$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/adfaa667-9ef0-34b3-9ac6-dc27706cebc8.roa File: adfaa667-9ef0-34b3-9ac6-dc27706cebc8.roa (raw, json) Hash identifier: BllPJ5HpR4ww387VwjPT9hC5wMeweCMaT0Hpm/MGr1o= Subject key identifier: 21:DC:A2:3F:11:2F:7E:74:60:ED:3D:03:54:8A:AD:F2:B9:7A:65:0B Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584C69F155B4D340C58DE4B05EB8 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/adfaa667-9ef0-34b3-9ac6-dc27706cebc8.roa Signing time: Sun 04 Jan 2026 14:00:38 +0000 ROA not before: Sun 04 Jan 2026 14:00:38 +0000 ROA not after: Sat 04 Apr 2026 13:00:38 +0000 asID: 16509 IP address blocks: 130.137.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:69:f1:55:b4:d3:40:c5:8d:e4:b0:5e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 4 14:00:38 2026 GMT Not After : Apr 4 13:00:38 2026 GMT Subject: CN=43031d9a-e630-4151-ab18-9bc1d37d941d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4a:5c:c3:ea:90:c0:49:56:69:f6:c1:77:1c: c3:a9:d5:ea:b2:a8:e2:30:b4:7e:68:81:83:e9:bf: 29:76:fe:ca:3e:36:90:4f:f8:fc:ab:4a:86:0a:27: 37:02:dd:3b:b5:6d:3b:ef:ab:f1:9a:72:c4:26:41: 2e:2d:a1:17:c9:9a:61:b0:97:05:2f:20:41:10:61: 22:c5:de:e9:39:8b:f0:b7:62:6a:18:da:d7:a1:5f: 66:da:4e:f3:29:54:e5:48:3f:23:02:c9:0b:1d:f6: 57:79:7e:1e:b0:e7:ba:f1:60:20:95:f2:a0:ce:d2: 8a:82:6d:1e:6d:bc:11:a6:8c:83:25:78:d6:d2:19: 9c:f1:d8:dc:d1:e9:73:dc:63:a7:ba:79:09:12:62: 05:aa:15:ba:9e:82:4d:39:85:52:27:a2:be:3f:79: b1:7c:91:81:8e:a4:55:11:ee:94:a5:47:1a:4d:9a: fd:ab:1f:08:e5:53:96:c7:87:8f:d4:88:0c:78:3d: f0:0f:a6:f8:99:e3:3c:83:d8:ca:5b:db:69:f6:87: 1e:dc:0c:fd:7b:ea:f5:79:09:97:51:2e:39:af:4a: 10:f2:48:53:80:4d:7e:dd:ba:82:62:78:b9:c5:b8: 2f:61:24:03:c0:bd:7a:88:50:7a:78:8d:b4:be:50: 32:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DC:A2:3F:11:2F:7E:74:60:ED:3D:03:54:8A:AD:F2:B9:7A:65:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/adfaa667-9ef0-34b3-9ac6-dc27706cebc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e1:76:d2:70:5f:f2:48:95:55:7b:d3:f2:62:8f:b8:b0:1b: d5:40:ec:0d:c8:2a:a2:6a:2e:8c:ac:a0:01:ea:71:55:60:2a: 79:d7:76:69:aa:2e:34:41:bb:4c:a8:48:3c:62:0c:84:59:90: c9:ec:b6:1f:6f:86:84:e1:29:ff:7f:4c:0f:5d:36:c8:de:c9: 7a:ad:2a:c4:3a:0e:c7:77:c0:f4:0e:23:d1:c4:30:75:99:f5: 02:ea:9f:bd:6e:4d:f4:61:b1:b7:df:d6:28:1f:78:16:88:2e: 17:32:74:1d:76:44:04:ca:47:34:aa:b3:52:1a:a6:8a:2e:24: 28:62:1a:57:38:28:59:9f:c3:4b:ee:29:6b:0d:13:e1:9b:89: 4f:c1:bb:42:f8:d3:b6:3e:9c:4b:d9:9c:4f:25:e7:f1:10:ec: 8b:af:6b:f3:8d:c0:f7:09:87:46:b7:16:c6:de:c3:3c:f6:5b: 2b:3c:f0:79:24:97:38:65:0f:01:d5:ca:59:e4:87:ce:f5:ac: 74:1e:5c:43:6a:93:96:7a:ab:49:65:39:1d:af:80:26:a9:ef: 7b:c0:db:31:23:51:33:b8:ff:41:bc:ab:6d:c8:19:a5:b1:a2: 14:bf:ee:15:85:c3:d9:ec:82:cf:3c:b6:4d:0b:39:6a:d7:a0: 4a:0d:74:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExp8VW000DFjeSwXrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDEwNDE0MDAzOFoXDTI2MDQwNDEzMDAzOFowLzEtMCsGA1UEAxMk NDMwMzFkOWEtZTYzMC00MTUxLWFiMTgtOWJjMWQzN2Q5NDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20pcw+qQwElWafbBdxzDqdXqsqjiMLR+aIGD 6b8pdv7KPjaQT/j8q0qGCic3At07tW0776vxmnLEJkEuLaEXyZphsJcFLyBBEGEi xd7pOYvwt2JqGNrXoV9m2k7zKVTlSD8jAskLHfZXeX4esOe68WAglfKgztKKgm0e bbwRpoyDJXjW0hmc8djc0elz3GOnunkJEmIFqhW6noJNOYVSJ6K+P3mxfJGBjqRV Ee6UpUcaTZr9qx8I5VOWx4eP1IgMeD3wD6b4meM8g9jKW9tp9oce3Az9e+r1eQmX US45r0oQ8khTgE1+3bqCYni5xbgvYSQDwL16iFB6eI20vlAyCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHcoj8RL350YO09A1SKrfK5emULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYWRmYWE2NjctOWVmMC0z NGIzLTlhYzYtZGMyNzcwNmNlYmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACThdtJwX/JIlVV70/Jij7iwG9VA7A3IKqJqLoysoAHqcVVgKnnXdmmq LjRBu0yoSDxiDIRZkMnsth9vhoThKf9/TA9dNsjeyXqtKsQ6Dsd3wPQOI9HEMHWZ 9QLqn71uTfRhsbff1igfeBaILhcydB12RATKRzSqs1IapoouJChiGlc4KFmfw0vu KWsNE+GbiU/Bu0L407Y+nEvZnE8l5/EQ7Iuva/ONwPcJh0a3Fsbewzz2Wys88Hkk lzhlDwHVylnkh871rHQeXENqk5Z6q0llOR2vgCap73vA2zEjUTO4/0G8q23IGaWx ohS/7hWFw9nsgs88tk0LOWrXoEoNdDM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:43:25 2026 by rpki-client