$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3d544f5b-e99a-31c5-8d8b-a89564e1f47c.roa File: 3d544f5b-e99a-31c5-8d8b-a89564e1f47c.roa (raw, json) Hash identifier: 5PsTRQe1wzLYpDJtgk+FzMDl3srTC32dDacej5R0EKE= Subject key identifier: A3:D6:04:24:78:29:77:D4:62:51:52:E7:5C:94:E6:50:10:43:DE:B1 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584C8A0C1B460B89D9D276DA8C00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3d544f5b-e99a-31c5-8d8b-a89564e1f47c.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 130.137.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:1b:46:0b:89:d9:d2:76:da:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=9e7175a1-61fe-48ff-a169-45cfae486695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:52:07:8a:dc:6c:e5:e8:5a:b1:2b:8e:16:64: 3d:2b:21:42:e4:f2:0c:4b:28:5e:69:b0:4d:2a:56: 6c:aa:29:df:43:48:55:f3:7c:ea:a0:12:82:91:d3: 95:78:07:de:40:d9:5b:ba:e5:e6:0c:cc:b5:0b:e3: 82:51:cb:d1:94:36:3c:b1:98:c5:ac:26:b7:a6:3a: 6a:5e:65:22:bf:4e:62:34:bf:d4:ae:6a:06:5e:83: 26:93:86:1d:ba:13:de:ae:b4:4d:06:f2:44:5c:6a: c1:03:1f:da:0b:04:e7:4b:76:ad:71:1a:bc:fa:74: 20:37:eb:cf:e4:03:1c:da:9a:09:45:82:f7:53:87: 47:5d:8f:de:56:f8:cc:37:07:07:b4:1f:85:ea:c1: af:08:fd:64:93:3d:aa:0b:6b:4a:c9:88:73:45:5f: dd:50:79:7d:a9:95:7b:55:20:a5:45:ec:90:5c:6a: a0:6c:d0:58:e8:23:44:5c:f5:63:58:bb:6d:93:80: 10:75:9e:f4:bf:40:f1:74:2c:06:73:98:45:16:f9: e9:99:a2:1f:c7:3e:1b:00:71:15:7d:f8:90:ad:0b: 22:83:d6:d2:bb:03:fd:3f:bc:d9:3c:cb:bc:2e:56: c1:65:d0:38:37:e8:1e:0d:17:28:b0:80:14:2d:f4: 7d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D6:04:24:78:29:77:D4:62:51:52:E7:5C:94:E6:50:10:43:DE:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3d544f5b-e99a-31c5-8d8b-a89564e1f47c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:92:9c:55:04:d7:2d:6e:60:93:ea:5e:06:d1:07:24:13:84: 4c:c8:5b:ad:64:63:09:7a:9e:60:5c:9d:a3:41:0b:a9:93:94: ae:6d:7a:46:76:d9:70:5e:b5:7a:e9:b9:bd:b6:fc:2a:6d:4e: 52:17:a6:cf:bd:b5:f6:bb:31:a4:af:e0:a6:b5:52:a6:56:56: ec:75:45:b2:68:68:3b:6d:00:a6:7c:41:01:3a:21:57:ac:96: eb:b3:d4:27:39:fb:22:1a:c0:e1:5c:ca:7d:7a:21:57:d3:c9: 12:1d:e1:43:37:aa:02:55:c9:2d:9d:6e:0c:c1:6c:86:e5:19: f0:d1:af:f6:55:9b:3e:04:1d:ce:ea:f8:a7:da:56:8c:13:bf: e7:0c:11:ae:c0:73:0c:4b:1d:b6:74:8a:5d:5b:46:98:45:ee: c7:37:4f:82:f9:fe:61:dd:1a:10:f3:55:9b:e0:9d:92:fe:1a: d8:6f:04:3c:67:60:74:bf:f3:d0:da:53:ec:71:bd:d9:4b:34: 51:e8:64:8f:e4:72:49:b6:ff:f3:02:3d:3c:81:29:9f:2f:d1: 77:61:b3:71:91:bf:c5:6d:3d:ed:f6:08:94:b7:03:90:8e:bb: 6c:cc:72:aa:fb:0e:ed:97:5f:dd:02:cb:77:7a:09:b3:c6:11: 02:ef:64:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDBtGC4nZ0nbajAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk OWU3MTc1YTEtNjFmZS00OGZmLWExNjktNDVjZmFlNDg2Njk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglIHitxs5ehasSuOFmQ9KyFC5PIMSyheabBN KlZsqinfQ0hV83zqoBKCkdOVeAfeQNlbuuXmDMy1C+OCUcvRlDY8sZjFrCa3pjpq XmUiv05iNL/UrmoGXoMmk4YduhPerrRNBvJEXGrBAx/aCwTnS3atcRq8+nQgN+vP 5AMc2poJRYL3U4dHXY/eVvjMNwcHtB+F6sGvCP1kkz2qC2tKyYhzRV/dUHl9qZV7 VSClReyQXGqgbNBY6CNEXPVjWLttk4AQdZ70v0DxdCwGc5hFFvnpmaIfxz4bAHEV ffiQrQsig9bSuwP9P7zZPMu8LlbBZdA4N+geDRcosIAULfR9bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPWBCR4KXfUYlFS51yU5lAQQ96xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvM2Q1NDRmNWItZTk5YS0z MWM1LThkOGItYTg5NTY0ZTFmNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHySnFUE1y1uYJPqXgbRByQThEzIW61kYwl6nmBcnaNBC6mTlK5tekZ2 2XBetXrpub22/CptTlIXps+9tfa7MaSv4Ka1UqZWVux1RbJoaDttAKZ8QQE6IVes luuz1Cc5+yIawOFcyn16IVfTyRId4UM3qgJVyS2dbgzBbIblGfDRr/ZVmz4EHc7q +KfaVowTv+cMEa7AcwxLHbZ0il1bRphF7sc3T4L5/mHdGhDzVZvgnZL+GthvBDxn YHS/89DaU+xxvdlLNFHoZI/kckm2//MCPTyBKZ8v0Xdhs3GRv8VtPe32CJS3A5CO u2zMcqr7Du2XX90Cy3d6CbPGEQLvZAw= -----END CERTIFICATE-----Generated at Mon Mar 2 00:24:56 2026 by rpki-client