$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4c07e6cc-0a28-37eb-85b0-461fa1b46768.roa File: 4c07e6cc-0a28-37eb-85b0-461fa1b46768.roa (raw, json) Hash identifier: kfWBZWj2q3fAV+6qhBEcXG5oRfrq8cW1Dnw+wo89WPk= Subject key identifier: E3:19:7E:A4:0F:A8:00:51:C0:E7:0A:09:77:DD:D6:B1:A8:11:E4:6E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F02421B233ECEEDC221803FA8 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4c07e6cc-0a28-37eb-85b0-461fa1b46768.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 14618 IP address blocks: 130.137.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:1b:23:3e:ce:ed:c2:21:80:3f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=bfd67638-3047-4e32-bc44-0f8946bfd253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:53:fa:5a:af:b8:da:23:af:60:f2:11:bc:fc: 97:56:cf:3c:32:92:d2:51:87:89:37:46:a5:b4:45: cd:0c:cb:d7:e3:e8:a1:a2:26:fa:0f:fd:51:6b:b4: e4:31:11:4d:9f:d2:01:99:c5:e7:c8:01:79:93:3a: ff:7a:3d:d8:3c:1a:f1:69:79:ae:79:5b:92:87:86: 21:47:14:ef:0b:6a:7c:a5:3e:e9:0b:3c:03:00:b8: 1d:ba:ba:d5:64:8d:5b:3f:6d:df:c0:5d:2e:ce:44: 5a:16:2a:a3:0a:cb:a8:fe:c2:ce:b8:3c:4a:8c:ad: df:2b:bc:0e:fb:41:f7:6e:4e:b8:76:60:b0:f6:33: 86:dc:91:78:60:30:37:dd:64:1b:66:87:76:e1:94: 1b:0c:f1:af:39:76:45:ae:6e:b3:17:87:2e:a6:da: 6c:00:4d:35:60:10:ab:7a:ba:bc:35:f0:93:d8:a9: 0b:06:4a:73:e8:3b:b9:ce:99:7c:1a:b2:ba:69:77: de:b7:8e:01:f8:20:04:c0:4a:54:97:88:d2:27:c7: 0c:75:db:0c:e5:fc:db:67:68:b8:23:2b:8c:05:f3: c9:c3:4d:c3:86:32:50:0f:27:1f:97:66:84:36:54: 48:83:6d:74:62:6b:25:2e:64:6f:f1:05:d9:6d:a1: 19:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:19:7E:A4:0F:A8:00:51:C0:E7:0A:09:77:DD:D6:B1:A8:11:E4:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4c07e6cc-0a28-37eb-85b0-461fa1b46768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5d:b6:e4:a8:eb:24:1d:13:bb:65:25:d9:32:15:cc:be:0e: 82:f9:a9:64:66:78:c3:3e:e4:5b:fa:cd:fa:30:96:d1:46:23: b4:f0:cf:91:2d:06:2d:18:b6:84:62:23:63:ad:e7:f5:bd:57: e9:e5:69:98:18:61:5a:10:14:c7:07:b6:d6:dd:7a:bd:75:63: 37:01:32:9c:2e:72:5b:5f:5e:7b:94:00:82:40:22:ca:3c:62: 0e:c0:f8:45:58:6f:1f:13:bd:e0:06:cb:e7:7f:59:60:8c:2a: 81:1c:8a:07:33:cb:dc:b0:9a:b7:2b:3c:f1:9a:aa:63:e6:04: 59:b7:de:61:f3:df:96:97:ed:4b:d6:da:0c:1b:01:f7:97:0a: 81:3b:ae:46:7c:40:53:17:2b:5f:d3:82:5c:b4:4b:91:83:19: 0e:7c:35:c5:2e:45:a5:ea:40:09:18:41:24:25:f4:4e:a0:e9: 30:a4:74:27:50:f8:0c:3e:18:62:28:85:16:4d:2c:bc:19:f2: f9:71:fc:42:82:39:88:48:a2:34:20:48:f5:24:30:63:6f:2d: bf:d4:8f:47:de:4a:59:3e:15:ad:8a:b5:19:fc:7c:3f:d0:7d: ad:e6:37:7b:20:90:a4:ae:14:37:a8:f4:97:76:5b:a1:d1:08: 0f:6d:44:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhsjPs7twiGAP6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YmZkNjc2MzgtMzA0Ny00ZTMyLWJjNDQtMGY4OTQ2YmZkMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVP6Wq+42iOvYPIRvPyXVs88MpLSUYeJN0al tEXNDMvX4+ihoib6D/1Ra7TkMRFNn9IBmcXnyAF5kzr/ej3YPBrxaXmueVuSh4Yh RxTvC2p8pT7pCzwDALgdurrVZI1bP23fwF0uzkRaFiqjCsuo/sLOuDxKjK3fK7wO +0H3bk64dmCw9jOG3JF4YDA33WQbZod24ZQbDPGvOXZFrm6zF4cuptpsAE01YBCr erq8NfCT2KkLBkpz6Du5zpl8GrK6aXfet44B+CAEwEpUl4jSJ8cMddsM5fzbZ2i4 IyuMBfPJw03DhjJQDycfl2aENlRIg210YmslLmRv8QXZbaEZvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMZfqQPqABRwOcKCXfd1rGoEeRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNGMwN2U2Y2MtMGEyOC0z N2ViLTg1YjAtNDYxZmExYjQ2NzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFdtuSo6yQdE7tlJdkyFcy+DoL5qWRmeMM+5Fv6zfowltFGI7Twz5Et Bi0YtoRiI2Ot5/W9V+nlaZgYYVoQFMcHttbder11YzcBMpwucltfXnuUAIJAIso8 Yg7A+EVYbx8TveAGy+d/WWCMKoEcigczy9ywmrcrPPGaqmPmBFm33mHz35aX7UvW 2gwbAfeXCoE7rkZ8QFMXK1/Tgly0S5GDGQ58NcUuRaXqQAkYQSQl9E6g6TCkdCdQ +Aw+GGIohRZNLLwZ8vlx/EKCOYhIojQgSPUkMGNvLb/Uj0feSlk+Fa2KtRn8fD/Q fa3mN3sgkKSuFDeo9Jd2W6HRCA9tRJk= -----END CERTIFICATE-----Generated at Sun Sep 20 21:44:10 2026 by rpki-client