$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/34109778-6fe1-35b3-a86f-bacd8a9b3f4e.roa File: 34109778-6fe1-35b3-a86f-bacd8a9b3f4e.roa (raw, json) Hash identifier: Uf04DvisWUwMufkkDJcglv+3FocfAvUJgA50akjtM/E= Subject key identifier: EA:34:F3:B9:0A:6E:6A:17:64:C0:78:1C:D7:20:83:EE:CC:B9:70:9E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584CB28722EA8B3E53B21BBA9940 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/34109778-6fe1-35b3-a86f-bacd8a9b3f4e.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 8987 IP address blocks: 130.137.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:22:ea:8b:3e:53:b2:1b:ba:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=5a3a4aa2-7b2d-42e6-a36f-ac3c5c597b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:98:71:9d:ea:f6:14:df:2f:32:4a:c6:6e:1d: 09:97:32:21:6c:88:15:95:27:95:32:4f:79:50:9a: 6c:d6:5a:2d:34:5e:51:f2:7d:ed:5f:e2:80:83:d5: 90:94:41:56:36:a9:fd:e7:41:22:c8:55:d3:e8:61: 5c:da:28:1a:c0:ce:e7:d7:38:b5:48:c4:35:40:8d: 56:8f:ac:1d:be:d4:aa:45:34:6d:9c:01:a0:51:b2: 86:e6:b7:19:91:d9:5e:98:79:36:ba:e6:6b:73:74: d9:28:a0:d9:ef:d6:03:89:00:7b:5f:eb:d9:76:55: 1d:80:82:ff:c6:48:f6:e4:51:0e:bc:a3:ab:c3:36: 90:66:09:f2:be:5c:7c:4e:84:75:3c:95:c7:89:2f: bb:0b:4d:e4:08:94:c6:2d:c1:4b:38:df:53:c1:a3: bb:51:84:0c:62:38:66:36:92:a7:a9:1a:dc:22:a8: c5:23:90:18:2a:41:41:08:b7:5a:71:8f:df:ac:77: 28:57:d1:0b:0e:75:ef:97:66:0d:fc:ff:be:2a:52: 8b:df:c2:7d:f8:40:cf:2f:eb:4d:ad:a8:e6:33:5d: 3a:e6:7d:7e:d2:19:ec:bd:a9:f6:f8:e4:55:b6:54: 68:df:be:41:f8:de:04:09:19:37:af:b8:3e:4c:53: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:34:F3:B9:0A:6E:6A:17:64:C0:78:1C:D7:20:83:EE:CC:B9:70:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/34109778-6fe1-35b3-a86f-bacd8a9b3f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:27:ac:e6:06:1c:a0:84:f6:73:9b:90:ca:ae:de:bd:bc:e4: c2:c6:64:cd:de:d8:b2:8a:d6:1e:e9:2b:01:e1:38:54:15:1b: 9c:31:ff:0a:ec:9d:28:e2:9a:ea:7a:85:05:64:24:a1:39:09: c9:f7:d0:ad:80:74:24:99:be:37:15:c2:ab:93:64:ea:9c:df: fd:35:0e:2a:e2:c1:e3:2c:f8:ea:a5:f0:2a:da:d1:f1:d1:cd: 0d:da:bb:74:ed:a1:c6:21:bb:ec:01:8e:f6:50:d4:e6:9c:43: a2:07:1c:7a:1e:b9:9e:2e:00:a6:bb:76:5c:2e:43:06:53:47: 00:13:8d:01:6c:d7:0f:e0:2e:c6:8c:1a:06:aa:98:76:99:b4: 06:a6:ba:07:c3:53:17:be:3b:9d:27:2e:1a:ba:62:5b:cd:30: bb:25:36:40:31:11:58:a3:98:7e:38:ae:56:9e:ec:10:f1:eb: f9:67:38:59:79:47:ea:00:c5:01:2e:14:89:35:4d:1d:2b:c0: bf:a8:b8:9d:6c:91:45:89:a2:6d:1c:7b:da:c0:49:66:ec:7d: ae:bf:83:2a:f0:f0:5c:22:d4:23:04:6d:e4:44:cb:72:e2:07: b2:a8:6f:3c:a5:df:3a:9a:73:d5:58:b1:cb:c5:bf:9d:e5:a0: 79:f2:53:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhyLqiz5Tshu6mUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk NWEzYTRhYTItN2IyZC00MmU2LWEzNmYtYWMzYzVjNTk3YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmphxner2FN8vMkrGbh0JlzIhbIgVlSeVMk95 UJps1lotNF5R8n3tX+KAg9WQlEFWNqn950EiyFXT6GFc2igawM7n1zi1SMQ1QI1W j6wdvtSqRTRtnAGgUbKG5rcZkdlemHk2uuZrc3TZKKDZ79YDiQB7X+vZdlUdgIL/ xkj25FEOvKOrwzaQZgnyvlx8ToR1PJXHiS+7C03kCJTGLcFLON9TwaO7UYQMYjhm NpKnqRrcIqjFI5AYKkFBCLdacY/frHcoV9ELDnXvl2YN/P++KlKL38J9+EDPL+tN rajmM1065n1+0hnsvan2+ORVtlRo375B+N4ECRk3r7g+TFPD5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOo087kKbmoXZMB4HNcgg+7MuXCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMzQxMDk3NzgtNmZlMS0z NWIzLWE4NmYtYmFjZDhhOWIzZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFonrOYGHKCE9nObkMqu3r285MLGZM3e2LKK1h7pKwHhOFQVG5wx/wrs nSjimup6hQVkJKE5Ccn30K2AdCSZvjcVwquTZOqc3/01DiriweMs+Oql8Cra0fHR zQ3au3TtocYhu+wBjvZQ1OacQ6IHHHoeuZ4uAKa7dlwuQwZTRwATjQFs1w/gLsaM GgaqmHaZtAamugfDUxe+O50nLhq6YlvNMLslNkAxEVijmH44rlae7BDx6/lnOFl5 R+oAxQEuFIk1TR0rwL+ouJ1skUWJom0ce9rASWbsfa6/gyrw8Fwi1CMEbeREy3Li B7Kobzyl3zqac9VYscvFv53loHnyU0k= -----END CERTIFICATE-----Generated at Sun Mar 1 22:48:32 2026 by rpki-client