$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a20c9daa-f2a6-3de9-8918-9a88d9c7ef76.roa File: a20c9daa-f2a6-3de9-8918-9a88d9c7ef76.roa (raw, json) Hash identifier: kvvrhl1a1JJttX99O38tlazbPNKe/VZ1Psq9XcxTAKU= Subject key identifier: 95:8F:1F:CF:EC:51:90:D7:AB:87:74:CC:D9:20:1C:DC:27:17:15:AE Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D7F9A7A3CEF20F3AB5A263EF4 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a20c9daa-f2a6-3de9-8918-9a88d9c7ef76.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 8987 IP address blocks: 130.137.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:7a:3c:ef:20:f3:ab:5a:26:3e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=72e7583d-a7ba-4b3e-a8d6-5744506dd720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:0f:d4:8f:9d:bb:78:5b:88:e7:d8:06:54: f7:c5:fa:4b:32:8e:75:39:d1:b3:16:06:8a:82:a3: c6:20:cb:7c:9f:a1:26:90:c3:7a:52:07:cf:0e:d0: dd:b5:5f:59:3a:59:c3:4f:a3:4f:d7:38:30:5e:db: 7d:2e:21:6e:8c:b3:9a:70:3c:aa:97:d0:af:d5:f0: ce:ac:ee:99:78:42:7e:0a:55:1b:bf:d0:c2:a7:3a: 86:fa:d4:fa:be:97:84:17:6c:03:c4:ce:65:e9:15: 1f:7a:31:28:69:45:e0:ff:cb:08:19:de:9e:43:5e: c9:7d:50:1e:1b:ce:5d:8b:9b:a8:a5:b4:e6:1e:d9: 24:38:9f:70:1f:c6:e7:26:6c:88:25:6a:7d:97:00: 19:4a:af:e4:e2:27:88:4c:b2:4f:0e:11:92:b9:a5: a3:70:9c:78:8e:af:12:10:75:6c:b0:77:a6:c9:c4: d7:9e:af:02:48:e5:17:15:30:8a:16:34:f0:fb:78: 5a:73:4f:0d:47:cf:99:1a:ae:12:e1:47:df:71:ff: ca:1e:67:9c:76:d0:5e:10:ed:8a:cf:05:58:e2:68: 8b:41:4f:12:39:5a:ee:75:5b:9b:cb:00:ba:dd:1c: 42:0b:2d:e1:3a:19:06:1b:6d:4a:7b:ca:1c:24:31: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8F:1F:CF:EC:51:90:D7:AB:87:74:CC:D9:20:1C:DC:27:17:15:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a20c9daa-f2a6-3de9-8918-9a88d9c7ef76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:0b:53:86:67:ef:a4:07:95:86:5e:7a:73:77:7b:17:f6:35: 1e:cd:3e:cb:dd:e8:68:39:c3:6e:ff:05:95:7a:33:15:59:77: 04:19:ef:e8:da:45:94:bf:65:ad:19:c3:3a:61:ee:04:50:88: 39:c3:b6:fb:f2:2e:af:c5:f5:3c:cd:b9:4b:e6:7c:05:98:7d: 63:8b:f5:37:bd:d5:5b:8f:d6:b1:75:4e:22:a8:a5:62:98:1d: 47:3e:e3:cb:55:22:bf:85:61:3c:85:35:f7:ea:a0:2b:e3:cc: 72:a4:db:71:51:fc:ed:1c:2c:e9:e9:c5:6c:8e:95:0e:1c:f3: 17:08:1d:c4:cf:f7:8f:07:7b:40:c5:53:51:14:ca:dd:44:d6: 5b:49:45:7c:ff:5a:08:af:24:ae:a2:8b:98:73:5c:a1:65:b7: 7c:a5:9f:c9:13:ea:8a:ea:84:e2:9b:03:f4:c3:76:a6:22:42: ba:67:cb:e4:ef:19:2e:07:62:0b:65:f5:7b:31:1f:50:21:1f: 5e:14:69:99:5b:90:a0:c2:4c:4e:a9:ec:5a:e3:65:21:2c:6d: 14:af:c4:f0:3d:2c:b1:3b:5f:02:c5:7c:87:d9:e8:48:bf:26: 13:94:f2:09:f5:04:ef:84:4e:8c:8d:61:dc:de:89:2e:fc:97: 28:a8:62:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mno87yDzq1omPvQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NzJlNzU4M2QtYTdiYS00YjNlLWE4ZDYtNTc0NDUwNmRkNzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWcP1I+du3hbiOfYBlT3xfpLMo51OdGzFgaK gqPGIMt8n6EmkMN6UgfPDtDdtV9ZOlnDT6NP1zgwXtt9LiFujLOacDyql9Cv1fDO rO6ZeEJ+ClUbv9DCpzqG+tT6vpeEF2wDxM5l6RUfejEoaUXg/8sIGd6eQ17JfVAe G85di5uopbTmHtkkOJ9wH8bnJmyIJWp9lwAZSq/k4ieITLJPDhGSuaWjcJx4jq8S EHVssHemycTXnq8CSOUXFTCKFjTw+3hac08NR8+ZGq4S4Uffcf/KHmecdtBeEO2K zwVY4miLQU8SOVrudVubywC63RxCCy3hOhkGG21Ke8ocJDGQFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWPH8/sUZDXq4d0zNkgHNwnFxWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTIwYzlkYWEtZjJhNi0z ZGU5LTg5MTgtOWE4OGQ5YzdlZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMLU4Zn76QHlYZeenN3exf2NR7NPsvd6Gg5w27/BZV6MxVZdwQZ7+ja RZS/Za0Zwzph7gRQiDnDtvvyLq/F9TzNuUvmfAWYfWOL9Te91VuP1rF1TiKopWKY HUc+48tVIr+FYTyFNffqoCvjzHKk23FR/O0cLOnpxWyOlQ4c8xcIHcTP948He0DF U1EUyt1E1ltJRXz/WgivJK6ii5hzXKFlt3yln8kT6orqhOKbA/TDdqYiQrpny+Tv GS4HYgtl9XsxH1AhH14UaZlbkKDCTE6p7FrjZSEsbRSvxPA9LLE7XwLFfIfZ6Ei/ JhOU8gn1BO+EToyNYdzeiS78lyioYgQ= -----END CERTIFICATE-----Generated at Fri Apr 17 19:11:12 2026 by rpki-client