$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5698d02a-cc23-3f5f-8cac-15c79e91d9a2.roa File: 5698d02a-cc23-3f5f-8cac-15c79e91d9a2.roa (raw, json) Hash identifier: SDLQ2p5j87fixOjnIIHyllNTA0tQCGr4SiSIdjg22O0= Subject key identifier: 9B:28:08:AD:9E:50:7D:5A:6C:08:46:D4:2C:22:E0:AC:E5:35:54:E5 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584C8B718901D480926754F13800 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5698d02a-cc23-3f5f-8cac-15c79e91d9a2.roa Signing time: Fri 16 Jan 2026 14:00:40 +0000 ROA not before: Fri 16 Jan 2026 14:00:40 +0000 ROA not after: Thu 16 Apr 2026 13:00:40 +0000 asID: 16509 IP address blocks: 130.137.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8b:71:89:01:d4:80:92:67:54:f1:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 16 14:00:40 2026 GMT Not After : Apr 16 13:00:40 2026 GMT Subject: CN=20fb46ad-0ac9-4fdc-a4e4-9577a03ac3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1f:f8:6d:b2:6d:86:cd:b8:52:5f:90:37:18: 2b:db:3d:f5:f6:d3:6b:60:79:e4:72:f4:96:37:cc: 39:be:00:a1:61:a2:d8:04:ae:56:61:3d:94:2e:e0: 1a:c2:4e:af:32:21:6a:9f:ab:37:d5:bb:78:ac:26: 94:3b:23:b5:85:22:b1:08:35:08:0c:d8:0a:61:5a: 0d:0b:12:a4:c4:ac:a8:7e:10:8b:3d:c6:45:8e:17: aa:09:fd:49:d8:d0:a3:e9:65:32:37:f0:2c:ac:0f: 86:88:c9:6c:67:9a:05:29:ad:cc:63:ea:d0:01:b4: dc:14:44:21:97:27:b5:29:d3:1d:68:e1:eb:b1:b7: 1c:c5:db:92:b2:f9:72:46:88:4d:41:4e:87:26:b0: dc:e3:8b:5f:6f:3f:26:11:d3:94:04:dd:26:e4:8a: ed:f1:48:a1:2c:1c:f5:11:9b:6a:39:c7:ca:d6:17: 4e:ed:1c:21:ac:f5:e6:1b:6a:27:55:2e:9c:75:9e: ff:80:f3:71:2c:ee:7e:dd:b0:37:39:96:ed:a5:c4: ca:2f:21:51:bc:32:8b:fa:c8:04:4e:e7:c7:f9:cb: db:6b:61:01:17:c8:ea:29:4d:7b:72:a7:5f:6c:5e: ac:c8:74:59:9f:64:8a:b0:4c:ac:d1:71:59:66:18: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:28:08:AD:9E:50:7D:5A:6C:08:46:D4:2C:22:E0:AC:E5:35:54:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5698d02a-cc23-3f5f-8cac-15c79e91d9a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:34:b7:43:aa:c8:e6:61:3c:b4:e4:95:f5:10:cb:99:89:56: b6:49:9f:a0:4f:db:ca:7c:ae:90:46:6d:e9:e7:30:ba:67:48: e6:b7:2d:9d:83:19:33:f7:f9:e7:60:20:7a:db:68:32:9f:cf: a2:12:54:14:f0:80:a0:69:27:f3:0a:3f:9f:0a:1b:22:82:cb: f4:dc:d5:f1:5b:52:3b:e0:b4:08:9e:ab:14:f2:c5:92:5b:7f: e8:7c:76:6e:72:cd:b6:55:55:01:3e:fb:0b:90:15:3d:16:72: 40:95:0e:23:a7:08:47:45:4e:1a:da:e9:07:0a:23:03:73:9c: 41:30:dc:d5:64:cb:e3:18:15:c6:b8:f2:fb:67:49:eb:44:2d: e0:b9:df:85:5e:7d:c8:5d:79:70:0c:3c:d8:a2:65:14:29:0c: 18:7b:7a:9f:61:71:9b:a0:84:f2:26:06:2a:6b:26:88:e2:78: 79:0d:29:9b:0e:b6:7d:ac:25:0b:9f:2d:85:45:9b:d8:9f:11: fa:12:a8:ff:ba:31:ab:8d:51:4a:40:5f:25:d8:64:4a:4d:10: e0:5e:13:d8:31:72:c4:c6:9b:27:6f:b4:c0:37:a0:64:4c:62: 34:19:20:78:c4:db:bf:34:77:0d:d0:01:cc:fe:41:bf:bd:6a: 3c:f0:bb:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyLcYkB1ICSZ1TxOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDExNjE0MDA0MFoXDTI2MDQxNjEzMDA0MFowLzEtMCsGA1UEAxMk MjBmYjQ2YWQtMGFjOS00ZmRjLWE0ZTQtOTU3N2EwM2FjM2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x/4bbJths24Ul+QNxgr2z319tNrYHnkcvSW N8w5vgChYaLYBK5WYT2ULuAawk6vMiFqn6s31bt4rCaUOyO1hSKxCDUIDNgKYVoN CxKkxKyofhCLPcZFjheqCf1J2NCj6WUyN/AsrA+GiMlsZ5oFKa3MY+rQAbTcFEQh lye1KdMdaOHrsbccxduSsvlyRohNQU6HJrDc44tfbz8mEdOUBN0m5Irt8UihLBz1 EZtqOcfK1hdO7RwhrPXmG2onVS6cdZ7/gPNxLO5+3bA3OZbtpcTKLyFRvDKL+sgE TufH+cvba2EBF8jqKU17cqdfbF6syHRZn2SKsEys0XFZZhhDXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsoCK2eUH1abAhG1Cwi4KzlNVTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTY5OGQwMmEtY2MyMy0z ZjVmLThjYWMtMTVjNzllOTFkOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIs0t0OqyOZhPLTklfUQy5mJVrZJn6BP28p8rpBGbennMLpnSOa3LZ2D GTP3+edgIHrbaDKfz6ISVBTwgKBpJ/MKP58KGyKCy/Tc1fFbUjvgtAieqxTyxZJb f+h8dm5yzbZVVQE++wuQFT0WckCVDiOnCEdFThra6QcKIwNznEEw3NVky+MYFca4 8vtnSetELeC534VefchdeXAMPNiiZRQpDBh7ep9hcZughPImBiprJojieHkNKZsO tn2sJQufLYVFm9ifEfoSqP+6MauNUUpAXyXYZEpNEOBeE9gxcsTGmydvtMA3oGRM YjQZIHjE2780dw3QAcz+Qb+9ajzwu0k= -----END CERTIFICATE-----Generated at Mon Mar 2 03:14:00 2026 by rpki-client