$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7a12594f-9c71-3b0d-ac6f-5025b01f49c9.roa File: 7a12594f-9c71-3b0d-ac6f-5025b01f49c9.roa (raw, json) Hash identifier: gMT8zyaQc7HMNP+3MHc3IUQro4/mKH1oArg1tbEakuQ= Subject key identifier: 2C:CB:2B:AD:11:41:1F:28:E1:CE:9E:1E:B8:36:FA:20:D2:1F:F1:31 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584C9C31A2D59A16156C56CB0D80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7a12594f-9c71-3b0d-ac6f-5025b01f49c9.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 8987 IP address blocks: 130.137.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:a2:d5:9a:16:15:6c:56:cb:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=e8b702be-d339-4649-b9f1-bd2d31ce634a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8a:1f:25:a7:df:75:a6:e5:f7:f9:37:71:41: b6:fd:cd:6f:69:9e:39:6a:8a:b8:2a:73:d7:ba:c4: 47:71:66:04:6c:93:2f:63:08:8d:fb:76:dd:22:01: b4:ac:dc:9d:05:bf:c7:4d:3d:e7:9e:65:2e:09:18: df:32:28:78:84:89:85:68:39:2a:31:bf:27:bd:91: 1e:6e:f6:88:57:e9:92:27:20:bf:f5:6a:9e:44:b7: b4:04:e3:d9:15:c9:28:f0:56:3c:1d:bf:47:05:9c: f0:a9:3a:34:a9:0a:ce:48:b3:e3:87:75:c8:ae:14: 04:c1:0d:f8:a9:67:9f:46:e5:68:df:5b:73:a5:26: f1:c1:77:95:4f:f7:68:86:ce:9f:02:9a:fc:d2:e3: 7d:0e:9c:c5:15:93:55:e7:00:9a:3e:a9:8f:44:22: 35:81:24:7c:36:08:b0:e0:61:0e:13:f9:9d:6e:fe: af:75:a7:7a:67:7d:fa:47:63:3f:d1:0b:63:a2:3f: 5b:1c:83:c3:c4:b4:2e:0d:95:7e:32:bd:e2:25:90: 61:b5:fa:d8:00:25:95:5d:c3:65:f5:42:9c:e1:68: 44:de:d8:b5:a7:a4:58:f3:45:7f:b2:6b:51:89:dd: a6:c7:f5:b9:92:00:26:9c:e1:47:01:08:ac:fd:8f: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CB:2B:AD:11:41:1F:28:E1:CE:9E:1E:B8:36:FA:20:D2:1F:F1:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7a12594f-9c71-3b0d-ac6f-5025b01f49c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:36:0a:62:0d:43:56:f8:b3:00:ca:0d:e8:eb:e7:a7:5e:77: 5a:6d:22:0e:f2:ad:55:42:51:d7:e2:3b:e3:d0:2f:b1:95:1d: 0e:a5:69:63:90:20:4c:57:89:e4:f5:b0:80:9e:ce:e3:66:70: 82:d5:86:ed:4b:26:7d:c3:9a:b4:f9:61:d1:82:9f:7f:c4:42: 6e:cd:ea:90:4b:cd:ba:2c:88:57:70:76:78:5c:d4:9c:18:6d: fa:c1:d8:63:09:8e:6a:8a:4a:f0:46:51:af:ac:ca:54:6d:f5: 6b:62:2b:3a:83:c7:3e:a7:ee:65:2a:e0:5c:4d:ac:83:d3:3b: 17:ef:26:f7:6c:7a:15:a7:b1:4d:6b:81:8b:4a:ea:73:68:4d: 0d:7b:f0:d9:d6:6b:6b:08:44:dc:50:2a:af:79:ad:f9:2e:23: f5:ee:f5:53:d8:ae:31:1b:fc:8f:13:57:d0:69:c3:c6:6d:c0: bd:84:a1:4d:19:84:fc:a7:01:b9:09:a9:3f:e4:7c:2b:31:6a: f5:73:f1:3c:a6:c5:2c:8c:3e:2f:80:26:ab:ff:58:bf:53:a1: 5f:d6:62:16:2c:d7:3e:0c:70:ce:3a:3d:93:c3:0a:ca:29:ec: 02:78:50:17:8f:4f:7e:4a:25:3d:0e:30:82:16:d2:cd:bb:5e: 48:01:99:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEycMaLVmhYVbFbLDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk ZThiNzAyYmUtZDMzOS00NjQ5LWI5ZjEtYmQyZDMxY2U2MzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4ofJaffdabl9/k3cUG2/c1vaZ45aoq4KnPX usRHcWYEbJMvYwiN+3bdIgG0rNydBb/HTT3nnmUuCRjfMih4hImFaDkqMb8nvZEe bvaIV+mSJyC/9WqeRLe0BOPZFcko8FY8Hb9HBZzwqTo0qQrOSLPjh3XIrhQEwQ34 qWefRuVo31tzpSbxwXeVT/dohs6fApr80uN9DpzFFZNV5wCaPqmPRCI1gSR8Ngiw 4GEOE/mdbv6vdad6Z336R2M/0Qtjoj9bHIPDxLQuDZV+Mr3iJZBhtfrYACWVXcNl 9UKc4WhE3ti1p6RY80V/smtRid2mx/W5kgAmnOFHAQis/Y+flQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzLK60RQR8o4c6eHrg2+iDSH/ExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvN2ExMjU5NGYtOWM3MS0z YjBkLWFjNmYtNTAyNWIwMWY0OWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo2CmINQ1b4swDKDejr56ded1ptIg7yrVVCUdfiO+PQL7GVHQ6laWOQ IExXieT1sICezuNmcILVhu1LJn3DmrT5YdGCn3/EQm7N6pBLzbosiFdwdnhc1JwY bfrB2GMJjmqKSvBGUa+sylRt9WtiKzqDxz6n7mUq4FxNrIPTOxfvJvdsehWnsU1r gYtK6nNoTQ178NnWa2sIRNxQKq95rfkuI/Xu9VPYrjEb/I8TV9Bpw8ZtwL2EoU0Z hPynAbkJqT/kfCsxavVz8TymxSyMPi+AJqv/WL9ToV/WYhYs1z4McM46PZPDCsop 7AJ4UBePT35KJT0OMIIW0s27XkgBmag= -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:46 2026 by rpki-client