$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa File: 9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa (raw, json) Hash identifier: OQfG/ErmeojtNw4knQ8+Mr3gpcoH2JBHOb/UIR44Gr4= Subject key identifier: 97:2E:27:AF:05:EB:DB:55:69:CA:4E:08:CE:86:86:24:45:DF:79:07 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F02421EDD57F5BF878AFC8990 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 8987 IP address blocks: 130.137.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:1e:dd:57:f5:bf:87:8a:fc:89:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=7405197e-1624-41a5-b84b-fed9102a5665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:10:52:c5:02:1a:e8:a9:a3:98:a1:1f:1a:8f: 83:ca:61:ee:6e:db:cc:0b:ed:f3:3f:2f:57:1c:2e: db:55:86:1a:7f:53:cb:f4:9e:d4:28:4f:6f:c7:82: 8b:14:bc:1c:36:7a:3e:f9:0e:69:a0:91:ca:54:82: 3d:18:79:74:f8:a0:f6:f6:3a:53:2b:ad:ff:60:34: bf:ed:8e:16:c3:22:b8:3a:c5:b8:e7:a2:7f:ea:e8: b0:6b:82:ff:37:68:c6:9c:ae:19:42:d3:a5:6a:c1: 75:4f:af:d1:01:62:7d:95:db:a7:70:d5:5e:8a:09: f3:57:70:ed:e3:53:60:2d:c7:8c:d8:8e:d9:66:07: 39:a2:13:57:2b:6f:40:47:d6:4a:9d:88:d5:05:73: e9:5e:c4:56:6b:c5:ee:32:30:72:60:94:56:31:e8: 9c:f4:38:3b:69:a8:e4:71:a5:c6:7f:04:b4:32:c1: 2d:39:b7:40:67:90:09:82:09:9a:f6:37:8d:64:cc: cd:01:27:9e:3b:cd:7b:9f:5e:9e:a7:a4:72:5e:01: d5:0d:b6:fe:65:c7:b6:37:23:25:54:85:77:46:7c: 61:f2:1b:09:80:52:03:41:30:9f:2a:ed:48:eb:9a: c4:af:09:52:6a:fb:14:9f:7e:c8:74:04:0b:c9:47: 1e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2E:27:AF:05:EB:DB:55:69:CA:4E:08:CE:86:86:24:45:DF:79:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9f:30:2f:67:2c:9b:b8:a4:fc:93:f2:92:01:18:9b:30:7c: a0:4e:16:ed:e0:a8:19:c3:c3:01:55:f0:af:be:de:17:f6:a9: 6e:09:73:59:b3:f7:a6:bf:17:80:78:7e:b9:a8:65:54:a9:7c: 8e:52:62:e9:5d:06:ed:e0:21:a7:a6:4b:1d:2f:c1:ee:23:ce: 00:83:9b:03:52:6c:57:0e:84:26:17:c8:e9:2c:f6:dd:f2:d4: c3:70:1a:1c:df:b9:b4:a0:2e:2e:74:27:f1:32:ee:4d:a5:a0: 7d:99:c0:26:c4:2d:54:e3:c7:d5:06:b5:b1:01:41:f5:dd:2c: 02:f8:45:8a:62:ee:31:ff:ba:e2:8b:e4:f1:eb:b8:ad:80:54: 54:77:59:b2:72:7d:52:5c:a8:64:09:af:de:8f:ae:8a:52:d3: d2:d3:09:57:24:2d:65:ce:a0:fc:74:4d:dc:04:b7:4d:01:b1: 37:ab:5d:80:3e:5c:ac:d8:c1:e9:a5:0f:97:46:f3:ea:83:fd: 06:ae:bf:3d:55:cb:27:32:28:0b:5c:a3:d6:e0:7b:aa:a5:87: 7d:0e:41:36:44:91:72:b1:fe:fe:d2:22:07:30:40:f4:5d:e8: b9:14:5c:85:9f:3f:9d:52:84:4b:b7:45:ff:a6:53:41:79:63: cd:31:19:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQh7dV/W/h4r8iZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NzQwNTE5N2UtMTYyNC00MWE1LWI4NGItZmVkOTEwMmE1NjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBBSxQIa6KmjmKEfGo+DymHubtvMC+3zPy9X HC7bVYYaf1PL9J7UKE9vx4KLFLwcNno++Q5poJHKVII9GHl0+KD29jpTK63/YDS/ 7Y4WwyK4OsW456J/6uiwa4L/N2jGnK4ZQtOlasF1T6/RAWJ9lduncNVeignzV3Dt 41NgLceM2I7ZZgc5ohNXK29AR9ZKnYjVBXPpXsRWa8XuMjByYJRWMeic9Dg7aajk caXGfwS0MsEtObdAZ5AJggma9jeNZMzNASeeO817n16ep6RyXgHVDbb+Zce2NyMl VIV3Rnxh8hsJgFIDQTCfKu1I65rErwlSavsUn37IdAQLyUceXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcuJ68F69tVacpOCM6GhiRF33kHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOWQ2ZGIxYWYtODgyMi0z OTQzLWEwYzItMWQ4ZjQwZjhmMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGfMC9nLJu4pPyT8pIBGJswfKBOFu3gqBnDwwFV8K++3hf2qW4Jc1mz 96a/F4B4frmoZVSpfI5SYuldBu3gIaemSx0vwe4jzgCDmwNSbFcOhCYXyOks9t3y 1MNwGhzfubSgLi50J/Ey7k2loH2ZwCbELVTjx9UGtbEBQfXdLAL4RYpi7jH/uuKL 5PHruK2AVFR3WbJyfVJcqGQJr96PropS09LTCVckLWXOoPx0TdwEt00BsTerXYA+ XKzYwemlD5dG8+qD/Qauvz1VyycyKAtco9bge6qlh30OQTZEkXKx/v7SIgcwQPRd 6LkUXIWfP51ShEu3Rf+mU0F5Y80xGZA= -----END CERTIFICATE-----Generated at Tue Sep 22 13:56:47 2026 by rpki-client