$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4dc20166-e7b6-342b-8899-b8aa8b6e9796.roa File: 4dc20166-e7b6-342b-8899-b8aa8b6e9796.roa (raw, json) Hash identifier: 7o4d1O+XTzBdLwBmr7hM8oiz7e7hT/HvpB/1/L2PAVc= Subject key identifier: 08:DB:76:98:F7:70:FB:7C:37:93:F3:61:E2:A9:16:D2:3B:BD:E6:CA Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F189791563CA2295F9EEEE180 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4dc20166-e7b6-342b-8899-b8aa8b6e9796.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 8987 IP address blocks: 130.137.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:91:56:3c:a2:29:5f:9e:ee:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=f2f5bae3-33d5-4a6f-90b3-61431d2dbcc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:f3:e7:aa:18:9c:5a:92:e9:be:3f:d1:40: 5e:09:80:6e:3d:a8:d0:e7:76:0b:b9:c9:29:17:f9: 8d:2c:bf:0c:6b:77:3d:f6:e0:83:df:0a:8c:0d:79: a1:d2:db:c0:c1:5d:fe:e3:a0:c0:c0:89:70:f0:aa: e6:00:71:52:f3:57:fc:97:f7:33:84:35:25:07:a9: 2c:d1:51:e7:e3:dd:c7:6d:aa:ff:ad:5c:d9:e8:6a: b8:f1:f4:56:56:16:04:6b:9a:93:7e:e0:92:84:0c: 4c:ea:93:6d:2e:37:cd:11:8b:2e:d4:1e:eb:5b:4a: 1a:54:dc:30:ca:4e:f5:fb:48:13:0b:94:07:89:2b: e5:18:d1:3d:42:6f:38:a2:8f:a2:ef:a2:6c:05:9b: 4d:03:90:58:e8:7f:db:d5:20:0f:0b:45:d5:09:a4: bf:e5:a7:7e:68:1d:5a:9b:49:2e:26:23:43:65:ac: bc:2a:1d:32:5e:6f:06:ad:1d:bc:72:bb:3b:2a:c0: 7f:1c:f1:8c:f4:91:33:a6:9b:68:93:3b:45:e0:8d: 91:bc:2a:e9:a5:a8:76:d8:5b:7e:f1:d9:35:f5:5a: 7c:66:13:7f:5f:75:c0:0c:88:e0:00:50:ad:e3:46: e6:90:ae:e2:82:c6:a2:f9:99:e3:31:21:6e:5e:b3: 82:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DB:76:98:F7:70:FB:7C:37:93:F3:61:E2:A9:16:D2:3B:BD:E6:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4dc20166-e7b6-342b-8899-b8aa8b6e9796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:21:04:41:94:2c:97:7f:e2:fd:5e:ca:2a:7d:64:f9:29:be: ca:d8:59:df:e3:2c:b7:3c:a8:53:14:17:dc:29:97:54:d3:bf: 44:c8:e1:7c:d8:cc:36:c3:30:7e:56:51:84:43:6a:a4:2f:1a: 5d:07:62:00:cd:37:e8:a5:2f:b2:b9:0f:ca:d9:33:64:35:7b: 19:58:1d:de:82:f8:d7:86:f2:33:ab:06:fe:f8:f3:b7:1d:80: b4:3d:69:73:a1:e5:8a:b2:6c:1d:12:ea:30:b6:9c:90:86:4d: f4:9c:7f:fe:01:fb:e4:10:c9:8a:de:be:d3:c3:c8:eb:c2:0f: 17:a8:71:06:53:17:33:69:8a:5f:6a:19:41:53:97:ee:0c:ae: d2:08:fd:ba:02:2b:66:84:8d:a7:b5:e3:5f:47:e6:2d:14:9b: d0:61:05:27:c2:f6:9a:d1:5c:3e:04:ef:93:1a:e6:5a:10:f4: 77:68:78:ad:05:53:73:3a:d8:f8:b6:fe:e1:40:d6:13:91:48: 5f:5f:61:ec:27:45:f3:97:58:77:ae:a3:75:b7:74:18:11:0a: ee:39:38:e9:b8:2c:71:6c:d6:da:49:2d:4b:30:a5:70:97:80: fb:ad:b0:6e:5e:ea:02:4a:fe:db:6a:6c:ac:af:3b:16:c3:52: 87:f2:96:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5FWPKIpX57u4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjJmNWJhZTMtMzNkNS00YTZmLTkwYjMtNjE0MzFkMmRiY2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO/z56oYnFqS6b4/0UBeCYBuPajQ53YLuckp F/mNLL8Ma3c99uCD3wqMDXmh0tvAwV3+46DAwIlw8KrmAHFS81f8l/czhDUlB6ks 0VHn493Hbar/rVzZ6Gq48fRWVhYEa5qTfuCShAxM6pNtLjfNEYsu1B7rW0oaVNww yk71+0gTC5QHiSvlGNE9Qm84oo+i76JsBZtNA5BY6H/b1SAPC0XVCaS/5ad+aB1a m0kuJiNDZay8Kh0yXm8GrR28crs7KsB/HPGM9JEzpptokztF4I2RvCrppah22Ft+ 8dk19Vp8ZhN/X3XADIjgAFCt40bmkK7igsai+ZnjMSFuXrOC2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjbdpj3cPt8N5PzYeKpFtI7vebKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNGRjMjAxNjYtZTdiNi0z NDJiLTg4OTktYjhhYThiNmU5Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0hBEGULJd/4v1eyip9ZPkpvsrYWd/jLLc8qFMUF9wpl1TTv0TI4XzY zDbDMH5WUYRDaqQvGl0HYgDNN+ilL7K5D8rZM2Q1exlYHd6C+NeG8jOrBv7487cd gLQ9aXOh5YqybB0S6jC2nJCGTfScf/4B++QQyYrevtPDyOvCDxeocQZTFzNpil9q GUFTl+4MrtII/boCK2aEjae1419H5i0Um9BhBSfC9prRXD4E75Ma5loQ9HdoeK0F U3M62Pi2/uFA1hORSF9fYewnRfOXWHeuo3W3dBgRCu45OOm4LHFs1tpJLUswpXCX gPutsG5e6gJK/ttqbKyvOxbDUofyllo= -----END CERTIFICATE-----Generated at Sun Sep 20 18:38:14 2026 by rpki-client