$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/904e0d66-ff77-33ca-a82d-b9c9133c4673.roa File: 904e0d66-ff77-33ca-a82d-b9c9133c4673.roa (raw, json) Hash identifier: v8HlmaG3iON7tYFWj4QVM5eZQHUfIOUgSPUeun8p6+s= Subject key identifier: 80:CB:CD:45:9B:9D:26:89:59:45:C0:7B:7C:4A:59:79:D6:7E:3C:CC Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D6AAA73CDB4EA910DF4484380 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/904e0d66-ff77-33ca-a82d-b9c9133c4673.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 14618 IP address blocks: 130.137.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:73:cd:b4:ea:91:0d:f4:48:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=d43449fe-dff0-4577-9d62-79cf9b34e095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:c1:74:df:de:9d:99:39:18:9c:00:96:64: 66:68:da:06:45:67:76:48:38:aa:16:5d:ef:22:d9: ac:58:5a:7b:8e:3f:86:f3:0b:75:41:34:be:90:dd: c0:c7:3b:33:eb:95:b3:75:13:5d:a8:b1:df:05:e6: ac:26:29:c8:cf:c6:f2:2a:cc:71:70:b8:b1:8c:33: 77:b9:2b:df:ce:85:1a:fb:b0:20:6e:12:7d:ac:35: e7:fe:03:92:ac:8e:72:b5:16:c0:af:f2:0e:b2:94: 86:73:89:6e:43:aa:5e:67:16:3e:e2:9e:86:59:b6: 67:bc:17:f2:19:7b:8f:38:4d:46:b2:7d:be:db:c7: 8e:24:d1:33:4d:84:19:29:b1:8d:e1:32:52:b7:6b: 7d:c3:6a:f7:7c:09:54:e7:63:68:70:f5:40:39:b2: 37:68:92:dd:46:f1:a9:6c:3f:86:62:27:f7:60:87: d9:54:5a:8f:a2:6c:ce:8e:68:1e:5c:fe:e1:e2:db: b4:65:7f:02:d6:b8:ad:78:e7:08:ad:21:ab:2b:f5: e5:a8:44:b3:f0:c6:0f:91:2b:5d:07:58:40:fc:db: ac:0d:37:67:97:47:7a:dd:a0:75:5e:f2:2f:4c:25: 62:49:05:28:8c:66:f7:2d:d9:30:a4:c5:39:e0:ab: 8c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CB:CD:45:9B:9D:26:89:59:45:C0:7B:7C:4A:59:79:D6:7E:3C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/904e0d66-ff77-33ca-a82d-b9c9133c4673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e2:27:aa:15:24:30:9f:4a:22:22:cd:46:62:e4:fd:38:c6: 31:30:26:2a:19:af:b1:18:71:ec:99:14:94:ff:7d:a1:dc:78: ab:e2:2b:b0:1f:b6:b6:2b:32:5a:8f:34:aa:4b:3f:41:11:c0: c1:16:62:7b:3c:f8:17:84:71:bb:33:5e:bb:c1:ed:0a:54:c4: 1a:91:67:7d:c9:4d:ca:99:5e:4d:c1:b2:e2:ca:6d:7c:7f:9b: 51:ca:89:ae:4b:15:82:63:ce:0e:ea:cc:8c:76:96:ef:98:91: 0b:85:92:4d:32:af:3c:51:90:2c:cd:5f:b4:50:7d:f9:c1:1d: 01:a8:fc:69:7d:71:ef:ff:9e:02:30:94:bf:c7:6e:9b:93:36: f7:4b:ea:8c:06:e3:d6:98:7d:3a:2b:07:24:98:16:96:d9:e9: 58:04:16:3c:ac:f6:ee:52:61:df:26:e9:9c:e7:58:96:c7:6c: 90:80:60:c9:2a:08:01:2f:1a:09:1b:29:2e:a7:39:ff:90:5a: 0a:da:e1:f3:48:f2:dd:df:29:c1:df:8a:f1:b6:52:fd:b9:ee: b2:d4:00:bc:10:2b:b3:4d:58:1c:c6:e1:7b:f7:19:e5:0c:bf: 0d:34:2a:27:7f:ad:58:3f:7f:2f:df:c3:8a:75:84:00:d9:df: bd:75:11:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqnPNtOqRDfRIQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZDQzNDQ5ZmUtZGZmMC00NTc3LTlkNjItNzljZjliMzRlMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypzBdN/enZk5GJwAlmRmaNoGRWd2SDiqFl3v ItmsWFp7jj+G8wt1QTS+kN3Axzsz65WzdRNdqLHfBeasJinIz8byKsxxcLixjDN3 uSvfzoUa+7AgbhJ9rDXn/gOSrI5ytRbAr/IOspSGc4luQ6peZxY+4p6GWbZnvBfy GXuPOE1Gsn2+28eOJNEzTYQZKbGN4TJSt2t9w2r3fAlU52NocPVAObI3aJLdRvGp bD+GYif3YIfZVFqPomzOjmgeXP7h4tu0ZX8C1riteOcIrSGrK/XlqESz8MYPkStd B1hA/NusDTdnl0d63aB1XvIvTCViSQUojGb3LdkwpMU54KuMTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDLzUWbnSaJWUXAe3xKWXnWfjzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTA0ZTBkNjYtZmY3Ny0z M2NhLWE4MmQtYjljOTEzM2M0NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXiJ6oVJDCfSiIizUZi5P04xjEwJioZr7EYceyZFJT/faHceKviK7Af trYrMlqPNKpLP0ERwMEWYns8+BeEcbszXrvB7QpUxBqRZ33JTcqZXk3BsuLKbXx/ m1HKia5LFYJjzg7qzIx2lu+YkQuFkk0yrzxRkCzNX7RQffnBHQGo/Gl9ce//ngIw lL/HbpuTNvdL6owG49aYfTorBySYFpbZ6VgEFjys9u5SYd8m6ZznWJbHbJCAYMkq CAEvGgkbKS6nOf+QWgra4fNI8t3fKcHfivG2Uv257rLUALwQK7NNWBzG4Xv3GeUM vw00Kid/rVg/fy/fw4p1hADZ3711EQI= -----END CERTIFICATE-----Generated at Fri Apr 17 13:39:47 2026 by rpki-client