$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/58e4bc18-396e-39fd-8d90-ea8a3759108d.roa File: 58e4bc18-396e-39fd-8d90-ea8a3759108d.roa (raw, json) Hash identifier: KCSPUWUk5xTBjnx234EQkplrMmeZzUr1XDPwNstqMtM= Subject key identifier: C8:03:77:5D:D5:AF:D9:79:18:7A:D9:3A:0A:DC:A4:24:DC:85:49:C6 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F2ABD11F074CCDD18F61164C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/58e4bc18-396e-39fd-8d90-ea8a3759108d.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 130.137.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:11:f0:74:cc:dd:18:f6:11:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=4686aaaa-8bc3-481f-b92e-6dcb66ce2a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3a:7b:f1:97:c9:f0:22:f6:80:c6:23:a0:b8: 5f:c3:34:0c:89:b5:5b:cb:9d:1b:c8:cc:2d:fd:b3: 18:19:8c:5f:56:28:f8:c1:4f:44:20:20:1c:ba:1d: 06:dd:04:b1:dd:f5:92:09:89:19:5c:e5:1d:c6:de: 6b:36:f5:8f:46:4f:f3:e5:d5:5b:c5:3c:7f:7d:33: d6:23:e5:e7:cf:be:db:41:f4:3d:08:ae:f3:e1:8c: e3:33:35:56:22:b8:50:36:d3:1c:d2:31:83:df:46: c5:26:92:9e:4e:f9:8e:03:b4:08:8d:0c:f8:20:4f: 8c:8e:8e:06:72:3c:fb:fa:56:f3:4d:f3:e8:e3:31: ec:70:16:ff:03:51:b7:74:fb:d3:b6:5a:20:62:6a: 61:f1:c9:75:09:96:66:46:2a:3d:5b:09:bd:11:41: 13:8d:f1:27:ae:ec:f8:b3:68:4d:18:20:6c:65:2e: ed:9e:91:e3:11:24:39:ac:64:d5:ee:f8:1e:ea:7e: 32:89:c8:39:13:3a:2a:f4:1a:5b:b5:37:fc:bc:94: 7e:7d:23:31:7e:7e:af:84:43:cd:73:10:66:03:77: 4d:aa:5e:46:0a:08:74:77:be:d0:b8:08:2e:99:2c: 3a:b3:d9:05:70:7e:2b:ed:29:33:4a:cd:1b:64:12: 86:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:03:77:5D:D5:AF:D9:79:18:7A:D9:3A:0A:DC:A4:24:DC:85:49:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/58e4bc18-396e-39fd-8d90-ea8a3759108d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:29:3b:58:cf:bd:30:bf:ca:96:93:f1:dc:67:43:80:4a:90: af:9a:5d:21:cd:e6:3a:db:ec:c6:6b:f9:70:62:8d:2f:7a:29: 5d:ed:82:fd:99:6c:f2:42:f1:0f:36:3c:7f:e0:cb:4e:89:cc: 6f:03:41:88:0c:df:b7:f7:1d:c4:cc:7a:b1:6f:f3:f1:ca:db: 61:9c:c3:37:59:f0:5f:b0:fd:39:97:66:5d:f8:32:e5:62:b5: 6e:36:61:a5:13:e9:77:83:1e:73:26:d7:14:68:e0:27:be:2d: 52:08:ec:ae:f3:2c:cb:0e:5b:89:57:6b:68:fa:fa:7d:71:43: cc:66:17:c0:5c:ac:fe:5a:0f:18:26:48:69:ac:ec:6d:16:ee: 69:5e:8d:8d:7b:18:a9:54:0d:db:1d:4e:98:f2:7f:31:3f:01: 69:44:09:4f:a0:ce:bc:0d:1a:6a:cd:bc:41:64:18:ef:24:c0: 33:02:2f:b7:81:ea:79:f0:78:f9:3b:d4:ab:82:ef:0f:c7:31: 5a:1c:52:8c:50:58:b3:63:54:8f:00:48:cf:13:63:c6:cf:75: 0a:9e:76:88:01:9d:11:d0:f4:c0:04:71:42:db:43:4e:28:84: a7:21:3d:4b:ce:45:71:96:1d:08:cd:df:2c:c5:0c:d2:48:3f: ac:8a:75:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRHwdMzdGPYRZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NDY4NmFhYWEtOGJjMy00ODFmLWI5MmUtNmRjYjY2Y2UyYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jp78ZfJ8CL2gMYjoLhfwzQMibVby50byMwt /bMYGYxfVij4wU9EICAcuh0G3QSx3fWSCYkZXOUdxt5rNvWPRk/z5dVbxTx/fTPW I+Xnz77bQfQ9CK7z4YzjMzVWIrhQNtMc0jGD30bFJpKeTvmOA7QIjQz4IE+Mjo4G cjz7+lbzTfPo4zHscBb/A1G3dPvTtlogYmph8cl1CZZmRio9Wwm9EUETjfEnruz4 s2hNGCBsZS7tnpHjESQ5rGTV7vge6n4yicg5Ezoq9BpbtTf8vJR+fSMxfn6vhEPN cxBmA3dNql5GCgh0d77QuAgumSw6s9kFcH4r7SkzSs0bZBKGYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgDd13Vr9l5GHrZOgrcpCTchUnGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNThlNGJjMTgtMzk2ZS0z OWZkLThkOTAtZWE4YTM3NTkxMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGspO1jPvTC/ypaT8dxnQ4BKkK+aXSHN5jrb7MZr+XBijS96KV3tgv2Z bPJC8Q82PH/gy06JzG8DQYgM37f3HcTMerFv8/HK22GcwzdZ8F+w/TmXZl34MuVi tW42YaUT6XeDHnMm1xRo4Ce+LVII7K7zLMsOW4lXa2j6+n1xQ8xmF8BcrP5aDxgm SGms7G0W7mlejY17GKlUDdsdTpjyfzE/AWlECU+gzrwNGmrNvEFkGO8kwDMCL7eB 6nnwePk71KuC7w/HMVocUoxQWLNjVI8ASM8TY8bPdQqedogBnRHQ9MAEcULbQ04o hKchPUvORXGWHQjN3yzFDNJIP6yKdWk= -----END CERTIFICATE-----Generated at Mon Sep 21 10:50:25 2026 by rpki-client