$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ac191acc-157f-3778-b6ca-042f58ea699a.roa File: ac191acc-157f-3778-b6ca-042f58ea699a.roa (raw, json) Hash identifier: Epis+NzV4P98IsAjLsq7U7Qd2sRjgqAFMgJHgi5hvBA= Subject key identifier: DF:DC:C7:BB:36:7E:7E:65:96:D8:D1:73:81:42:73:37:90:5D:4F:B3 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D7F9A7FA9D61490F6F6769880 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ac191acc-157f-3778-b6ca-042f58ea699a.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 8987 IP address blocks: 130.137.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:7f:a9:d6:14:90:f6:f6:76:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=1b963d43-fb4f-4dc3-ba7a-8d98d74ed150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b0:ea:1d:3f:02:43:ae:21:9b:7f:8a:6b:27: 36:64:fe:7f:d6:d9:81:d4:a6:5f:ee:5b:ec:3c:de: 60:9b:a5:89:a4:dc:4c:10:1f:e0:a0:74:35:ff:8e: 8c:48:7a:d8:59:39:16:0f:77:3e:b6:25:a2:74:bb: a4:40:a5:c0:b8:d4:51:04:34:16:d5:58:f6:c2:17: 45:36:6f:2f:c4:1f:6c:6a:68:62:9b:1f:57:ae:e9: 1a:d5:13:76:e4:51:91:63:af:c0:51:4a:8f:57:43: b5:23:ab:39:74:c5:ea:72:47:de:51:3d:1a:63:2b: 12:64:e1:41:ad:d3:6c:95:07:5d:b3:3c:0d:c5:0d: 1d:08:50:27:30:f8:a1:80:4b:e0:df:04:f0:25:64: e6:1d:60:ef:7c:19:dd:a0:27:ec:cf:5a:17:04:08: 17:31:e9:c5:a9:5f:2f:27:05:db:e1:dd:0e:3c:74: c6:1f:01:fa:47:3e:a0:b7:1d:1c:ee:c9:e1:3b:d6: 97:c3:e3:f5:98:d8:d2:c7:71:c3:1b:f4:a4:c0:1e: 6b:33:6d:39:ed:08:14:9a:08:f1:a5:dd:2e:39:50: 30:8a:5c:31:ed:c3:79:f1:01:67:16:f2:2e:9c:a0: 36:ce:d3:18:fc:f3:f4:89:47:21:0d:a1:7f:33:dc: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DC:C7:BB:36:7E:7E:65:96:D8:D1:73:81:42:73:37:90:5D:4F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ac191acc-157f-3778-b6ca-042f58ea699a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:7b:ab:1b:97:f1:6d:fb:05:12:2a:2d:e7:51:e0:ba:65:3e: 2a:73:db:ea:05:74:77:78:bd:cb:bb:a6:10:9b:9a:7b:69:14: a8:9a:91:f6:fb:64:4d:a4:25:ef:68:f0:3b:23:f6:87:65:a8: 78:96:0a:14:c4:62:f8:b2:74:03:99:d5:2b:dd:f2:d5:ee:3e: 04:f0:39:01:c8:23:e1:e1:be:29:ac:27:5a:f6:19:dc:64:fc: 05:fd:9c:8d:38:57:7c:93:d5:04:18:76:2f:bd:7a:3e:ad:de: 21:6f:78:89:e3:c5:43:fc:93:b8:5b:5a:22:07:89:85:86:6d: 58:f9:48:02:b9:c9:64:bc:f4:6a:18:73:1e:6b:01:d1:03:38: cb:6d:e0:58:44:43:d3:44:c9:0a:a0:fa:00:0a:c5:b4:c8:95: c7:0e:a5:6e:ca:46:08:cd:7d:57:3c:aa:52:e5:f8:25:37:d5: fd:bc:d7:48:5a:b7:68:4f:3c:e2:7e:d4:d5:46:6c:fe:03:82: 1a:d2:e1:b3:1f:65:fe:d3:39:39:71:80:23:5b:cf:2f:61:04: 55:af:ee:d5:6d:eb:83:76:84:95:83:ea:8a:e0:61:87:da:5d: ef:f2:e2:91:50:40:ca:21:3f:df:42:6b:65:18:2a:ae:ee:ef: a2:f7:31:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mn+p1hSQ9vZ2mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MWI5NjNkNDMtZmI0Zi00ZGMzLWJhN2EtOGQ5OGQ3NGVkMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirDqHT8CQ64hm3+Kayc2ZP5/1tmB1KZf7lvs PN5gm6WJpNxMEB/goHQ1/46MSHrYWTkWD3c+tiWidLukQKXAuNRRBDQW1Vj2whdF Nm8vxB9samhimx9Xruka1RN25FGRY6/AUUqPV0O1I6s5dMXqckfeUT0aYysSZOFB rdNslQddszwNxQ0dCFAnMPihgEvg3wTwJWTmHWDvfBndoCfsz1oXBAgXMenFqV8v JwXb4d0OPHTGHwH6Rz6gtx0c7snhO9aXw+P1mNjSx3HDG/SkwB5rM2057QgUmgjx pd0uOVAwilwx7cN58QFnFvIunKA2ztMY/PP0iUchDaF/M9weywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/cx7s2fn5lltjRc4FCczeQXU+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYWMxOTFhY2MtMTU3Zi0z Nzc4LWI2Y2EtMDQyZjU4ZWE2OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgontMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV7qxuX8W37BRIqLedR4LplPipz2+oFdHd4vcu7phCbmntpFKiakfb7 ZE2kJe9o8Dsj9odlqHiWChTEYviydAOZ1Svd8tXuPgTwOQHII+HhvimsJ1r2Gdxk /AX9nI04V3yT1QQYdi+9ej6t3iFveInjxUP8k7hbWiIHiYWGbVj5SAK5yWS89GoY cx5rAdEDOMtt4FhEQ9NEyQqg+gAKxbTIlccOpW7KRgjNfVc8qlLl+CU31f2810ha t2hPPOJ+1NVGbP4DghrS4bMfZf7TOTlxgCNbzy9hBFWv7tVt64N2hJWD6orgYYfa Xe/y4pFQQMohP99Ca2UYKq7u76L3MW8= -----END CERTIFICATE-----Generated at Fri Apr 17 14:15:42 2026 by rpki-client