$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa File: 5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa (raw, json) Hash identifier: SA1ddNnbciWnvoS7GtGazfDZsfwnvCjumffVWzei7Xw= Subject key identifier: 35:C3:A9:14:99:59:B5:65:4D:C3:C2:1F:03:E4:59:51:CA:62:8A:1F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D7CCFCB35DB1E4BD99ACA7B50 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 8987 IP address blocks: 130.137.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:cb:35:db:1e:4b:d9:9a:ca:7b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=780c6c30-b7b5-4b8d-8190-bc51428d7df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1f:e5:90:ca:ff:b2:95:50:78:67:ca:39:19: 09:c4:0e:3b:1c:7d:ca:f5:2d:05:7b:fb:8f:5f:cc: 29:be:a0:b4:48:0a:b5:71:87:e0:f6:04:77:0d:a7: 31:a1:75:22:82:c2:a1:bf:de:10:fb:c8:0b:eb:d1: 61:ea:57:41:83:e1:1c:21:56:9d:c5:b1:6b:61:a9: 86:b0:42:4c:c8:9a:e3:71:02:f0:9a:b3:af:8e:6d: f4:49:68:85:6a:1d:ef:b6:a0:a9:3b:dc:48:50:1e: cc:85:ea:27:91:9e:23:e5:63:1d:6f:ff:35:d9:30: 39:29:1e:e3:79:06:6a:71:e0:41:8c:ec:6e:02:2f: 01:22:ad:6f:cd:8d:6f:34:80:32:44:01:90:09:ee: 30:0d:01:5c:ca:f0:3a:e1:af:e4:8b:f3:38:ff:4c: d5:b6:ba:ab:8e:ce:3a:27:89:ba:dd:57:fd:2f:19: a9:87:1d:1c:03:d9:7c:47:f6:cd:9c:ab:e9:d5:86: 3f:e6:f2:c3:87:dd:db:23:e8:99:20:9e:55:7b:3c: 6c:b8:95:9f:f8:0e:72:9b:64:0f:97:f6:48:3e:91: 68:31:99:3a:9e:5e:f9:7e:5c:28:af:1e:c2:0d:97: 19:e6:65:f6:10:73:b2:71:80:cb:e8:ae:d6:40:6e: ef:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C3:A9:14:99:59:B5:65:4D:C3:C2:1F:03:E4:59:51:CA:62:8A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0c:8e:a7:bd:16:cf:05:98:ea:ea:b2:cc:72:1c:3a:be:d6: b5:90:09:40:f8:ea:0e:2f:d4:e7:6e:81:c0:0c:99:6d:6b:c4: 9d:59:f1:c0:15:38:fe:f6:7f:2e:11:f7:43:71:ce:8d:05:0b: 3f:16:f1:de:08:50:a8:d8:c8:ae:bd:c4:8e:6a:d5:62:2c:07: 1f:5d:d9:00:b0:9e:c7:47:28:cc:d8:d0:75:d0:1b:21:b4:d6: d0:23:ed:c7:90:25:e5:c3:47:52:f8:6f:ad:52:88:af:cf:98: a8:bb:43:6b:38:ab:f9:15:69:35:ab:35:66:1a:fd:29:27:ac: 52:31:78:13:f2:28:40:db:a2:ec:10:f8:39:87:76:7f:ec:f5: 46:d6:b9:21:87:3c:a6:8b:c0:c5:e6:9f:e9:27:d6:86:e1:68: 9c:68:99:fc:f9:e1:a3:58:be:5f:bf:ba:73:b6:57:48:91:94: c9:d8:4b:82:b7:f8:79:a6:9d:df:c0:d9:58:35:44:63:d3:c5: 23:15:2a:6e:5e:9a:5b:50:ec:e9:8a:bb:9a:b3:d5:cf:10:03: e8:82:5d:2b:4b:77:80:16:f3:c9:e8:58:3e:39:f7:cc:e4:82: 4d:55:e2:84:1c:95:75:05:a1:e2:d7:8f:56:49:3f:bf:b6:38: b9:15:0e:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z8s12x5L2ZrKe1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk NzgwYzZjMzAtYjdiNS00YjhkLTgxOTAtYmM1MTQyOGQ3ZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R/lkMr/spVQeGfKORkJxA47HH3K9S0Fe/uP X8wpvqC0SAq1cYfg9gR3DacxoXUigsKhv94Q+8gL69Fh6ldBg+EcIVadxbFrYamG sEJMyJrjcQLwmrOvjm30SWiFah3vtqCpO9xIUB7MheonkZ4j5WMdb/812TA5KR7j eQZqceBBjOxuAi8BIq1vzY1vNIAyRAGQCe4wDQFcyvA64a/ki/M4/0zVtrqrjs46 J4m63Vf9Lxmphx0cA9l8R/bNnKvp1YY/5vLDh93bI+iZIJ5VezxsuJWf+A5ym2QP l/ZIPpFoMZk6nl75flworx7CDZcZ5mX2EHOycYDL6K7WQG7vkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXDqRSZWbVlTcPCHwPkWVHKYoofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWEyNWQ3YjEtZThiOS0z MzVmLTlhMmMtOWEzYmYzZGFjMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIMjqe9Fs8FmOrqssxyHDq+1rWQCUD46g4v1OdugcAMmW1rxJ1Z8cAV OP72fy4R90Nxzo0FCz8W8d4IUKjYyK69xI5q1WIsBx9d2QCwnsdHKMzY0HXQGyG0 1tAj7ceQJeXDR1L4b61SiK/PmKi7Q2s4q/kVaTWrNWYa/SknrFIxeBPyKEDbouwQ +DmHdn/s9UbWuSGHPKaLwMXmn+kn1obhaJxomfz54aNYvl+/unO2V0iRlMnYS4K3 +Hmmnd/A2Vg1RGPTxSMVKm5emltQ7OmKu5qz1c8QA+iCXStLd4AW88noWD4598zk gk1V4oQclXUFoeLXj1ZJP7+2OLkVDuE= -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:46 2026 by rpki-client