$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/62488cd5-5e9e-30f5-8900-d26a6d44f15d.roa File: 62488cd5-5e9e-30f5-8900-d26a6d44f15d.roa (raw, json) Hash identifier: zzypc+jTFlyOqTAp+gaOprA2+PR/6eKHpacPM1so6GY= Subject key identifier: 70:FC:FC:56:F1:E7:92:01:F1:0A:CA:3F:9D:9D:6C:75:63:3B:59:1E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F23C2845F053A00A82CA20820 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/62488cd5-5e9e-30f5-8900-d26a6d44f15d.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 130.137.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:84:5f:05:3a:00:a8:2c:a2:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=8f479faa-56ce-4dd5-ab52-dbe65555d27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:43:dd:a2:63:8d:87:d5:66:58:63:87:37: 4e:99:79:da:a3:14:a0:e8:6e:1e:a5:40:56:c0:62: 90:46:0c:6d:ad:06:c0:00:1b:95:7d:e3:2b:98:b1: 9b:0e:a8:23:72:a5:84:f3:58:5c:d2:13:f9:98:70: 2c:7f:98:0d:3a:5a:3f:c0:c4:f2:eb:ad:32:40:57: 9c:c1:5c:cf:9a:e7:26:32:58:7f:67:84:fa:63:ff: f7:6b:bc:8f:32:ce:2d:0c:26:f1:ec:47:fb:d1:00: d4:75:62:db:88:ac:05:aa:00:bf:21:31:b1:13:7c: e8:fc:0b:5d:57:f1:39:49:f0:93:61:5e:58:fa:71: c2:b9:11:20:72:73:83:14:c0:25:4d:46:dc:21:2d: bb:e2:2f:20:74:df:83:42:3d:0a:bc:06:b5:20:54: d8:55:fb:31:74:ef:be:64:3f:de:30:14:76:26:df: 57:2a:d6:86:2d:ec:52:0a:58:47:68:6b:66:95:bc: ee:29:12:1a:c8:ff:09:ba:b4:a1:97:b4:bd:52:c7: dd:d9:2d:b9:04:0c:62:7a:53:ef:d4:1c:05:9a:a9: 4a:29:ce:4d:61:4b:b5:73:45:a1:80:d6:75:ea:a2: 07:ff:dd:7c:a9:63:87:39:41:bf:ed:54:de:29:e5: 17:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FC:FC:56:F1:E7:92:01:F1:0A:CA:3F:9D:9D:6C:75:63:3B:59:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/62488cd5-5e9e-30f5-8900-d26a6d44f15d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:86:64:d2:f5:c6:b7:67:b3:53:57:8f:32:7e:55:b4:20:d1: 56:ee:29:32:f0:71:38:73:26:29:3d:f2:64:b0:ed:af:fa:8e: 0c:79:71:f1:37:44:09:9a:42:d5:d2:84:c2:c7:93:19:42:bd: b6:e6:06:d2:33:2a:5c:25:ce:af:c8:f2:c3:79:d8:51:c5:1b: cc:24:00:ed:18:60:b1:f7:b8:f9:f7:ff:9e:99:8e:40:79:90: 80:dd:1e:b5:61:8f:0a:61:f0:b4:9d:e1:7a:df:e4:c9:37:44: 22:02:50:fe:7e:12:96:c0:3e:80:fa:bb:bb:2e:0e:ef:be:31: fc:c2:20:36:7b:7a:c6:6c:a1:89:48:f4:0f:d2:64:04:9f:c9: 54:c6:04:b1:bb:b7:eb:40:55:3f:c4:6f:00:85:51:24:d3:54: 0e:09:4f:74:f7:2d:da:07:bc:0a:54:f8:d2:c1:16:69:35:51: 59:ab:e8:52:5b:94:c6:d1:87:94:92:3d:cb:e9:ba:a3:b2:28: f9:55:f2:c3:0b:d1:59:0b:ed:e6:24:41:6f:26:1d:17:2b:80: 8b:0d:ef:34:36:a7:08:e1:d1:3f:aa:ea:21:ed:23:ed:8e:c0: 6a:3d:e8:51:ee:55:34:de:11:a5:30:46:9c:f9:c1:96:3b:ef: 9c:6b:ad:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwoRfBToAqCyiCCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk OGY0NzlmYWEtNTZjZS00ZGQ1LWFiNTItZGJlNjU1NTVkMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2tD3aJjjYfVZlhjhzdOmXnaoxSg6G4epUBW wGKQRgxtrQbAABuVfeMrmLGbDqgjcqWE81hc0hP5mHAsf5gNOlo/wMTy660yQFec wVzPmucmMlh/Z4T6Y//3a7yPMs4tDCbx7Ef70QDUdWLbiKwFqgC/ITGxE3zo/Atd V/E5SfCTYV5Y+nHCuREgcnODFMAlTUbcIS274i8gdN+DQj0KvAa1IFTYVfsxdO++ ZD/eMBR2Jt9XKtaGLexSClhHaGtmlbzuKRIayP8JurShl7S9Usfd2S25BAxielPv 1BwFmqlKKc5NYUu1c0WhgNZ16qIH/918qWOHOUG/7VTeKeUX9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHD8/Fbx55IB8QrKP52dbHVjO1keMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNjI0ODhjZDUtNWU5ZS0z MGY1LTg5MDAtZDI2YTZkNDRmMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2GZNL1xrdns1NXjzJ+VbQg0VbuKTLwcThzJik98mSw7a/6jgx5cfE3 RAmaQtXShMLHkxlCvbbmBtIzKlwlzq/I8sN52FHFG8wkAO0YYLH3uPn3/56ZjkB5 kIDdHrVhjwph8LSd4Xrf5Mk3RCICUP5+EpbAPoD6u7suDu++MfzCIDZ7esZsoYlI 9A/SZASfyVTGBLG7t+tAVT/EbwCFUSTTVA4JT3T3LdoHvApU+NLBFmk1UVmr6FJb lMbRh5SSPcvpuqOyKPlV8sML0VkL7eYkQW8mHRcrgIsN7zQ2pwjh0T+q6iHtI+2O wGo96FHuVTTeEaUwRpz5wZY775xrrWU= -----END CERTIFICATE-----Generated at Tue Sep 22 11:21:33 2026 by rpki-client