$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/69a247de-515a-36b4-8928-8d0f74a87a65.roa File: 69a247de-515a-36b4-8928-8d0f74a87a65.roa (raw, json) Hash identifier: FW0bXAJVLGGGMvFuWJt+cFfRCfiRiX1Nhvd+KExB6Zc= Subject key identifier: AF:13:F0:81:E0:5C:CF:13:3C:91:E9:E1:00:80:B5:CA:21:52:BB:BB Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584C9536D470D8FB986F905DBDC0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/69a247de-515a-36b4-8928-8d0f74a87a65.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 16509 IP address blocks: 130.137.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:36:d4:70:d8:fb:98:6f:90:5d:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=4d01825a-c7e4-4f5a-b8b6-d2c4212ea14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:ed:34:8d:05:9a:e4:71:26:93:dc:6f:1e: eb:73:9e:a8:24:73:fe:30:17:a8:7e:73:4d:b1:76: 3b:21:4c:7d:be:ff:65:d8:57:6c:6a:6b:52:57:57: 8e:ac:d0:e2:c3:00:76:8b:db:cb:d5:f9:27:04:32: c3:8c:b2:d8:ff:a1:75:b5:6b:ee:07:fa:83:92:1a: 12:c1:de:3f:57:3d:dd:1a:5e:c0:0a:bf:4f:44:20: 47:e1:9e:e7:48:1b:98:19:68:86:60:1f:77:a8:1a: e8:16:d8:4b:e9:e6:99:11:63:70:ba:3d:96:dd:fc: b2:5a:b1:86:43:94:70:64:b6:36:a8:9e:13:89:c6: 9e:15:9c:d1:92:f0:d4:aa:70:4d:fc:8f:7e:e3:ee: 42:52:8b:f1:ad:aa:b5:8c:08:d0:71:94:d8:b5:71: 85:d0:ad:ae:9f:3e:6a:47:2b:3c:ef:8c:42:20:c0: c9:a8:3b:5c:36:15:7c:de:56:fd:e9:78:7e:bd:1c: 0f:5a:1e:39:22:be:c1:ff:13:00:4d:b9:6d:a5:a9: a4:a8:0c:fe:e6:94:13:c5:10:90:89:d5:d4:d2:35: 08:72:17:fd:36:db:b8:c6:58:ee:3d:8e:4e:f4:90: fb:41:d3:3e:9d:47:fd:8c:a1:37:59:f6:29:5c:5e: 1e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:13:F0:81:E0:5C:CF:13:3C:91:E9:E1:00:80:B5:CA:21:52:BB:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/69a247de-515a-36b4-8928-8d0f74a87a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e5:e1:34:9d:44:44:24:f5:85:d8:9a:65:ff:ed:83:f3:e6: ff:44:88:98:36:e1:be:1f:e9:cf:b3:ee:76:00:a4:f8:5c:61: 6b:8a:a2:15:e6:8c:3c:f0:ea:31:5f:c3:e7:cc:66:19:1d:af: 56:80:1a:b3:e9:d3:35:4e:e5:16:d1:79:f3:ab:81:3a:e5:61: 32:b3:fc:9d:fd:53:1a:9d:88:fd:38:1e:bf:a7:5d:f8:19:d8: c8:4f:ba:8d:22:eb:c0:9e:02:81:3c:ac:ca:ce:51:14:a8:64: a8:4d:33:4c:d4:44:5d:9c:35:7b:af:cf:52:16:a2:27:be:94: 2c:8a:46:13:ef:ce:ae:eb:ea:69:cf:44:0f:ac:b3:b0:8f:76: ad:9d:71:85:ca:15:55:ba:ff:53:aa:ba:a6:44:7c:7f:64:bb: b8:ea:ab:a9:2c:ad:71:be:69:9b:26:38:be:73:a1:cb:26:85: 8d:9f:cd:3c:26:54:33:04:70:1f:e7:2e:89:1b:8a:2d:e4:c1: bd:b0:4b:18:0e:2b:8c:de:79:a5:12:ca:e8:f6:9f:68:ef:d4: 5b:6b:e8:7c:fb:0d:8c:59:d2:d4:02:1a:f2:b7:19:dc:14:51: 9f:fe:41:37:c4:d2:df:5f:b6:19:4a:24:8c:aa:06:86:b8:34: 0d:6c:29:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyVNtRw2PuYb5BdvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk NGQwMTgyNWEtYzdlNC00ZjVhLWI4YjYtZDJjNDIxMmVhMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIrtNI0FmuRxJpPcbx7rc56oJHP+MBeofnNN sXY7IUx9vv9l2FdsamtSV1eOrNDiwwB2i9vL1fknBDLDjLLY/6F1tWvuB/qDkhoS wd4/Vz3dGl7ACr9PRCBH4Z7nSBuYGWiGYB93qBroFthL6eaZEWNwuj2W3fyyWrGG Q5RwZLY2qJ4TicaeFZzRkvDUqnBN/I9+4+5CUovxraq1jAjQcZTYtXGF0K2unz5q Rys874xCIMDJqDtcNhV83lb96Xh+vRwPWh45Ir7B/xMATbltpamkqAz+5pQTxRCQ idXU0jUIchf9Ntu4xljuPY5O9JD7QdM+nUf9jKE3WfYpXF4eewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8T8IHgXM8TPJHp4QCAtcohUru7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNjlhMjQ3ZGUtNTE1YS0z NmI0LTg5MjgtOGQwZjc0YTg3YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTl4TSdREQk9YXYmmX/7YPz5v9EiJg24b4f6c+z7nYApPhcYWuKohXm jDzw6jFfw+fMZhkdr1aAGrPp0zVO5RbRefOrgTrlYTKz/J39UxqdiP04Hr+nXfgZ 2MhPuo0i68CeAoE8rMrOURSoZKhNM0zURF2cNXuvz1IWoie+lCyKRhPvzq7r6mnP RA+ss7CPdq2dcYXKFVW6/1OquqZEfH9ku7jqq6ksrXG+aZsmOL5zocsmhY2fzTwm VDMEcB/nLokbii3kwb2wSxgOK4zeeaUSyuj2n2jv1Ftr6Hz7DYxZ0tQCGvK3GdwU UZ/+QTfE0t9fthlKJIyqBoa4NA1sKb0= -----END CERTIFICATE-----Generated at Mon Mar 2 17:26:16 2026 by rpki-client