$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3094e6fa-20e4-3ece-ac65-374371d73b15.roa File: 3094e6fa-20e4-3ece-ac65-374371d73b15.roa (raw, json) Hash identifier: 02ON1kcRKvj2xtgwDEc/9orXlI2znRHlz3XAyrr1wkM= Subject key identifier: 2E:93:54:95:8F:50:7B:12:F9:26:01:5A:CC:35:89:42:CA:C8:51:2F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D7CCFCE32C1CB481D8A564EE0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3094e6fa-20e4-3ece-ac65-374371d73b15.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 8987 IP address blocks: 130.137.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:ce:32:c1:cb:48:1d:8a:56:4e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=fa46e409-c32c-4d7f-821a-299c70872f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ca:1d:ea:f1:d0:0f:b5:1f:df:7e:ca:b7:76: 8c:04:e4:01:1d:f7:7b:70:00:aa:74:e6:a2:cc:d4: 73:58:24:48:9b:af:10:78:93:17:32:e9:fc:da:36: 7e:25:94:7e:8c:ec:87:6a:42:3c:a4:9f:7c:a8:3d: 44:11:37:a1:21:3f:72:32:bf:ed:7b:03:f9:38:57: 89:65:f2:ed:42:62:5e:5e:2b:10:61:a6:84:01:b1: 4b:c4:f4:06:f7:34:ea:04:40:ef:20:74:1e:78:2a: cb:dc:bf:38:55:d2:07:5a:7f:20:02:18:a3:e6:1e: c2:29:a9:8f:23:71:81:55:4b:1c:90:21:8c:ad:59: 63:6d:fd:18:57:b5:9c:05:bd:40:e2:53:5f:85:38: 9d:59:25:ed:c0:60:3c:d3:bb:57:e3:a6:e2:b6:f8: 65:79:20:a2:51:61:24:12:0f:12:a5:21:f9:1b:9f: 0d:1d:40:95:4c:63:5b:29:15:06:85:21:24:86:db: af:93:64:bb:7a:09:5f:cd:cc:81:77:69:e0:27:91: 6f:95:7b:2f:6b:85:d4:92:3c:fb:a4:e7:c8:b8:11: 2b:5c:d1:11:cc:bf:11:2e:03:71:f5:e0:fc:14:d7: 4c:6b:13:35:37:7d:56:d9:12:27:9c:ce:45:7d:9e: 87:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:93:54:95:8F:50:7B:12:F9:26:01:5A:CC:35:89:42:CA:C8:51:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3094e6fa-20e4-3ece-ac65-374371d73b15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:16:b2:55:63:87:74:72:3f:96:6c:72:04:29:93:e4:1f:58: 1f:c2:bb:69:c5:b8:21:09:57:52:22:e8:13:af:18:44:9c:36: cd:d6:18:25:96:f7:48:79:6d:f0:92:0f:ea:c7:27:f5:97:a6: 66:00:fc:c8:47:74:7b:11:25:23:ea:9b:68:35:e6:c3:04:14: c7:71:e9:2d:74:8d:93:9c:a0:d4:96:57:03:e9:97:42:b8:53: d9:6e:de:b9:bd:79:f9:3c:ca:17:2a:39:67:fc:5e:8f:0d:ed: 50:ae:5a:fa:28:01:cc:46:65:d8:ed:78:e9:df:c3:90:56:27: ed:a2:f8:67:de:59:1d:0c:75:a5:7a:36:60:6e:43:ac:e7:b0: 4d:cc:4e:94:3e:0b:d9:ff:0d:37:c0:dc:1c:52:6f:e0:b3:d0: 41:0e:51:b3:61:94:0d:fd:13:a8:e6:c3:a4:12:6d:0a:7f:9c: f1:16:34:c8:2b:bf:d6:00:b9:66:e8:98:51:db:1c:a2:ed:d8: 8b:df:e3:e9:7c:b0:df:2a:66:9f:87:03:24:b9:31:fe:57:7a: d4:9d:19:09:45:b1:3e:2c:3c:66:2a:f7:5a:79:e4:fc:1b:98: f8:a9:d9:52:11:85:09:e4:d8:b3:18:af:66:b2:32:f7:92:f5: 19:fc:9c:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z84ywctIHYpWTuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk ZmE0NmU0MDktYzMyYy00ZDdmLTgyMWEtMjk5YzcwODcyZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcod6vHQD7Uf337Kt3aMBOQBHfd7cACqdOai zNRzWCRIm68QeJMXMun82jZ+JZR+jOyHakI8pJ98qD1EETehIT9yMr/tewP5OFeJ ZfLtQmJeXisQYaaEAbFLxPQG9zTqBEDvIHQeeCrL3L84VdIHWn8gAhij5h7CKamP I3GBVUsckCGMrVljbf0YV7WcBb1A4lNfhTidWSXtwGA807tX46bitvhleSCiUWEk Eg8SpSH5G58NHUCVTGNbKRUGhSEkhtuvk2S7eglfzcyBd2ngJ5FvlXsva4XUkjz7 pOfIuBErXNERzL8RLgNx9eD8FNdMaxM1N31W2RInnM5FfZ6HhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6TVJWPUHsS+SYBWsw1iULKyFEvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMzA5NGU2ZmEtMjBlNC0z ZWNlLWFjNjUtMzc0MzcxZDczYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAWslVjh3RyP5ZscgQpk+QfWB/Cu2nFuCEJV1Ii6BOvGEScNs3WGCWW 90h5bfCSD+rHJ/WXpmYA/MhHdHsRJSPqm2g15sMEFMdx6S10jZOcoNSWVwPpl0K4 U9lu3rm9efk8yhcqOWf8Xo8N7VCuWvooAcxGZdjteOnfw5BWJ+2i+GfeWR0MdaV6 NmBuQ6znsE3MTpQ+C9n/DTfA3BxSb+Cz0EEOUbNhlA39E6jmw6QSbQp/nPEWNMgr v9YAuWbomFHbHKLt2Ivf4+l8sN8qZp+HAyS5Mf5XetSdGQlFsT4sPGYq91p55Pwb mPip2VIRhQnk2LMYr2ayMveS9Rn8nKA= -----END CERTIFICATE-----Generated at Sat Apr 18 06:12:23 2026 by rpki-client