$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa File: 40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa (raw, json) Hash identifier: ysaPqLxYUuat37BfZjAm5M9d5FL2a1JD6QlpkIL5l0M= Subject key identifier: 82:D3:A2:D3:64:EA:3B:9E:88:81:F4:ED:31:4A:43:7C:42:B8:A5:D9 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D7A0524026A6B2F320E881200 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 130.137.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:24:02:6a:6b:2f:32:0e:88:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=aa627346-5c5b-4379-9330-79b818202e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:91:0e:ad:a3:8e:50:66:1e:b1:32:ec:0a:31: f6:9e:a8:76:4c:37:c4:96:78:44:e0:3d:dd:a6:9f: f1:ee:e6:88:6a:a4:c5:78:86:c8:d3:88:0d:ee:ce: 02:4b:3d:81:b9:86:fd:95:1c:2c:01:67:f7:84:22: ae:cb:21:e9:16:10:64:ec:8f:97:62:e6:49:07:c2: df:b4:cb:7c:1e:a7:a4:a6:64:1e:aa:34:65:f8:b0: 7f:e6:5b:76:cb:02:19:55:ee:42:01:d3:e8:05:96: 5a:b6:be:46:f6:74:68:2c:d5:70:af:23:d8:12:8e: c6:51:71:bd:23:97:d6:07:e6:44:d7:ce:25:f3:f2: 49:9f:09:34:c2:c7:ba:a0:1c:d7:74:76:b1:b9:62: 9d:99:2a:7b:c7:07:c0:07:7b:21:b4:f6:d4:d8:a3: ec:b4:a3:0f:64:7d:22:2f:eb:44:3d:73:ea:83:4b: ad:da:ae:3d:b2:1a:51:4b:1c:44:f6:bd:17:81:8e: b3:e1:8a:5d:b0:61:ee:55:f1:2d:31:3b:ed:f0:3d: 83:d5:2d:2c:06:0f:d1:7a:44:78:7a:9b:e0:8a:84: 09:8e:0b:f9:6b:3a:0e:73:2d:03:4b:8f:b7:08:1f: 38:2a:91:51:86:b8:64:0e:20:2a:a9:c0:b3:21:47: c8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D3:A2:D3:64:EA:3B:9E:88:81:F4:ED:31:4A:43:7C:42:B8:A5:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e9:8e:03:5d:cd:7b:84:2b:f4:5e:16:c5:8d:17:06:66:3d: 7c:22:8c:90:76:17:ec:ac:ff:bc:df:c1:86:a9:75:8a:07:7b: f4:0d:09:75:a2:68:4e:c8:93:ce:5c:2a:79:e2:81:6f:dc:d0: 16:12:cb:57:04:d4:e6:83:f0:f4:92:a3:d7:75:91:8f:66:ed: 0e:dd:53:4b:14:15:0f:95:ac:28:57:28:bf:38:11:d4:d1:69: cc:da:47:29:22:66:e0:aa:5c:51:75:fd:3e:5e:a5:a6:c8:1c: a4:16:64:51:d0:8d:c5:e5:13:62:b1:81:e6:be:f1:dd:e7:b1: 05:0a:31:b4:46:f3:f8:5f:d3:f7:19:2b:33:ec:2e:51:af:29: d7:b8:67:46:01:f6:fd:60:63:f3:37:86:5c:d5:34:71:6a:bd: 14:29:89:2d:a6:ee:d5:9a:9f:32:a8:c8:19:dd:9c:66:6f:0d: 0c:7b:52:1b:38:39:f2:88:44:f8:10:00:14:bf:1b:f4:21:6f: 3c:95:e0:76:93:78:02:44:6d:00:aa:2b:13:4f:f1:32:61:37: ce:eb:b3:52:05:3a:9c:b8:42:46:44:8d:97:1b:ea:92:64:b5: d1:6c:50:fb:12:fe:19:24:f5:a8:87:c9:0b:2a:f4:80:cb:46: d1:bf:7c:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BSQCamsvMg6IEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YWE2MjczNDYtNWM1Yi00Mzc5LTkzMzAtNzliODE4MjAyZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJEOraOOUGYesTLsCjH2nqh2TDfElnhE4D3d pp/x7uaIaqTFeIbI04gN7s4CSz2BuYb9lRwsAWf3hCKuyyHpFhBk7I+XYuZJB8Lf tMt8HqekpmQeqjRl+LB/5lt2ywIZVe5CAdPoBZZatr5G9nRoLNVwryPYEo7GUXG9 I5fWB+ZE184l8/JJnwk0wse6oBzXdHaxuWKdmSp7xwfAB3shtPbU2KPstKMPZH0i L+tEPXPqg0ut2q49shpRSxxE9r0XgY6z4YpdsGHuVfEtMTvt8D2D1S0sBg/RekR4 epvgioQJjgv5azoOcy0DS4+3CB84KpFRhrhkDiAqqcCzIUfI0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILTotNk6jueiIH07TFKQ3xCuKXZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDBjZTNhNWYtMjFjZi0z ZTM3LTllYTQtOWQ5YTg0ZmY5ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvpjgNdzXuEK/ReFsWNFwZmPXwijJB2F+ys/7zfwYapdYoHe/QNCXWi aE7Ik85cKnnigW/c0BYSy1cE1OaD8PSSo9d1kY9m7Q7dU0sUFQ+VrChXKL84EdTR aczaRykiZuCqXFF1/T5epabIHKQWZFHQjcXlE2Kxgea+8d3nsQUKMbRG8/hf0/cZ KzPsLlGvKde4Z0YB9v1gY/M3hlzVNHFqvRQpiS2m7tWanzKoyBndnGZvDQx7Uhs4 OfKIRPgQABS/G/QhbzyV4HaTeAJEbQCqKxNP8TJhN87rs1IFOpy4QkZEjZcb6pJk tdFsUPsS/hkk9aiHyQsq9IDLRtG/fO8= -----END CERTIFICATE-----Generated at Fri Apr 17 11:27:21 2026 by rpki-client