$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/72be9948-9cba-369c-abf7-d341e95269bd.roa File: 72be9948-9cba-369c-abf7-d341e95269bd.roa (raw, json) Hash identifier: j2EstO7PV1W6C5k3wtO+0lNSNsqoGT0eW3WUFQZb/gA= Subject key identifier: FC:02:A7:20:49:B4:FA:63:11:9D:FD:27:A1:BA:76:B6:61:8E:E6:43 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F1467929FC38D3E6AC00A3A00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/72be9948-9cba-369c-abf7-d341e95269bd.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 8987 IP address blocks: 130.137.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:92:9f:c3:8d:3e:6a:c0:0a:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=91e6ba7c-83e5-4933-bc24-1cce022381e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bc:9a:28:41:df:23:e0:e6:18:f1:a2:e2:48: fb:bc:2f:dc:43:fa:8b:4d:76:35:29:fc:5d:9a:fa: e8:ad:04:7a:77:ea:47:71:f0:82:8c:05:32:39:f0: 24:2f:82:72:e6:45:66:85:1a:eb:1b:81:27:7d:16: eb:b5:d8:43:11:8c:34:5c:a3:8a:2f:0d:23:29:28: 0c:18:35:20:ab:cc:5d:11:92:be:3c:96:b6:a8:64: c3:0e:bd:c2:cc:3f:99:ee:a0:1a:94:0b:ca:f4:a7: 37:05:9f:c3:bc:5f:94:02:49:71:04:df:31:ca:d9: 51:70:07:ff:15:3a:73:1c:90:a8:b9:51:ea:2b:fe: d5:0f:d1:3a:ea:2e:c2:ef:57:59:b9:59:1d:ad:f8: 12:e9:1c:f3:46:63:74:08:70:f5:bc:d6:d4:cd:19: eb:e3:4e:11:86:0c:6e:25:c7:81:93:9c:9a:2b:d9: 44:a6:62:93:d6:fa:78:b4:4f:ec:ba:04:3b:67:0a: 09:f6:74:b6:13:77:53:af:46:68:3f:23:72:53:62: eb:60:da:df:12:de:01:18:a1:c6:7e:9f:bc:de:ca: 6c:28:1d:97:ee:36:ce:5e:3d:d9:cf:7d:95:c9:8a: e9:fe:ee:35:47:d7:d4:28:e0:23:38:37:eb:b8:7e: c8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:02:A7:20:49:B4:FA:63:11:9D:FD:27:A1:BA:76:B6:61:8E:E6:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/72be9948-9cba-369c-abf7-d341e95269bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c6:82:1a:50:49:6c:76:8d:5d:e8:18:ad:f6:8b:66:99:68: 44:06:d5:49:a4:5d:87:1e:52:6b:27:7f:ce:c2:10:15:54:8d: 9c:3c:5d:07:43:04:a8:dc:f4:9a:91:ae:34:bb:4b:16:ce:6a: 51:e5:22:a2:2c:27:b6:38:76:29:11:77:48:bd:bc:38:e8:56: 2f:03:11:35:ff:37:98:bd:ad:ea:b7:c6:30:98:4a:da:6a:88: ce:20:f0:80:d2:dd:aa:9e:37:3b:0e:57:43:a8:55:8b:45:ee: 53:14:3a:da:0d:0e:39:03:fe:47:78:77:fa:ee:ca:54:50:ae: f9:08:16:3c:5a:eb:52:8b:26:a7:6f:5c:1d:0d:f0:27:fb:cc: 01:40:13:2d:81:44:a2:96:d2:10:7e:ea:af:2a:0a:1d:c3:e9: 12:5f:fd:be:97:a6:a4:e9:1e:9c:52:50:c4:27:47:a4:93:b1: 7f:14:05:c0:ca:30:e8:7a:1a:21:7d:3c:af:24:a7:b2:7c:2c: ed:ea:f7:27:5e:e7:f1:85:7a:44:49:8e:23:6e:76:51:36:e1: 3a:53:4b:71:40:26:3e:f4:65:40:50:12:6c:cc:46:72:a7:6e: 71:e9:5d:e2:d4:fd:d2:6c:8e:3b:8c:be:16:b6:88:4d:86:ee: f0:b2:3f:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5Kfw40+asAKOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk OTFlNmJhN2MtODNlNS00OTMzLWJjMjQtMWNjZTAyMjM4MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbyaKEHfI+DmGPGi4kj7vC/cQ/qLTXY1Kfxd mvrorQR6d+pHcfCCjAUyOfAkL4Jy5kVmhRrrG4EnfRbrtdhDEYw0XKOKLw0jKSgM GDUgq8xdEZK+PJa2qGTDDr3CzD+Z7qAalAvK9Kc3BZ/DvF+UAklxBN8xytlRcAf/ FTpzHJCouVHqK/7VD9E66i7C71dZuVkdrfgS6RzzRmN0CHD1vNbUzRnr404Rhgxu JceBk5yaK9lEpmKT1vp4tE/sugQ7ZwoJ9nS2E3dTr0ZoPyNyU2LrYNrfEt4BGKHG fp+83spsKB2X7jbOXj3Zz32VyYrp/u41R9fUKOAjODfruH7I/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwCpyBJtPpjEZ39J6G6drZhjuZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNzJiZTk5NDgtOWNiYS0z NjljLWFiZjctZDM0MWU5NTI2OWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgondMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjGghpQSWx2jV3oGK32i2aZaEQG1UmkXYceUmsnf87CEBVUjZw8XQdD BKjc9JqRrjS7SxbOalHlIqIsJ7Y4dikRd0i9vDjoVi8DETX/N5i9req3xjCYStpq iM4g8IDS3aqeNzsOV0OoVYtF7lMUOtoNDjkD/kd4d/ruylRQrvkIFjxa61KLJqdv XB0N8Cf7zAFAEy2BRKKW0hB+6q8qCh3D6RJf/b6XpqTpHpxSUMQnR6STsX8UBcDK MOh6GiF9PK8kp7J8LO3q9yde5/GFekRJjiNudlE24TpTS3FAJj70ZUBQEmzMRnKn bnHpXeLU/dJsjjuMvha2iE2G7vCyP7g= -----END CERTIFICATE-----Generated at Sat Sep 26 13:41:52 2026 by rpki-client