$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa File: 8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa (raw, json) Hash identifier: HOw0+iArH90h8RoVVIC5FHFZlZ/Xm7Po0CF0zKq1w3Y= Subject key identifier: 40:EB:84:5E:95:CB:5B:47:E9:31:EB:F0:A1:A4:C9:21:18:43:16:CE Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584EFF77724A9562ADDCE4F55C80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 130.137.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:72:4a:95:62:ad:dc:e4:f5:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=988ed0a0-c966-4f37-b562-0181c8bb401c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0b:e4:84:20:f1:a5:e1:0c:14:f4:27:96:83: eb:47:1b:0e:8b:cc:0a:bc:6f:e3:2f:13:58:9c:19: 79:8f:de:b0:2e:c5:f4:7a:9c:2a:88:ce:9d:03:b8: 52:8b:64:db:5d:cf:1c:2d:b2:14:29:f5:df:60:42: 59:d5:13:0c:41:ff:09:59:64:99:49:96:52:29:ce: 99:ff:20:59:ea:ed:53:de:43:ea:3e:48:53:08:dc: 21:13:3c:01:0f:63:29:06:f4:32:3e:7b:f0:80:0f: 7d:a9:10:79:d8:aa:13:34:c4:33:7a:2f:2d:a2:51: 0d:c1:82:79:a1:43:7d:3e:a5:5b:31:85:0e:ca:6a: 85:bc:09:c0:ec:db:ed:a1:fb:7f:92:07:a8:15:8c: 41:aa:6c:2a:cd:4b:76:37:7a:1f:68:1c:85:6c:30: d6:43:98:a3:c2:59:6c:c7:ce:fb:fc:af:2b:78:44: 98:a4:9a:e5:d9:24:62:e2:87:ac:ed:f5:76:6e:a1: 88:cb:0e:f8:12:86:49:ac:67:dd:35:4c:9e:75:fc: ce:e2:df:0e:79:64:3f:1a:52:8f:92:78:86:a0:e7: 5e:43:df:b7:c8:bc:0d:b8:31:ab:94:03:27:28:9e: 07:a2:f8:84:56:80:97:1a:bc:7d:6d:ca:a2:80:84: 05:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EB:84:5E:95:CB:5B:47:E9:31:EB:F0:A1:A4:C9:21:18:43:16:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:64:ee:b6:43:36:43:82:d1:da:6b:25:9f:e1:6c:02:4a:7f: 04:0f:5e:e3:d3:8c:60:a3:ac:16:bb:38:86:17:aa:34:c0:2c: bf:01:18:c3:8d:55:3c:b7:13:67:8f:a8:f6:4d:13:f8:11:4f: 43:3d:78:62:02:f6:7f:93:dc:2d:d1:9e:44:cd:89:2b:61:4d: df:1b:51:e4:46:12:1f:75:4d:be:f5:78:b3:34:64:64:00:cd: 35:7b:3d:38:a6:ba:99:7c:d3:a1:4c:45:06:46:e1:3a:5d:3b: c1:69:cb:50:2e:f1:07:b4:33:a4:0c:8e:dd:8d:39:f9:91:42: ac:55:40:86:fb:84:72:d0:89:94:de:48:2a:ab:c2:8c:b1:17: 40:69:15:c2:ca:e3:3f:99:2e:17:37:46:8f:b8:1f:f7:ff:51: 42:0c:21:0a:8f:fc:32:fa:75:c1:9b:16:a7:f6:23:9c:b1:bd: 0e:5a:cc:43:6f:d4:f5:28:6e:b6:bd:10:b2:97:42:32:0a:65: 86:bf:2b:34:03:89:29:86:43:17:3a:90:48:57:7f:ec:bd:2b: f2:82:19:49:18:e3:a4:d5:15:e0:a7:d7:4f:ab:c1:31:e7:66: c1:82:14:5f:f2:43:25:90:25:3f:f8:b6:5e:d4:2d:5f:74:99: a8:c9:ae:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3JKlWKt3OT1XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk OTg4ZWQwYTAtYzk2Ni00ZjM3LWI1NjItMDE4MWM4YmI0MDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwvkhCDxpeEMFPQnloPrRxsOi8wKvG/jLxNY nBl5j96wLsX0epwqiM6dA7hSi2TbXc8cLbIUKfXfYEJZ1RMMQf8JWWSZSZZSKc6Z /yBZ6u1T3kPqPkhTCNwhEzwBD2MpBvQyPnvwgA99qRB52KoTNMQzei8tolENwYJ5 oUN9PqVbMYUOymqFvAnA7Nvtoft/kgeoFYxBqmwqzUt2N3ofaByFbDDWQ5ijwlls x877/K8reESYpJrl2SRi4oes7fV2bqGIyw74EoZJrGfdNUyedfzO4t8OeWQ/GlKP kniGoOdeQ9+3yLwNuDGrlAMnKJ4HoviEVoCXGrx9bcqigIQFKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDrhF6Vy1tH6THr8KGkySEYQxbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGMyZmMxZTctNDM5MC0z ZDE4LWJhZGMtYTZmYTFjMWY2ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBk7rZDNkOC0dprJZ/hbAJKfwQPXuPTjGCjrBa7OIYXqjTALL8BGMON VTy3E2ePqPZNE/gRT0M9eGIC9n+T3C3RnkTNiSthTd8bUeRGEh91Tb71eLM0ZGQA zTV7PTimupl806FMRQZG4TpdO8Fpy1Au8Qe0M6QMjt2NOfmRQqxVQIb7hHLQiZTe SCqrwoyxF0BpFcLK4z+ZLhc3Ro+4H/f/UUIMIQqP/DL6dcGbFqf2I5yxvQ5azENv 1PUobra9ELKXQjIKZYa/KzQDiSmGQxc6kEhXf+y9K/KCGUkY46TVFeCn10+rwTHn ZsGCFF/yQyWQJT/4tl7ULV90majJrsU= -----END CERTIFICATE-----Generated at Mon Sep 21 19:27:43 2026 by rpki-client