$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/41eccd31-7f59-3500-85a1-e6e701d6f2d2.roa File: 41eccd31-7f59-3500-85a1-e6e701d6f2d2.roa (raw, json) Hash identifier: 3XoHhJuMrZw0ep3bCb0RsOjvqNaAmNHc+tGsJMUh//o= Subject key identifier: 97:84:CE:2F:C7:B1:24:C3:DA:93:5C:15:EF:CF:86:ED:F0:34:67:BC Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584EFCACBEBD949A2C551EC64B80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/41eccd31-7f59-3500-85a1-e6e701d6f2d2.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 14618 IP address blocks: 130.137.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:be:bd:94:9a:2c:55:1e:c6:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=bda02c85-1864-4591-948d-195b924221f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:77:7c:81:a4:af:7c:ce:c4:f4:e2:94:aa: e2:8c:63:46:61:87:3b:9d:be:ca:9d:fb:b4:c1:19: 9e:53:f1:50:38:d3:32:4a:57:51:a8:82:d3:3f:b7: e3:6c:82:2b:13:56:56:e2:db:da:32:57:6f:ea:3b: 1b:26:88:8f:87:cf:1f:68:69:02:2d:3d:17:39:25: fd:17:0d:99:41:6f:45:b2:f1:8c:fa:3f:3d:ae:89: 02:c6:e0:3c:ad:9a:f7:e4:be:e1:6f:25:52:01:11: eb:8f:d7:51:8c:c1:29:94:a0:5d:b7:0a:1a:66:a2: 96:74:6b:5d:f4:63:04:39:6c:ff:dd:01:bc:c6:7e: 3b:a7:70:b3:3a:ed:21:57:db:5d:a9:64:22:a9:0b: 43:98:4f:51:a5:3b:28:c7:3f:2a:66:d9:04:52:7c: 1f:00:b2:c8:99:8b:10:01:bd:af:78:d5:ba:3f:a3: 68:e0:6b:9d:01:f8:e2:2f:49:94:38:0c:29:55:3c: fb:77:d1:42:62:a8:08:53:aa:47:68:c3:f6:41:b8: 30:f2:66:00:6a:87:08:bf:f3:8e:81:1e:87:c6:e5: 2e:63:d5:b3:c0:51:3d:11:1d:9b:aa:c5:31:93:aa: 42:b3:e1:e4:75:ad:e5:66:cd:5b:56:05:e1:ba:ec: 4e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:84:CE:2F:C7:B1:24:C3:DA:93:5C:15:EF:CF:86:ED:F0:34:67:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/41eccd31-7f59-3500-85a1-e6e701d6f2d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:05:d4:a2:50:f2:12:3b:53:8f:85:77:16:0b:99:d3:82:b9: ee:97:0a:27:48:ad:bb:0a:0e:5c:3e:8e:2f:1e:0a:11:2b:c5: c2:06:f0:8d:13:cc:cd:6f:4d:50:f8:30:9e:1c:fc:de:1a:c6: 40:49:92:a8:54:61:c7:9b:4f:a5:9f:16:a1:23:85:0c:31:e0: 79:38:96:ee:4d:e2:4b:cb:2a:75:d0:2b:9c:b0:39:3d:3d:a1: dd:ae:07:4f:32:d5:66:c7:2e:d3:f0:2f:62:ca:61:84:d8:f3: e4:55:c5:c9:51:46:de:ac:f5:4b:47:0a:e8:03:fa:bc:6d:69: 28:b6:0c:83:5b:dd:07:d4:25:56:e3:81:eb:58:83:f5:d4:bc: 6f:d4:a9:59:3e:70:95:33:39:29:af:87:c4:5b:a1:0d:15:6e: d6:5f:c6:26:66:77:a6:ac:82:31:cc:8b:54:ac:b3:00:13:09: c8:6f:c3:a7:b6:c3:b0:6f:8a:d6:0e:ef:19:7a:46:e8:ed:ba: a7:fd:48:c8:da:88:35:d1:77:be:39:e0:8e:3c:bc:ba:5e:a3: e0:54:d5:f1:b6:79:27:83:fb:d6:b1:f0:ac:04:9e:53:e5:da: c6:8c:bb:c7:ce:3f:b1:40:6f:1a:0f:3b:54:26:6a:23:14:45: b4:63:90:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rL69lJosVR7GS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk YmRhMDJjODUtMTg2NC00NTkxLTk0OGQtMTk1YjkyNDIyMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4t3fIGkr3zOxPTilKrijGNGYYc7nb7Knfu0 wRmeU/FQONMySldRqILTP7fjbIIrE1ZW4tvaMldv6jsbJoiPh88faGkCLT0XOSX9 Fw2ZQW9FsvGM+j89rokCxuA8rZr35L7hbyVSARHrj9dRjMEplKBdtwoaZqKWdGtd 9GMEOWz/3QG8xn47p3CzOu0hV9tdqWQiqQtDmE9RpTsoxz8qZtkEUnwfALLImYsQ Ab2veNW6P6No4GudAfjiL0mUOAwpVTz7d9FCYqgIU6pHaMP2Qbgw8mYAaocIv/OO gR6HxuUuY9WzwFE9ER2bqsUxk6pCs+Hkda3lZs1bVgXhuuxO0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeEzi/HsSTD2pNcFe/Phu3wNGe8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDFlY2NkMzEtN2Y1OS0z NTAwLTg1YTEtZTZlNzAxZDZmMmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgondMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoF1KJQ8hI7U4+FdxYLmdOCue6XCidIrbsKDlw+ji8eChErxcIG8I0T zM1vTVD4MJ4c/N4axkBJkqhUYcebT6WfFqEjhQwx4Hk4lu5N4kvLKnXQK5ywOT09 od2uB08y1WbHLtPwL2LKYYTY8+RVxclRRt6s9UtHCugD+rxtaSi2DINb3QfUJVbj getYg/XUvG/UqVk+cJUzOSmvh8RboQ0VbtZfxiZmd6asgjHMi1SsswATCchvw6e2 w7BvitYO7xl6Rujtuqf9SMjaiDXRd7454I48vLpeo+BU1fG2eSeD+9ax8KwEnlPl 2saMu8fOP7FAbxoPO1QmaiMURbRjkNM= -----END CERTIFICATE-----Generated at Sun Sep 20 20:36:11 2026 by rpki-client