$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa File: 3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa (raw, json) Hash identifier: rjrdORhabtQ8kCxkTufo3Px+XRDsD5euMwrjjNBSA7I= Subject key identifier: 12:DA:60:A0:31:39:6F:2A:48:70:3A:FA:C1:51:ED:37:B8:1A:C3:2E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D7F9A7AA9F1EACEABB8BA4780 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 130.137.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:7a:a9:f1:ea:ce:ab:b8:ba:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=f8cd27ed-0c26-449a-bdf9-d8be401663b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:39:8e:a1:22:46:ad:80:0e:76:7a:cc:79: 21:89:16:6f:71:25:31:89:80:d3:14:5a:1c:8b:16: e3:c7:79:e8:76:bf:55:e9:97:37:e1:11:70:5f:2b: 44:95:17:e1:88:b2:02:fd:f7:a4:fe:d3:b4:5d:9d: 8e:41:42:ec:24:d5:b0:5f:0c:7a:1d:4c:7a:88:67: 63:c0:2e:ce:1e:2b:62:64:a6:c9:1b:4a:95:f4:27: 90:28:24:02:bb:24:60:fe:d9:5a:ca:1f:63:d6:c7: 58:3c:63:a9:ef:84:15:4f:60:56:23:56:4b:89:83: 46:ce:16:4a:85:6e:d3:8c:a3:d6:bb:97:c7:44:d5: bc:8e:06:bb:cd:5e:22:dd:25:e8:9a:d0:76:d9:43: 65:c8:52:14:ec:50:a2:9d:1a:9b:04:34:32:65:da: 4d:67:ca:b6:5f:71:56:a0:9f:74:aa:43:c4:c2:cc: 26:eb:2b:46:83:62:18:de:ec:96:72:fc:66:15:77: ee:d6:db:a2:40:ef:d1:ef:b7:18:5b:69:89:b3:97: eb:ee:af:a2:bf:70:08:c6:d8:b5:db:c4:ce:35:48: 9e:90:0d:fe:9b:e8:6a:3e:2e:70:bc:dd:3c:5b:d7: f7:e3:e8:16:13:a8:09:9f:2c:58:b5:62:a1:55:e0: b1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DA:60:A0:31:39:6F:2A:48:70:3A:FA:C1:51:ED:37:B8:1A:C3:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c4:f9:5e:cf:35:c7:1b:12:cd:80:95:c7:59:32:e0:17:e3: 49:12:d9:3e:7c:47:9a:47:c3:54:75:0e:0b:70:9d:4b:73:28: de:c5:f3:bf:70:5c:cc:e3:7f:97:93:c6:6a:7f:c3:85:ed:b7: 22:49:70:0a:c8:8d:32:34:f7:94:04:4a:ce:60:23:07:d5:af: 53:b4:3b:64:dd:3e:06:14:11:d3:ce:ac:c3:62:4b:d4:49:99: 25:1f:6f:6a:86:48:40:46:31:c7:63:52:8e:87:8b:18:f4:5c: da:f9:00:e1:ad:99:43:4e:8e:55:3b:95:00:16:6c:29:1c:d3: 22:70:61:c5:0e:05:08:9f:02:e6:71:c1:5f:10:d3:f2:d5:4b: 9e:26:3b:64:ab:5d:3e:cb:93:a8:4b:9c:34:89:5a:f0:18:92: 1d:6e:55:03:05:b8:f0:ae:01:ee:c3:43:c3:05:a6:55:90:9f: a6:1d:3c:cd:61:bc:3d:bd:62:e7:a2:5e:81:09:e4:61:69:af: 24:17:ac:60:8e:b8:2c:83:50:17:58:58:a8:92:70:47:a6:97: 6b:90:2d:3c:6d:58:98:ef:e8:4c:23:4a:4f:5d:24:cd:96:9c: e6:ae:3f:08:c7:5b:77:d1:53:cd:d5:21:75:65:a7:d2:8d:7e: cd:66:5b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mnqp8erOq7i6R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZjhjZDI3ZWQtMGMyNi00NDlhLWJkZjktZDhiZTQwMTY2M2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E85jqEiRq2ADnZ6zHkhiRZvcSUxiYDTFFoc ixbjx3nodr9V6Zc34RFwXytElRfhiLIC/fek/tO0XZ2OQULsJNWwXwx6HUx6iGdj wC7OHitiZKbJG0qV9CeQKCQCuyRg/tlayh9j1sdYPGOp74QVT2BWI1ZLiYNGzhZK hW7TjKPWu5fHRNW8jga7zV4i3SXomtB22UNlyFIU7FCinRqbBDQyZdpNZ8q2X3FW oJ90qkPEwswm6ytGg2IY3uyWcvxmFXfu1tuiQO/R77cYW2mJs5fr7q+iv3AIxti1 28TONUiekA3+m+hqPi5wvN08W9f34+gWE6gJnyxYtWKhVeCxoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLaYKAxOW8qSHA6+sFR7Te4GsMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvM2MyZDAwNjQtOWEwZi0z M2MxLTkzOTEtOGU5MWUzZjFhNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLE+V7PNccbEs2AlcdZMuAX40kS2T58R5pHw1R1DgtwnUtzKN7F879w XMzjf5eTxmp/w4XttyJJcArIjTI095QESs5gIwfVr1O0O2TdPgYUEdPOrMNiS9RJ mSUfb2qGSEBGMcdjUo6Hixj0XNr5AOGtmUNOjlU7lQAWbCkc0yJwYcUOBQifAuZx wV8Q0/LVS54mO2SrXT7Lk6hLnDSJWvAYkh1uVQMFuPCuAe7DQ8MFplWQn6YdPM1h vD29YueiXoEJ5GFpryQXrGCOuCyDUBdYWKiScEeml2uQLTxtWJjv6EwjSk9dJM2W nOauPwjHW3fRU83VIXVlp9KNfs1mWxQ= -----END CERTIFICATE-----Generated at Fri Apr 17 15:22:41 2026 by rpki-client