$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d0e27e3d-8931-3830-baac-85af16c0ba40.roa File: d0e27e3d-8931-3830-baac-85af16c0ba40.roa (raw, json) Hash identifier: +gEnQZGkTtRH2uB+SmtVgvBlZQL+0pCxpb3mJ/vmRRg= Subject key identifier: 18:53:F2:F2:24:62:A8:60:38:91:9F:C4:23:06:32:AD:E3:8A:AE:C5 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584CB2872291193E170DFD669D00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d0e27e3d-8931-3830-baac-85af16c0ba40.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 8987 IP address blocks: 130.137.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:22:91:19:3e:17:0d:fd:66:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=5e8419b8-7795-49ae-b2f7-6f4f75f048c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:7c:be:1f:f1:95:55:fb:7e:ed:9f:53:d3: 1a:79:c2:d4:a3:87:27:8b:56:fa:32:9e:6f:42:20: 5d:0b:cc:45:45:0c:f3:8c:ef:11:8b:5d:93:f7:68: 85:90:e5:41:31:2a:2e:55:f3:83:b7:71:40:3c:c9: 23:e3:26:01:a2:7d:a5:fc:19:26:0b:65:db:50:d0: 47:05:58:4d:32:13:22:1f:09:f2:40:4c:14:cf:f2: 84:a7:71:bd:23:0b:e9:39:58:37:64:c7:a4:6f:47: 71:0c:25:5a:fd:25:20:e4:5a:e1:a9:ec:60:37:bd: 54:2a:8b:3b:54:9f:d7:76:ce:a3:1e:39:20:8a:02: 07:56:15:9d:e3:be:fb:da:03:cd:af:3b:68:d8:07: c4:58:ba:9a:a1:b2:fe:73:62:c3:76:b2:2d:13:0a: 78:27:b2:93:6d:31:aa:7c:47:94:72:b3:f4:d6:d1: 84:94:26:4e:3a:ae:96:81:a9:6d:9e:37:7c:d3:f7: a4:0b:5b:ad:6d:61:e2:3e:06:2b:c5:21:60:96:22: 6c:8d:2c:f1:19:63:34:7e:5f:0a:17:df:93:14:fb: 4c:6f:6d:e9:95:fe:cb:39:de:fa:ba:24:62:3e:cc: 95:82:aa:89:aa:f5:a4:5d:ae:f3:84:87:d4:02:d6: da:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:53:F2:F2:24:62:A8:60:38:91:9F:C4:23:06:32:AD:E3:8A:AE:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d0e27e3d-8931-3830-baac-85af16c0ba40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:87:d1:a6:8b:0a:21:91:e0:06:57:5f:b7:d3:96:7c:23:92: 33:20:82:75:5a:17:28:32:95:05:ba:2c:f7:6b:02:dd:e1:9f: 41:0f:57:e4:07:ea:ac:43:17:f3:6a:1d:18:c9:22:90:43:10: 8d:5c:49:30:98:02:3a:a8:f7:ce:a8:c6:45:c6:9b:85:18:68: 1f:5a:de:eb:41:8d:22:f7:a5:c2:94:de:a9:12:25:9b:28:01: c7:58:8c:00:c9:6d:b7:95:89:68:60:01:3e:18:e3:2e:b2:4a: 54:30:c9:d4:18:39:09:d3:8d:3d:61:21:55:aa:ee:6c:08:19: c9:bf:b5:9e:1a:9a:6c:a9:4e:26:ee:47:68:02:f2:9e:dd:4b: 89:58:0c:29:c5:c5:bf:4f:1b:31:ce:ed:bf:f2:e3:cf:24:9f: 0b:70:49:14:e8:01:26:d0:ac:74:ca:d2:89:0f:e8:43:86:80: f9:86:fe:d8:31:37:80:dd:ca:59:58:ae:af:c9:64:e3:70:21: c8:1b:14:7b:e5:b4:f1:5f:b0:23:33:01:f5:f2:ad:e2:d2:9e: 48:d1:56:3c:7d:ce:96:5e:77:25:1b:a3:53:6f:5e:d0:7d:3e: b3:eb:79:c5:47:75:07:ea:6e:27:89:74:01:3b:04:4c:79:d2: 90:d2:57:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhyKRGT4XDf1mnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk NWU4NDE5YjgtNzc5NS00OWFlLWIyZjctNmY0Zjc1ZjA0OGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphl8vh/xlVX7fu2fU9MaecLUo4cni1b6Mp5v QiBdC8xFRQzzjO8Ri12T92iFkOVBMSouVfODt3FAPMkj4yYBon2l/BkmC2XbUNBH BVhNMhMiHwnyQEwUz/KEp3G9IwvpOVg3ZMekb0dxDCVa/SUg5FrhqexgN71UKos7 VJ/Xds6jHjkgigIHVhWd47772gPNrzto2AfEWLqaobL+c2LDdrItEwp4J7KTbTGq fEeUcrP01tGElCZOOq6Wgaltnjd80/ekC1utbWHiPgYrxSFgliJsjSzxGWM0fl8K F9+TFPtMb23plf7LOd76uiRiPsyVgqqJqvWkXa7zhIfUAtbaSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhT8vIkYqhgOJGfxCMGMq3jiq7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDBlMjdlM2QtODkzMS0z ODMwLWJhYWMtODVhZjE2YzBiYTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2H0aaLCiGR4AZXX7fTlnwjkjMggnVaFygylQW6LPdrAt3hn0EPV+QH 6qxDF/NqHRjJIpBDEI1cSTCYAjqo986oxkXGm4UYaB9a3utBjSL3pcKU3qkSJZso AcdYjADJbbeViWhgAT4Y4y6ySlQwydQYOQnTjT1hIVWq7mwIGcm/tZ4ammypTibu R2gC8p7dS4lYDCnFxb9PGzHO7b/y488knwtwSRToASbQrHTK0okP6EOGgPmG/tgx N4DdyllYrq/JZONwIcgbFHvltPFfsCMzAfXyreLSnkjRVjx9zpZedyUbo1NvXtB9 PrPrecVHdQfqbieJdAE7BEx50pDSV/M= -----END CERTIFICATE-----Generated at Mon Mar 2 15:30:03 2026 by rpki-client