$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5bcdecf3-385d-3f55-9553-abed5e01afcc.roa File: 5bcdecf3-385d-3f55-9553-abed5e01afcc.roa (raw, json) Hash identifier: kfQpD+95Omggl2zTsXTh43HpYM/Wdf8OL570TTfGyB0= Subject key identifier: E2:D1:78:DE:F5:17:62:07:A7:93:68:05:92:B7:18:C0:2D:F1:D5:35 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D7F9A7E310D271A83C7328C00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5bcdecf3-385d-3f55-9553-abed5e01afcc.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 130.137.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:7e:31:0d:27:1a:83:c7:32:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=ff9b104b-ba5f-48d9-b86e-0d84f29c3165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c7:42:93:ac:30:52:0e:46:83:a0:3f:74:17: 09:41:c5:dd:83:e6:f8:21:3c:eb:30:c7:62:64:cf: 28:b7:1e:27:17:79:65:69:5a:c0:3c:a6:ba:bd:31: c2:28:24:cd:54:a4:26:8c:6e:c4:d9:f3:20:8c:72: 03:6b:f5:fe:0a:71:82:24:e4:4b:75:0a:67:4d:f6: 90:aa:f5:6c:07:2f:9c:12:31:f5:e8:c8:c6:14:87: 2a:c3:47:12:9c:00:c3:6f:d9:22:81:5a:dd:0f:ce: ea:ad:e2:e9:6c:cd:4b:8f:aa:74:bf:52:ab:4a:6f: 70:b7:8e:27:2b:00:f8:63:56:77:b1:43:fa:f4:0e: 2c:36:bd:eb:a2:ad:38:53:1f:e8:f3:10:1a:b2:53: 32:58:40:0c:bc:b4:d9:ef:5f:7e:50:08:63:01:b6: 46:36:fd:b9:16:21:41:20:19:52:e2:b9:f7:c6:65: 4e:d9:47:5b:e3:e4:d6:64:44:dc:e4:e4:f2:49:ca: d8:cc:92:05:c4:08:81:14:e5:12:dc:ee:6b:d5:ee: e0:72:f8:13:28:50:32:7f:63:a7:ca:ef:41:52:9e: db:42:60:64:ef:d3:5c:c6:e3:96:81:eb:2a:68:4e: 3e:6b:fb:da:07:6b:d8:89:fa:de:7d:cd:cd:68:4f: b0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D1:78:DE:F5:17:62:07:A7:93:68:05:92:B7:18:C0:2D:F1:D5:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5bcdecf3-385d-3f55-9553-abed5e01afcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:5d:fe:c9:67:7e:b1:cb:f4:34:ec:ed:88:85:30:0b:e4:86: 5c:f3:d7:64:f2:64:82:04:52:fc:66:79:d1:20:20:ff:07:e1: 61:5a:17:e3:fc:46:ef:90:dc:2f:2f:0c:aa:15:a2:16:79:e9: fc:6a:ac:b9:71:2b:7f:fc:09:fa:f6:2c:87:4a:09:78:e8:8a: 2e:c0:01:b5:89:64:d4:8b:48:02:fe:4e:bf:42:6a:03:ab:04: c2:95:f1:58:14:06:8c:c7:ae:12:44:6f:c6:0b:a3:62:58:2e: ee:aa:b4:d4:a7:64:2a:28:5a:e3:4d:55:f3:b8:a3:9d:12:c5: 4f:ee:84:df:34:bb:8b:31:c4:3e:20:74:cd:bb:dd:ee:d6:9e: 50:12:06:8a:1d:99:01:c6:1e:d0:f3:7c:e6:b8:07:e4:de:3d: f3:51:b4:2b:a5:05:d7:b8:45:55:8f:00:4d:c7:f1:87:4c:86: e2:b5:01:84:60:33:56:6e:41:e8:30:8d:1e:6e:06:c5:ad:58: bc:1b:46:5d:f0:96:e7:38:69:32:93:28:dd:ad:ac:a0:38:10: 20:40:07:30:57:3b:f4:da:59:ea:6c:0b:65:d8:21:75:31:bc: 2d:fc:d0:17:43:c6:85:75:74:09:42:31:ed:23:45:1a:1f:a4: 65:a2:d8:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mn4xDScag8cyjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZmY5YjEwNGItYmE1Zi00OGQ5LWI4NmUtMGQ4NGYyOWMzMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsdCk6wwUg5Gg6A/dBcJQcXdg+b4ITzrMMdi ZM8otx4nF3llaVrAPKa6vTHCKCTNVKQmjG7E2fMgjHIDa/X+CnGCJORLdQpnTfaQ qvVsBy+cEjH16MjGFIcqw0cSnADDb9kigVrdD87qreLpbM1Lj6p0v1KrSm9wt44n KwD4Y1Z3sUP69A4sNr3roq04Ux/o8xAaslMyWEAMvLTZ719+UAhjAbZGNv25FiFB IBlS4rn3xmVO2Udb4+TWZETc5OTyScrYzJIFxAiBFOUS3O5r1e7gcvgTKFAyf2On yu9BUp7bQmBk79NcxuOWgesqaE4+a/vaB2vYifrefc3NaE+wUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLReN71F2IHp5NoBZK3GMAt8dU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWJjZGVjZjMtMzg1ZC0z ZjU1LTk1NTMtYWJlZDVlMDFhZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJd/slnfrHL9DTs7YiFMAvkhlzz12TyZIIEUvxmedEgIP8H4WFaF+P8 Ru+Q3C8vDKoVohZ56fxqrLlxK3/8Cfr2LIdKCXjoii7AAbWJZNSLSAL+Tr9CagOr BMKV8VgUBozHrhJEb8YLo2JYLu6qtNSnZCooWuNNVfO4o50SxU/uhN80u4sxxD4g dM273e7WnlASBoodmQHGHtDzfOa4B+TePfNRtCulBde4RVWPAE3H8YdMhuK1AYRg M1ZuQegwjR5uBsWtWLwbRl3wluc4aTKTKN2trKA4ECBABzBXO/TaWepsC2XYIXUx vC380BdDxoV1dAlCMe0jRRofpGWi2CY= -----END CERTIFICATE-----Generated at Fri Apr 17 11:58:11 2026 by rpki-client