$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a34b40b-a7ce-3c7c-8b72-1848b96e6e7c.roa File: 5a34b40b-a7ce-3c7c-8b72-1848b96e6e7c.roa (raw, json) Hash identifier: XW/9hg+M3Y75YAgR59ByjhAWTx4FwIqzePyHQF5Eh1M= Subject key identifier: B1:A8:43:24:A1:F5:AB:2A:17:8C:99:81:1E:43:71:01:26:A9:7A:06 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D7CCFCB09F2D648871A673500 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a34b40b-a7ce-3c7c-8b72-1848b96e6e7c.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 8987 IP address blocks: 130.137.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:cb:09:f2:d6:48:87:1a:67:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=67feffa4-86ee-4050-853c-86dee21cb8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9c:2a:7a:46:5b:7a:99:fb:28:b9:9b:48:33: 4b:e9:a4:21:40:ba:6c:be:74:7e:9a:f5:08:49:62: ae:cd:51:e2:c5:89:9c:14:d1:22:0a:79:54:28:fc: c2:e5:fe:2c:1c:9e:c6:56:33:e2:22:a6:98:4f:b9: 9f:10:ed:93:e4:f0:b2:58:4e:3c:5b:79:af:73:4e: 08:8a:81:7f:0e:42:0f:14:5b:95:01:58:08:4d:61: 67:27:c8:5b:ac:5e:d1:95:af:02:67:93:c1:96:8e: ba:8d:ee:6f:ed:fc:74:fc:b3:74:e3:92:2e:86:95: 43:a8:4f:3f:d9:ab:1c:c0:1d:2e:a4:a7:1d:a8:f0: af:0d:17:0d:d7:1f:09:c9:00:02:75:c1:90:8a:3e: c9:5f:81:d2:10:79:04:83:c4:5d:9d:4b:e2:b0:ed: 28:73:01:cc:bf:1a:a4:70:cb:6a:32:ab:27:4a:de: 1c:48:c8:5a:8f:e3:3e:04:fc:ce:dc:34:52:45:b0: 6a:29:f6:86:60:04:7c:9c:c7:f2:fb:ac:fd:c4:f1: 5e:02:7e:be:3c:fe:ae:fb:79:fd:51:5e:c9:71:1c: 53:4d:42:f9:49:a5:4f:0a:29:37:e9:5e:83:54:99: 66:0e:2e:9a:13:0e:a1:a4:b3:03:74:3b:44:0b:71: 56:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:43:24:A1:F5:AB:2A:17:8C:99:81:1E:43:71:01:26:A9:7A:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a34b40b-a7ce-3c7c-8b72-1848b96e6e7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c1:e5:4d:c1:99:8e:ec:35:9f:1e:a6:c0:46:93:6b:9f:2c: 5a:78:de:43:f8:da:ad:9f:c5:0e:79:56:42:19:ed:da:b7:c8: 2c:e6:a5:5a:d3:42:8b:3a:76:41:fd:e6:91:80:42:de:6a:d1: c3:c2:70:fb:11:d8:b9:0a:33:8e:6a:11:5c:e8:82:53:16:b7: dd:fe:df:a6:c8:c0:35:3c:3c:8d:79:94:25:9c:bc:f2:6c:f0: 2c:d1:86:0c:2c:1e:25:91:d4:31:73:83:bc:8c:f9:da:8c:3d: 23:90:fb:e9:79:17:bf:3d:83:cb:1b:95:87:f5:1b:70:db:37: d0:a7:b9:73:14:26:44:06:8a:44:42:3a:14:df:b1:72:02:53: 6d:4a:e9:a0:4a:b9:04:95:3a:c0:a4:f4:69:93:3b:47:49:b5: 47:65:16:e9:bb:45:ec:dc:60:da:f4:3d:dc:05:88:22:ac:6c: 92:55:63:04:fe:e0:af:d7:04:72:92:81:b7:15:0b:e2:67:c1: df:54:17:a6:81:e3:01:ac:ff:16:94:20:fa:d0:0d:ea:ec:a7: d0:85:b8:11:1e:46:ef:18:dc:bb:05:04:a9:2d:46:d0:86:9d: 7c:34:c4:2c:b9:a4:ce:68:02:9a:5c:63:4c:c8:d0:bd:85:05: ae:89:07:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z8sJ8tZIhxpnNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk NjdmZWZmYTQtODZlZS00MDUwLTg1M2MtODZkZWUyMWNiOGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJwqekZbepn7KLmbSDNL6aQhQLpsvnR+mvUI SWKuzVHixYmcFNEiCnlUKPzC5f4sHJ7GVjPiIqaYT7mfEO2T5PCyWE48W3mvc04I ioF/DkIPFFuVAVgITWFnJ8hbrF7Rla8CZ5PBlo66je5v7fx0/LN045IuhpVDqE8/ 2ascwB0upKcdqPCvDRcN1x8JyQACdcGQij7JX4HSEHkEg8RdnUvisO0ocwHMvxqk cMtqMqsnSt4cSMhaj+M+BPzO3DRSRbBqKfaGYAR8nMfy+6z9xPFeAn6+PP6u+3n9 UV7JcRxTTUL5SaVPCik36V6DVJlmDi6aEw6hpLMDdDtEC3FWqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGoQySh9asqF4yZgR5DcQEmqXoGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWEzNGI0MGItYTdjZS0z YzdjLThiNzItMTg0OGI5NmU2ZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLB5U3BmY7sNZ8epsBGk2ufLFp43kP42q2fxQ55VkIZ7dq3yCzmpVrT Qos6dkH95pGAQt5q0cPCcPsR2LkKM45qEVzoglMWt93+36bIwDU8PI15lCWcvPJs 8CzRhgwsHiWR1DFzg7yM+dqMPSOQ++l5F789g8sblYf1G3DbN9CnuXMUJkQGikRC OhTfsXICU21K6aBKuQSVOsCk9GmTO0dJtUdlFum7RezcYNr0PdwFiCKsbJJVYwT+ 4K/XBHKSgbcVC+Jnwd9UF6aB4wGs/xaUIPrQDersp9CFuBEeRu8Y3LsFBKktRtCG nXw0xCy5pM5oAppcY0zI0L2FBa6JB30= -----END CERTIFICATE-----Generated at Fri Apr 17 14:31:46 2026 by rpki-client