$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4a550428-74fe-3227-a036-ecfd9d4fd689.roa File: 4a550428-74fe-3227-a036-ecfd9d4fd689.roa (raw, json) Hash identifier: 1zYu8jGnY9x5XyPInVRRhkVuA97EXHdWuJ4hN8oG0eY= Subject key identifier: 4D:4D:F9:34:88:BB:54:B4:B3:86:A1:9A:23:2C:B4:28:2B:40:06:AD Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584C9C31A33B0065B57B32C74B80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4a550428-74fe-3227-a036-ecfd9d4fd689.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 16509 IP address blocks: 130.137.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:a3:3b:00:65:b5:7b:32:c7:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=74c600c6-61f6-45b7-a84c-40d135aed46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:38:8c:16:53:45:50:59:b2:68:e4:39:89: e3:78:f7:87:5b:0a:02:b3:c3:35:62:de:eb:da:b2: 4c:3e:42:90:49:f7:4d:05:f5:23:97:10:40:6e:1f: 75:49:fc:e2:bd:52:b0:37:fb:d1:77:74:f3:61:26: fe:8a:79:fe:1c:14:45:f2:3d:17:99:0d:a8:d8:17: fc:d5:ab:a3:67:7b:85:c5:d4:eb:a8:0d:6c:73:ea: 7a:a0:6d:03:cc:2b:30:22:c8:0b:5f:29:13:15:c4: c3:14:0b:80:e7:e3:cd:de:ea:04:82:07:9c:c9:e8: d2:29:35:6b:c9:58:ec:51:e3:3c:69:07:75:30:a2: 21:3a:33:60:e2:50:3d:2b:74:d9:c3:7b:e1:58:36: 5b:45:5f:c9:84:c5:5c:b2:21:b2:da:23:7c:40:91: 5b:d9:11:26:b0:c8:46:de:74:56:45:31:a7:e8:a4: 2d:3d:20:23:b7:af:10:60:c0:da:ed:22:fd:35:5b: d4:8f:7c:82:53:80:9f:ed:3e:c4:f7:6b:28:6f:22: 8e:4a:1a:a9:d2:4b:d9:a7:00:40:e1:b8:14:d3:7c: 6f:0c:2d:2b:62:f6:66:e0:d7:3a:b6:df:c2:b1:86: 04:5d:80:22:74:f3:8b:15:47:52:73:ed:44:e4:88: 92:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4D:F9:34:88:BB:54:B4:B3:86:A1:9A:23:2C:B4:28:2B:40:06:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4a550428-74fe-3227-a036-ecfd9d4fd689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9e:eb:00:a7:0c:61:90:95:73:9c:43:f1:78:26:22:fd:3d: 98:4d:7d:55:49:55:e5:56:64:e8:a3:22:1f:6c:67:1a:f6:5f: 7f:ab:5f:4f:ed:0b:c6:df:5a:d6:a6:99:da:d4:73:24:82:c2: 9e:29:4c:48:c3:40:c6:49:76:e5:19:ff:45:50:d8:60:f4:7a: 38:4a:f6:d6:32:af:98:55:67:f1:06:3c:3f:51:45:f6:44:4f: 4c:0e:64:59:35:c1:e2:f3:c4:36:fd:b0:08:82:10:6d:14:52: 0f:d7:23:8e:5f:8a:1a:0d:06:a3:03:db:7f:ab:9b:bf:2a:fa: db:a6:9e:d6:47:6d:64:72:98:72:f0:fe:3c:17:5a:74:82:8a: 81:c2:3b:23:98:fa:51:12:6f:19:28:64:5a:59:93:05:34:d5: 21:c8:51:51:82:16:1b:e7:95:8e:dd:49:9a:0b:e2:76:b4:af: c6:d5:ae:68:61:5f:7e:48:fb:d6:de:0d:ac:d6:f2:cc:ee:45: 28:14:0f:0f:6f:6f:9c:ae:7a:75:76:39:5a:fc:b5:12:43:a9: 0f:d6:50:8f:e6:a6:1c:7a:8d:8e:56:66:d6:76:d3:f4:32:cd: ed:b7:56:85:82:0c:7c:ac:43:31:04:0d:be:a0:11:61:28:91: d9:85:06:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEycMaM7AGW1ezLHS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk NzRjNjAwYzYtNjFmNi00NWI3LWE4NGMtNDBkMTM1YWVkNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIc4jBZTRVBZsmjkOYnjePeHWwoCs8M1Yt7r 2rJMPkKQSfdNBfUjlxBAbh91SfzivVKwN/vRd3TzYSb+inn+HBRF8j0XmQ2o2Bf8 1aujZ3uFxdTrqA1sc+p6oG0DzCswIsgLXykTFcTDFAuA5+PN3uoEggecyejSKTVr yVjsUeM8aQd1MKIhOjNg4lA9K3TZw3vhWDZbRV/JhMVcsiGy2iN8QJFb2REmsMhG 3nRWRTGn6KQtPSAjt68QYMDa7SL9NVvUj3yCU4Cf7T7E92sobyKOShqp0kvZpwBA 4bgU03xvDC0rYvZm4Nc6tt/CsYYEXYAidPOLFUdSc+1E5IiSjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1N+TSIu1S0s4ahmiMstCgrQAatMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNGE1NTA0MjgtNzRmZS0z MjI3LWEwMzYtZWNmZDlkNGZkNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqe6wCnDGGQlXOcQ/F4JiL9PZhNfVVJVeVWZOijIh9sZxr2X3+rX0/t C8bfWtammdrUcySCwp4pTEjDQMZJduUZ/0VQ2GD0ejhK9tYyr5hVZ/EGPD9RRfZE T0wOZFk1weLzxDb9sAiCEG0UUg/XI45fihoNBqMD23+rm78q+tumntZHbWRymHLw /jwXWnSCioHCOyOY+lESbxkoZFpZkwU01SHIUVGCFhvnlY7dSZoL4na0r8bVrmhh X35I+9beDazW8szuRSgUDw9vb5yuenV2OVr8tRJDqQ/WUI/mphx6jY5WZtZ20/Qy ze23VoWCDHysQzEEDb6gEWEokdmFBpU= -----END CERTIFICATE-----Generated at Mon Mar 2 09:30:00 2026 by rpki-client