$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8afe9ef4-a028-3ce3-9909-e7456dbc8602.roa File: 8afe9ef4-a028-3ce3-9909-e7456dbc8602.roa (raw, json) Hash identifier: /mwgPffGM3NXHMSs+u2A9CX6JKWhStnA6y+pQQZweAI= Subject key identifier: 5C:01:A9:02:7D:75:66:DA:DD:6E:A7:32:27:4B:B7:9B:64:E4:C8:78 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F374D1F32BFC92AF2BFDD3EB0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8afe9ef4-a028-3ce3-9909-e7456dbc8602.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 8987 IP address blocks: 130.137.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:1f:32:bf:c9:2a:f2:bf:dd:3e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=62b4263c-ee5f-4b96-acf7-994ddf27ec42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:be:e3:6c:e0:e0:d5:90:c3:42:2b:42:46:bd: 27:22:8f:a8:d0:cb:be:10:56:96:3b:1b:a4:23:11: 06:41:30:1a:53:3e:c8:f1:5d:f2:1a:25:c9:bb:e6: 7e:51:18:be:79:9f:0c:5c:7d:43:bc:7c:93:fa:14: c8:a5:a3:18:f0:d1:e4:04:36:8f:4d:36:d3:f7:6d: 0a:27:aa:38:ff:f9:81:bd:84:b3:1f:78:00:a9:f1: 41:f1:70:29:88:ce:e0:e1:bd:98:06:39:af:51:e9: 96:d6:1d:dc:c3:c8:48:40:58:f8:3c:9e:81:c6:21: c4:9b:3f:ce:09:00:c4:e7:f9:1d:ba:96:13:41:0c: 79:68:7a:37:18:ee:6f:c1:43:68:2b:45:1d:ba:59: 81:96:64:c5:82:71:d6:5e:fc:76:a9:7c:0d:46:66: c9:36:97:37:4f:20:c6:e6:f2:b0:77:cc:17:e7:5e: c8:15:a2:a9:45:8f:17:94:cf:9b:e3:69:7f:be:4f: d2:b9:6e:77:1d:0f:93:0f:a8:9d:9a:72:45:94:a9: f7:2e:00:6d:91:55:10:13:36:d5:60:fc:67:4e:07: 0b:e7:86:e5:6e:e8:fc:6f:91:ab:0f:c6:82:70:a0: 4a:1f:ec:63:8b:b6:70:28:a0:11:d1:06:2a:70:45: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:01:A9:02:7D:75:66:DA:DD:6E:A7:32:27:4B:B7:9B:64:E4:C8:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8afe9ef4-a028-3ce3-9909-e7456dbc8602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:42:22:20:74:5d:4f:05:ad:e6:21:07:fa:29:db:50:42:15: b9:60:ce:e5:4e:41:4a:73:1c:90:73:3a:01:6f:6f:bd:1a:6f: 6b:76:b6:7c:3d:f8:4a:95:ed:96:9f:6d:99:2a:4e:60:61:f1: cd:ac:57:d2:ab:98:d1:c2:7e:f4:21:db:9f:42:59:60:94:f2: 5a:04:db:ef:30:13:56:dd:15:8a:f1:0d:95:e5:03:fd:71:f4: ee:e8:ab:4e:fc:4e:bc:8f:f7:a1:f6:a5:be:91:cc:0d:2d:aa: cf:1a:99:52:fa:ae:b5:c8:87:f4:3b:7d:55:7e:fa:fd:5d:c6: cc:61:c7:b4:29:cb:a4:fd:a7:2d:00:f5:d8:19:25:4c:f3:7b: 34:1f:2a:c2:6b:86:7a:b5:e6:af:bd:6f:b8:52:0c:82:ed:a2: c2:d9:85:f9:c9:dc:4d:2e:17:ef:22:16:0b:ad:75:0a:8c:42: cd:7f:3c:49:2e:6f:bc:10:bd:3c:f5:b8:5d:f2:e5:a2:a9:d9: 59:1f:db:b2:4a:e3:c7:3e:5a:8f:fe:24:ad:0d:8b:43:7f:a5: d0:d7:a3:7c:ee:96:ec:07:e7:c3:aa:06:a8:a1:60:eb:9d:4a: 6a:7c:98:e9:67:ea:c7:53:f2:4f:cb:05:a2:5e:52:8e:bf:00: 05:b5:a2:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TR8yv8kq8r/dPrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk NjJiNDI2M2MtZWU1Zi00Yjk2LWFjZjctOTk0ZGRmMjdlYzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir7jbODg1ZDDQitCRr0nIo+o0Mu+EFaWOxuk IxEGQTAaUz7I8V3yGiXJu+Z+URi+eZ8MXH1DvHyT+hTIpaMY8NHkBDaPTTbT920K J6o4//mBvYSzH3gAqfFB8XApiM7g4b2YBjmvUemW1h3cw8hIQFj4PJ6BxiHEmz/O CQDE5/kdupYTQQx5aHo3GO5vwUNoK0UdulmBlmTFgnHWXvx2qXwNRmbJNpc3TyDG 5vKwd8wX517IFaKpRY8XlM+b42l/vk/SuW53HQ+TD6idmnJFlKn3LgBtkVUQEzbV YPxnTgcL54blbuj8b5GrD8aCcKBKH+xji7ZwKKAR0QYqcEUIUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwBqQJ9dWba3W6nMidLt5tk5Mh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGFmZTllZjQtYTAyOC0z Y2UzLTk5MDktZTc0NTZkYmM4NjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFCIiB0XU8FreYhB/op21BCFblgzuVOQUpzHJBzOgFvb70ab2t2tnw9 +EqV7ZafbZkqTmBh8c2sV9KrmNHCfvQh259CWWCU8loE2+8wE1bdFYrxDZXlA/1x 9O7oq078TryP96H2pb6RzA0tqs8amVL6rrXIh/Q7fVV++v1dxsxhx7Qpy6T9py0A 9dgZJUzzezQfKsJrhnq15q+9b7hSDILtosLZhfnJ3E0uF+8iFgutdQqMQs1/PEku b7wQvTz1uF3y5aKp2Vkf27JK48c+Wo/+JK0Ni0N/pdDXo3zuluwH58OqBqihYOud Smp8mOln6sdT8k/LBaJeUo6/AAW1ojk= -----END CERTIFICATE-----Generated at Sun Sep 20 17:06:57 2026 by rpki-client