$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbd5eaba-c55b-30ce-b358-6600f5b27c21.roa File: bbd5eaba-c55b-30ce-b358-6600f5b27c21.roa (raw, json) Hash identifier: QIqiB4gAs2mnntCO/SSEu9nBLL570ArTiOn3qALMQAU= Subject key identifier: F4:2D:74:AB:F6:D7:F9:DD:BF:43:00:AA:FE:18:7B:B3:42:09:02:6A Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584C9C31A57F03E36BE9031C7B80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbd5eaba-c55b-30ce-b358-6600f5b27c21.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 8987 IP address blocks: 130.137.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:a5:7f:03:e3:6b:e9:03:1c:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=5d2185f1-296b-4855-8275-28306277bf4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:c1:31:13:3d:ec:97:05:5f:08:b1:1f:0b: 6c:02:4e:47:7c:e5:ae:aa:7e:e7:f8:5b:85:e0:ac: 08:c4:16:59:d7:fe:99:cd:47:47:be:57:21:34:21: a0:35:35:6a:39:b9:ac:2c:24:72:75:c1:e9:f8:77: ac:25:31:43:76:c0:49:59:7a:59:02:c9:f5:01:d3: 44:a8:10:95:9c:d3:00:60:af:10:86:d5:f9:36:ac: f8:b4:1f:dd:69:b1:01:10:8c:89:37:60:88:8c:be: 13:32:49:27:47:93:ec:e4:7a:64:8e:ae:57:6d:60: 3f:2e:8d:03:8a:a9:70:be:f8:c5:9a:78:88:5d:11: d4:f8:83:41:c9:bd:57:92:fb:be:b2:9f:f4:3e:fe: f5:3e:25:15:1a:57:11:b9:bf:0b:f7:8b:c9:3f:83: 7a:e0:47:b0:05:78:70:82:f9:50:ba:bb:f7:a7:f2: 19:5b:10:43:e8:53:ec:60:7a:e5:ac:b7:d3:12:e3: 8c:81:d5:87:e3:a9:1b:c1:43:2a:2a:84:82:cf:88: 60:8c:56:c5:3b:16:82:e7:6c:d0:80:d6:b5:30:05: 34:be:27:66:3a:c9:5e:3a:14:96:fe:fe:8e:3e:06: af:9a:27:c1:c7:13:52:95:ab:3b:88:12:f6:a0:b7: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2D:74:AB:F6:D7:F9:DD:BF:43:00:AA:FE:18:7B:B3:42:09:02:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbd5eaba-c55b-30ce-b358-6600f5b27c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b6:25:f4:44:0f:79:e2:6b:e3:66:e4:46:ed:4e:22:9c:22: 56:65:26:91:9f:31:64:06:f3:71:bd:7d:9e:b1:f5:31:77:4f: 15:fd:77:21:78:5f:db:4c:95:39:7d:61:70:a8:c3:92:70:1c: c0:c9:2b:a9:1c:40:cc:fb:12:9f:66:8b:50:4e:eb:fa:bf:2c: a4:3b:e8:7f:dd:a0:40:35:04:01:36:2b:a4:90:5d:a6:45:27: 5b:87:a2:00:21:d0:21:39:4a:62:48:de:7c:35:52:20:3d:16: 22:4c:16:a1:d5:41:5c:a0:15:ae:d2:34:a3:d9:76:d4:b3:85: 6e:d8:c2:3d:a5:0e:10:26:43:4d:7c:67:93:94:6b:b0:09:95: 78:b7:9f:41:c6:8c:2a:72:3b:1c:49:45:8a:e9:7a:04:a9:06: 61:df:46:3c:3b:ff:e4:e9:0e:ad:95:18:fc:dd:2b:65:ba:f7: a1:cf:0b:f7:54:16:a9:f7:91:62:ef:7d:24:95:3a:8a:64:c5: 01:ff:b8:fe:13:63:bd:fb:5f:e1:0c:9d:c8:a7:bc:39:c3:0b: c1:b9:34:69:83:2b:e2:58:53:48:91:f0:a3:73:a4:80:9b:a8: 7d:47:58:f5:a5:55:67:bb:84:2d:66:52:5a:76:78:4b:a8:2c: fe:a5:8f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEycMaV/A+Nr6QMce4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk NWQyMTg1ZjEtMjk2Yi00ODU1LTgyNzUtMjgzMDYyNzdiZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFbBMRM97JcFXwixHwtsAk5HfOWuqn7n+FuF 4KwIxBZZ1/6ZzUdHvlchNCGgNTVqObmsLCRydcHp+HesJTFDdsBJWXpZAsn1AdNE qBCVnNMAYK8QhtX5Nqz4tB/dabEBEIyJN2CIjL4TMkknR5Ps5Hpkjq5XbWA/Lo0D iqlwvvjFmniIXRHU+INByb1Xkvu+sp/0Pv71PiUVGlcRub8L94vJP4N64EewBXhw gvlQurv3p/IZWxBD6FPsYHrlrLfTEuOMgdWH46kbwUMqKoSCz4hgjFbFOxaC52zQ gNa1MAU0vidmOsleOhSW/v6OPgavmifBxxNSlas7iBL2oLdsdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQtdKv21/ndv0MAqv4Ye7NCCQJqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmJkNWVhYmEtYzU1Yi0z MGNlLWIzNTgtNjYwMGY1YjI3YzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG2JfRED3nia+Nm5EbtTiKcIlZlJpGfMWQG83G9fZ6x9TF3TxX9dyF4 X9tMlTl9YXCow5JwHMDJK6kcQMz7Ep9mi1BO6/q/LKQ76H/doEA1BAE2K6SQXaZF J1uHogAh0CE5SmJI3nw1UiA9FiJMFqHVQVygFa7SNKPZdtSzhW7Ywj2lDhAmQ018 Z5OUa7AJlXi3n0HGjCpyOxxJRYrpegSpBmHfRjw7/+TpDq2VGPzdK2W696HPC/dU Fqn3kWLvfSSVOopkxQH/uP4TY737X+EMncinvDnDC8G5NGmDK+JYU0iR8KNzpICb qH1HWPWlVWe7hC1mUlp2eEuoLP6ljwo= -----END CERTIFICATE-----Generated at Mon Mar 2 00:52:18 2026 by rpki-client