$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa File: cd5a3695-dc79-32b2-b279-0651d13c045f.roa (raw, json) Hash identifier: oZUsY2f8WPt3h+Lm3Kvofr0E0+atR1ZXJHNU2rpUUEA= Subject key identifier: F7:B0:2A:BE:A7:0B:99:C9:16:AF:F9:C5:FF:26:72:E5:38:35:37:29 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584C9966F7F1D004215E9DA2D500 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 16509 IP address blocks: 130.137.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:66:f7:f1:d0:04:21:5e:9d:a2:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=1cfa27d6-c387-4376-9f26-9d4b7ae045dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3e:8a:16:ce:b9:2f:b2:d3:0d:32:ab:cf:5b: 95:ab:de:33:90:77:18:2e:da:6a:52:47:d2:3e:45: 6d:15:c5:ac:df:dd:eb:71:24:09:66:48:ae:a1:1f: 27:e4:72:4f:14:6b:57:fe:b4:97:f5:89:85:79:98: 4a:d3:fb:55:ec:04:1e:36:77:aa:61:3f:60:cd:9a: fd:40:1a:bd:65:ce:fc:e8:c0:ee:b1:c6:81:a0:b4: 0e:13:20:21:c7:07:b0:4d:5e:5f:6f:1b:63:bf:96: e9:85:70:f4:1b:78:1e:ff:13:d9:69:f7:68:65:0a: 89:28:56:4f:f6:c5:65:92:ce:04:6a:32:ea:d6:71: b2:68:c1:88:bb:95:50:46:bb:05:54:03:f4:99:cd: 33:6f:f8:ce:1a:38:c1:47:2b:c7:36:6a:a5:c5:9f: b3:f9:f9:e6:fc:88:6f:8a:5f:b2:fb:66:b1:24:a2: 33:84:9a:fe:40:29:45:11:bc:9e:8e:0f:bb:45:2d: a7:84:5d:22:d2:e9:0d:7a:c6:14:82:1a:79:0a:4c: 68:19:64:9b:c2:44:ff:9d:9b:66:1a:b3:46:d9:ab: 94:09:f6:6d:36:17:d1:5e:71:af:41:03:62:33:06: 35:70:76:88:02:05:a9:66:15:6a:ed:4d:29:3e:0f: d2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B0:2A:BE:A7:0B:99:C9:16:AF:F9:C5:FF:26:72:E5:38:35:37:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:80:0c:49:bf:0c:17:ba:6e:71:93:fa:56:ce:45:65:d3:7d: 8e:ae:11:b4:2c:af:15:bf:8e:e9:de:d3:26:70:91:db:03:2d: 97:16:07:c0:13:e2:34:70:bf:2d:96:bb:cd:72:0c:a9:18:cf: 48:c1:7b:78:11:89:d0:65:16:b1:fa:0c:f3:eb:e0:52:4a:a6: 24:44:1a:b0:fb:4c:40:9c:e7:d0:fe:3f:7a:87:29:ec:7d:eb: 6b:b6:c1:5c:23:e4:52:17:df:fa:cf:4a:3d:b9:04:23:7a:d6: fb:47:a7:f6:8a:2d:74:34:8d:37:1b:2d:8a:89:f4:5c:7a:34: e8:53:98:14:fe:16:6c:8e:7f:f0:cc:ba:3f:64:d5:b8:93:fe: 24:72:df:2d:24:26:df:ec:08:43:d3:79:f6:21:f9:7f:d5:00: b2:33:5b:b1:25:e7:79:ba:27:d9:78:79:aa:06:d6:bb:00:39: 94:22:e0:32:bc:2b:a9:9c:25:26:69:c4:bb:93:26:1b:d4:b3: b9:ab:20:ce:a4:07:fb:03:46:44:22:29:5f:46:8c:11:9f:bb: 92:94:10:09:84:df:2a:53:b7:46:8d:08:02:28:dc:38:38:48: 1e:33:ec:5f:66:41:d2:83:b7:30:60:24:96:fb:e5:4e:a6:ee: 5a:fc:7f:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZvfx0AQhXp2i1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk MWNmYTI3ZDYtYzM4Ny00Mzc2LTlmMjYtOWQ0YjdhZTA0NWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz6KFs65L7LTDTKrz1uVq94zkHcYLtpqUkfS PkVtFcWs393rcSQJZkiuoR8n5HJPFGtX/rSX9YmFeZhK0/tV7AQeNneqYT9gzZr9 QBq9Zc786MDuscaBoLQOEyAhxwewTV5fbxtjv5bphXD0G3ge/xPZafdoZQqJKFZP 9sVlks4EajLq1nGyaMGIu5VQRrsFVAP0mc0zb/jOGjjBRyvHNmqlxZ+z+fnm/Ihv il+y+2axJKIzhJr+QClFEbyejg+7RS2nhF0i0ukNesYUghp5CkxoGWSbwkT/nZtm GrNG2auUCfZtNhfRXnGvQQNiMwY1cHaIAgWpZhVq7U0pPg/SPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPewKr6nC5nJFq/5xf8mcuU4NTcpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2Q1YTM2OTUtZGM3OS0z MmIyLWIyNzktMDY1MWQxM2MwNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+ADEm/DBe6bnGT+lbORWXTfY6uEbQsrxW/june0yZwkdsDLZcWB8AT 4jRwvy2Wu81yDKkYz0jBe3gRidBlFrH6DPPr4FJKpiREGrD7TECc59D+P3qHKex9 62u2wVwj5FIX3/rPSj25BCN61vtHp/aKLXQ0jTcbLYqJ9Fx6NOhTmBT+FmyOf/DM uj9k1biT/iRy3y0kJt/sCEPTefYh+X/VALIzW7El53m6J9l4eaoG1rsAOZQi4DK8 K6mcJSZpxLuTJhvUs7mrIM6kB/sDRkQiKV9GjBGfu5KUEAmE3ypTt0aNCAIo3Dg4 SB4z7F9mQdKDtzBgJJb75U6m7lr8fyw= -----END CERTIFICATE-----Generated at Sun Mar 1 23:24:50 2026 by rpki-client