$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbf4e6a9-7140-3d40-9399-e744892289fa.roa File: bbf4e6a9-7140-3d40-9399-e744892289fa.roa (raw, json) Hash identifier: fgR7brzlgtjwr+mVc6uvRieii/g3jGcaVI+ig5/prY4= Subject key identifier: 61:A3:F4:3E:33:BD:C0:44:0A:79:07:D3:5F:4B:3F:33:D6:F0:AF:63 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F15CCE51A314C5473A386DB80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbf4e6a9-7140-3d40-9399-e744892289fa.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 8987 IP address blocks: 130.137.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e5:1a:31:4c:54:73:a3:86:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=5af3e825-0e6a-48a6-ac41-0a33e140e4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:e6:0a:23:4a:b5:8c:91:66:ae:9d:d8:48: 9c:b8:77:e3:6a:e4:33:e3:cf:4e:fa:49:29:40:e0: 7e:35:63:47:38:4b:4d:c6:8d:d4:ba:ca:e2:41:05: 2d:18:08:ce:e2:e4:9f:3d:d4:6b:81:cf:e2:f4:e7: 17:58:21:75:78:04:f3:8a:1f:e6:76:a3:2e:57:e5: bc:6b:a9:29:d1:f2:4a:79:75:21:71:61:7d:39:ec: 3e:95:6f:9a:d9:96:f7:5d:02:56:5c:ae:4e:86:2e: 6d:05:eb:5c:d6:37:22:a6:5e:c9:d6:81:a4:fa:fe: a5:1f:96:4e:29:b5:5f:1f:d8:79:cb:a0:62:f2:0b: 4f:b4:c8:36:b8:0e:b3:48:b3:79:e1:3e:e6:11:67: bd:e3:12:76:68:31:4c:10:01:fb:69:5b:79:56:03: eb:e5:0c:86:6e:a3:c2:7c:f7:73:8a:eb:71:80:48: da:9a:d3:b0:bd:71:fe:a5:2c:e4:ec:87:c2:5f:9f: d0:f0:61:1d:07:9d:ef:27:5c:21:b7:a3:b4:8e:30: f8:0d:8d:a3:b4:67:9c:b8:1c:84:23:9d:be:1a:7f: 26:e0:73:7c:d4:21:9f:4e:25:f5:e1:7d:fc:10:b6: f2:4d:36:28:a7:6d:10:fe:83:5d:9b:51:9e:3b:0f: aa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A3:F4:3E:33:BD:C0:44:0A:79:07:D3:5F:4B:3F:33:D6:F0:AF:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbf4e6a9-7140-3d40-9399-e744892289fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0d:3c:d7:6d:d3:16:89:09:93:a3:e1:b9:8f:92:8a:e3:da: fd:4c:d1:f0:a4:6a:25:65:79:20:f3:23:59:5d:c3:4b:50:77: a2:6a:4d:91:d9:28:80:8d:18:35:0f:d2:7b:a2:ee:67:40:e9: 9e:11:e0:55:f5:6e:cb:17:b8:75:44:a6:72:de:d9:72:73:9b: 09:fd:fd:78:a0:21:ad:ff:63:94:0c:06:71:e8:0e:f9:ab:28: 11:66:15:e1:9d:cb:80:04:14:4c:cf:bc:78:eb:da:41:5d:a5: d8:b2:ea:56:de:ab:f2:f9:3f:95:22:3e:37:d5:ab:7b:75:23: 38:e6:90:73:de:97:33:2e:80:b8:63:e9:f9:ba:38:7e:33:0a: b3:8a:3f:d8:c3:0d:56:1c:60:e1:3c:aa:d3:8d:3c:cf:bb:4c: 1c:1c:46:bf:82:02:73:27:e0:3c:f2:aa:97:18:04:d3:cd:94: 2d:c0:ba:25:c5:38:ea:53:9f:d4:2f:51:1e:cd:f2:7c:39:01: a5:ff:bc:76:7a:34:19:d5:45:f4:8a:b3:a0:99:ae:14:89:05: 7f:a0:f9:28:6a:3e:95:9d:21:15:02:61:56:5b:5b:25:03:c2: 5c:6c:cd:58:e6:48:92:09:7e:d3:b0:62:c4:b1:4f:86:26:17: 18:df:6a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzOUaMUxUc6OG24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk NWFmM2U4MjUtMGU2YS00OGE2LWFjNDEtMGEzM2UxNDBlNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lLmCiNKtYyRZq6d2EicuHfjauQz489O+kkp QOB+NWNHOEtNxo3UusriQQUtGAjO4uSfPdRrgc/i9OcXWCF1eATzih/mdqMuV+W8 a6kp0fJKeXUhcWF9Oew+lW+a2Zb3XQJWXK5Ohi5tBetc1jcipl7J1oGk+v6lH5ZO KbVfH9h5y6Bi8gtPtMg2uA6zSLN54T7mEWe94xJ2aDFMEAH7aVt5VgPr5QyGbqPC fPdziutxgEjamtOwvXH+pSzk7IfCX5/Q8GEdB53vJ1wht6O0jjD4DY2jtGecuByE I52+Gn8m4HN81CGfTiX14X38ELbyTTYop20Q/oNdm1GeOw+qdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGj9D4zvcBECnkH019LPzPW8K9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmJmNGU2YTktNzE0MC0z ZDQwLTkzOTktZTc0NDg5MjI4OWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgNPNdt0xaJCZOj4bmPkorj2v1M0fCkaiVleSDzI1ldw0tQd6JqTZHZ KICNGDUP0nui7mdA6Z4R4FX1bssXuHVEpnLe2XJzmwn9/XigIa3/Y5QMBnHoDvmr KBFmFeGdy4AEFEzPvHjr2kFdpdiy6lbeq/L5P5UiPjfVq3t1IzjmkHPelzMugLhj 6fm6OH4zCrOKP9jDDVYcYOE8qtONPM+7TBwcRr+CAnMn4DzyqpcYBNPNlC3AuiXF OOpTn9QvUR7N8nw5AaX/vHZ6NBnVRfSKs6CZrhSJBX+g+ShqPpWdIRUCYVZbWyUD wlxszVjmSJIJftOwYsSxT4YmFxjfanA= -----END CERTIFICATE-----Generated at Sun Sep 20 21:34:17 2026 by rpki-client