovAyoZMhN3cadMMC K2N9AXu0kZ+YbSd0lLlMqJ6DjLXPmQY= -----END CERTIFICATE-----Generated at Sat Jun 13 08:53:19 2026 by rpki-client