$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa File: b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa (raw, json) Hash identifier: ONSfzpLXk8HOfkGXlH6+5CXcJPAhsLk0iQeGMNabbD8= Subject key identifier: CB:B9:55:9C:7F:88:DD:F2:9C:22:F0:69:22:1E:8E:45:0B:92:1C:4D Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D55BA49064E9898DABA0C8DB0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 8987 IP address blocks: 130.137.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:49:06:4e:98:98:da:ba:0c:8d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=78e758cb-3227-4cdf-839c-a71f01caefa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:61:48:92:0c:5a:8f:7b:a8:a4:19:a1:69: be:d1:9f:2c:d9:5b:1e:9b:ec:2a:2a:20:7c:44:08: 46:f3:c6:c2:b2:44:61:3b:be:2e:87:43:de:e9:b2: a9:86:d2:dc:49:19:f0:a0:69:ca:2c:5c:c7:19:81: eb:74:54:d4:ef:bf:93:a3:e2:12:8e:9c:64:3b:e3: 49:aa:08:2a:0c:50:90:ce:bc:8a:50:eb:90:94:6d: 29:f0:a6:79:1b:77:dc:a3:2c:b4:e4:cf:36:70:1c: 93:6d:8e:29:33:b2:e9:58:33:b8:50:47:18:10:dc: 02:7a:7c:a7:0c:09:02:35:c1:0f:4d:bd:c5:d6:5e: 81:22:de:31:be:c3:df:ec:49:02:d5:7a:76:5f:54: fc:97:9e:d0:f1:fc:cd:ac:50:68:3c:14:13:df:c7: d5:fd:9f:34:77:50:50:f1:8f:16:6e:a6:18:50:ad: a4:b4:d3:a0:7e:2f:d9:6d:b3:2a:41:10:2a:9a:9c: fa:04:0d:0a:aa:95:58:74:1e:65:61:af:fc:78:1b: e0:07:32:06:c8:66:19:7c:94:aa:26:3c:d1:05:70: 0e:15:96:6f:9f:3d:86:00:5e:21:40:97:0c:ba:ee: 7b:09:6b:14:de:a2:8b:d2:7f:b3:d0:e3:fc:e3:4c: 43:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B9:55:9C:7F:88:DD:F2:9C:22:F0:69:22:1E:8E:45:0B:92:1C:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:79:69:d4:d9:54:e4:a5:39:38:2d:b4:78:46:4e:c2:ae:16: 4e:11:13:9f:dc:37:49:89:9e:78:34:70:85:58:c4:7d:31:e0: 67:7f:f0:07:47:cc:86:89:4c:ee:4e:0c:02:3a:26:c1:a8:e6: 9e:c6:79:a0:07:6a:bf:9f:f7:91:14:d8:87:92:77:24:f3:88: 51:5d:30:db:4e:53:01:f3:02:8d:d1:d7:99:5b:01:17:6a:20: 17:18:fe:87:87:34:a9:6d:89:ff:b8:b5:07:00:bb:de:13:6b: 56:b6:95:c1:df:e6:ff:5a:c6:fb:d4:d4:f2:7d:85:62:44:24: c0:1a:a0:37:b7:3e:d5:9a:d4:72:4c:56:44:60:ff:72:5b:35: 83:14:74:10:c4:6c:8c:ed:0e:8c:8a:12:d5:70:91:b8:e0:1b: 0b:ca:fc:a6:f3:f0:23:7d:6d:a7:ba:d1:42:e2:86:2a:1e:66: c9:0c:94:b8:3e:a6:23:5d:73:02:c6:df:1e:0a:ed:8b:02:b6: b6:5e:84:52:28:2e:b9:ff:6f:1d:88:6b:b0:87:b7:e8:ea:e6: 63:a9:f3:1b:bd:c2:43:0a:1b:f1:34:a0:17:42:04:db:30:6c: 88:6d:90:95:4d:5b:52:13:f6:59:1b:b2:58:01:07:f4:43:9d: 11:70:c0:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukkGTpiY2roMjbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NzhlNzU4Y2ItMzIyNy00Y2RmLTgzOWMtYTcxZjAxY2FlZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFxhSJIMWo97qKQZoWm+0Z8s2Vsem+wqKiB8 RAhG88bCskRhO74uh0Pe6bKphtLcSRnwoGnKLFzHGYHrdFTU77+To+ISjpxkO+NJ qggqDFCQzryKUOuQlG0p8KZ5G3fcoyy05M82cByTbY4pM7LpWDO4UEcYENwCenyn DAkCNcEPTb3F1l6BIt4xvsPf7EkC1Xp2X1T8l57Q8fzNrFBoPBQT38fV/Z80d1BQ 8Y8WbqYYUK2ktNOgfi/ZbbMqQRAqmpz6BA0KqpVYdB5lYa/8eBvgBzIGyGYZfJSq JjzRBXAOFZZvnz2GAF4hQJcMuu57CWsU3qKL0n+z0OP840xDOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMu5VZx/iN3ynCLwaSIejkULkhxNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjg5NjM1MWMtY2EwYS0z MzQxLWEwZTktNzNmNmZjZWZhOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF5adTZVOSlOTgttHhGTsKuFk4RE5/cN0mJnng0cIVYxH0x4Gd/8AdH zIaJTO5ODAI6JsGo5p7GeaAHar+f95EU2IeSdyTziFFdMNtOUwHzAo3R15lbARdq IBcY/oeHNKltif+4tQcAu94Ta1a2lcHf5v9axvvU1PJ9hWJEJMAaoDe3PtWa1HJM VkRg/3JbNYMUdBDEbIztDoyKEtVwkbjgGwvK/Kbz8CN9bae60ULihioeZskMlLg+ piNdcwLG3x4K7YsCtrZehFIoLrn/bx2Ia7CHt+jq5mOp8xu9wkMKG/E0oBdCBNsw bIhtkJVNW1IT9lkbslgBB/RDnRFwwL4= -----END CERTIFICATE-----Generated at Fri Apr 17 14:58:48 2026 by rpki-client