$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67e9bfe3-6204-31a1-99ff-76b89b2a8067.roa File: 67e9bfe3-6204-31a1-99ff-76b89b2a8067.roa (raw, json) Hash identifier: Qh52ayGPdNudM3mGQPgbZL2Q7uGeltD5GYQqSF1RF8s= Subject key identifier: FF:60:75:D2:49:F3:5B:33:E5:CD:33:06:A4:2E:5D:54:4B:DD:EE:8F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584EFCACC3040F988D45893EBE00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67e9bfe3-6204-31a1-99ff-76b89b2a8067.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 130.137.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c3:04:0f:98:8d:45:89:3e:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=2c7fe7f0-8d02-4cec-82fd-362b6fcc6108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:41:7e:99:de:d6:8a:80:78:ff:a2:e6:55:4d: 56:fa:92:65:12:63:c8:b8:8d:8c:93:f1:a0:16:c3: e0:57:16:d1:a5:d8:81:8c:d3:cc:4e:52:1e:90:f4: b9:f6:a4:39:19:6a:38:32:0e:53:17:11:94:9e:45: cd:3d:87:c5:f4:43:40:33:b2:4a:23:66:d9:b0:3a: 6c:e4:f6:68:6f:f8:51:ea:ac:86:0e:3d:cd:29:3f: 5a:5f:07:92:94:0a:f4:af:bb:aa:f6:48:98:9b:69: c1:45:d9:f9:a3:2f:66:91:06:ee:56:c6:4e:3e:3b: 09:66:c3:f3:49:1d:56:de:34:7f:1e:b8:dd:8e:a6: 7d:0e:cc:8e:73:7b:21:ad:49:29:cc:ce:5b:4f:9f: 49:58:90:56:7c:24:b6:fc:9a:55:a5:c7:fa:09:9c: 50:39:4d:26:24:70:32:4b:8e:c1:3c:11:2c:de:cd: 26:48:4e:b3:99:d8:8e:f7:59:92:d8:7c:fb:09:6b: d1:1c:48:d5:e1:f7:0c:68:70:0d:c0:17:d1:1c:6b: ec:01:cb:81:4b:ed:22:2f:0e:87:2e:45:fb:00:0f: 57:10:2f:8c:9f:08:9a:c9:40:41:91:97:b3:64:99: ce:a6:0e:34:85:12:89:56:99:bb:c7:f3:ce:92:8b: 04:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:60:75:D2:49:F3:5B:33:E5:CD:33:06:A4:2E:5D:54:4B:DD:EE:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67e9bfe3-6204-31a1-99ff-76b89b2a8067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:18:26:0d:53:04:a8:01:a5:a3:0d:26:09:e4:af:68:0c:54: 70:60:7f:8e:de:3b:3e:35:65:15:d2:eb:81:a2:f1:21:d5:61: d0:84:ff:e4:e0:f0:5a:44:32:16:8a:79:d0:7c:4f:34:c7:c7: fe:38:3c:18:19:8f:34:6d:ba:4b:51:a9:d7:b1:21:9c:54:6a: bd:eb:cc:3b:5e:43:27:5f:7e:da:78:8e:08:73:1b:90:27:cd: da:c8:18:28:0a:05:21:d5:51:18:51:a9:44:e4:7a:b3:99:2b: 08:fd:c4:38:b6:0a:09:98:0d:09:06:6a:13:cf:58:4b:37:0e: 94:1a:3d:28:e2:da:ad:32:a9:ca:aa:ab:16:23:11:47:46:94: 81:eb:8b:d2:12:eb:0e:89:ec:f2:7f:40:d9:55:a9:d0:ad:15: e8:ba:8c:2b:49:15:1f:32:2f:a4:fe:e6:9e:96:9b:82:54:01: be:6c:5e:32:73:f2:eb:5b:3b:aa:c7:7b:5a:61:da:8c:17:aa: e0:69:ec:bc:38:bf:ee:b4:b0:f8:5e:57:1f:f4:9a:92:58:ed: 71:cf:fc:8d:24:1a:d6:57:11:ed:eb:78:e5:94:2b:17:88:d0: 3b:cc:9d:39:3f:21:f2:24:27:39:ce:3e:55:28:61:d9:a1:29: 81:e9:eb:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMMED5iNRYk+vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MmM3ZmU3ZjAtOGQwMi00Y2VjLTgyZmQtMzYyYjZmY2M2MTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0F+md7WioB4/6LmVU1W+pJlEmPIuI2Mk/Gg FsPgVxbRpdiBjNPMTlIekPS59qQ5GWo4Mg5TFxGUnkXNPYfF9ENAM7JKI2bZsDps 5PZob/hR6qyGDj3NKT9aXweSlAr0r7uq9kiYm2nBRdn5oy9mkQbuVsZOPjsJZsPz SR1W3jR/HrjdjqZ9DsyOc3shrUkpzM5bT59JWJBWfCS2/JpVpcf6CZxQOU0mJHAy S47BPBEs3s0mSE6zmdiO91mS2Hz7CWvRHEjV4fcMaHANwBfRHGvsAcuBS+0iLw6H LkX7AA9XEC+MnwiayUBBkZezZJnOpg40hRKJVpm7x/POkosEIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9gddJJ81sz5c0zBqQuXVRL3e6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNjdlOWJmZTMtNjIwNC0z MWExLTk5ZmYtNzZiODliMmE4MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcYJg1TBKgBpaMNJgnkr2gMVHBgf47eOz41ZRXS64Gi8SHVYdCE/+Tg 8FpEMhaKedB8TzTHx/44PBgZjzRtuktRqdexIZxUar3rzDteQydfftp4jghzG5An zdrIGCgKBSHVURhRqUTkerOZKwj9xDi2CgmYDQkGahPPWEs3DpQaPSji2q0yqcqq qxYjEUdGlIHri9IS6w6J7PJ/QNlVqdCtFei6jCtJFR8yL6T+5p6Wm4JUAb5sXjJz 8utbO6rHe1ph2owXquBp7Lw4v+60sPheVx/0mpJY7XHP/I0kGtZXEe3reOWUKxeI 0DvMnTk/IfIkJznOPlUoYdmhKYHp6+g= -----END CERTIFICATE-----Generated at Sun Sep 27 04:22:58 2026 by rpki-client