$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d90f6627-cf4f-33ec-aaf9-8c1563fa04cd.roa File: d90f6627-cf4f-33ec-aaf9-8c1563fa04cd.roa (raw, json) Hash identifier: Rp6Xjh/T7lhdeERBXb6V6NdRqpqa7RBrkTfTzunLano= Subject key identifier: FD:28:B4:80:6D:E5:C0:6E:37:5F:DB:19:B7:E3:0B:C5:F4:64:37:39 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F14679645C54CD015977BF9A0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d90f6627-cf4f-33ec-aaf9-8c1563fa04cd.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 8987 IP address blocks: 130.137.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:96:45:c5:4c:d0:15:97:7b:f9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=ce3d2589-1fa5-4870-ad9f-dff4b6303db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:15:a2:ac:d5:b9:40:09:3a:25:f3:9c:24:c6: bf:0a:ad:ab:e5:18:7a:6e:6d:e3:44:48:97:47:c1: 8a:39:3a:cb:10:c2:37:1e:4c:d2:1e:89:54:51:53: 1a:5c:b6:81:00:53:9c:99:f4:b6:f0:59:22:04:89: ed:50:7d:aa:09:64:3b:5e:13:97:a2:12:03:ab:0b: 9a:c4:b3:f9:ab:b3:8a:42:ff:76:ea:b2:d6:83:6d: dc:70:3d:81:0d:11:1f:52:e4:4b:0b:fe:6b:58:d4: ae:ef:c1:62:42:4d:f5:9c:27:8b:7f:97:1c:cc:3c: 7e:fc:a1:33:df:bc:13:3e:73:14:58:b0:c0:ec:2b: a5:58:68:83:51:df:36:0b:dd:f4:61:5c:69:dc:fd: a6:ba:6e:88:fa:23:57:86:0b:4a:73:7b:46:38:7f: 20:ac:8d:7d:f3:96:20:2e:0b:36:1b:b8:7d:93:02: 47:57:48:b6:74:0a:53:b1:b2:ef:0b:89:66:7a:43: e3:79:7f:71:ab:75:79:92:8f:91:5e:30:e1:3c:11: f6:5f:42:94:2a:f8:4d:f5:db:31:28:33:2c:42:be: 90:30:0f:9b:1b:52:8a:a0:02:6d:b3:9c:9c:11:e7: de:19:63:9d:19:68:f9:ab:f6:d0:0f:a4:b1:23:a8: ea:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:28:B4:80:6D:E5:C0:6E:37:5F:DB:19:B7:E3:0B:C5:F4:64:37:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d90f6627-cf4f-33ec-aaf9-8c1563fa04cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:99:d3:cf:63:b0:cb:d6:4f:71:81:5f:6c:fa:04:bb:47:7f: 22:5f:f4:70:7c:1e:50:37:f6:d6:78:0a:a3:58:69:57:b1:74: 1f:4e:0b:6b:33:83:5d:15:f0:4d:6b:22:44:53:94:3a:1f:c2: ed:af:28:e2:be:ca:d4:94:1a:78:c9:23:1c:fe:57:9e:ac:0b: 0f:0e:cf:00:b7:c1:db:7d:68:46:99:97:8e:5f:b8:7c:15:12: b9:89:65:36:9e:1d:1d:82:16:37:af:a3:9a:dc:b3:6f:7e:f7: db:59:f0:77:ab:4f:c7:0b:0e:4c:db:76:3d:a6:a3:50:bc:56: b5:a4:56:95:7f:52:84:a8:f4:29:60:cb:e5:9e:05:79:fd:c4: fa:e9:17:ec:66:f7:b3:9c:ac:6f:aa:87:95:7f:07:12:68:9b: ab:c4:f5:9a:e2:13:43:4b:0a:3d:9a:d0:6d:96:e6:65:c7:a9: 30:9d:00:00:55:89:9a:fc:be:a5:ac:03:4f:8c:ae:60:51:18: 08:84:3f:eb:79:76:ee:72:a5:d4:63:1b:76:25:0a:47:ef:00: 0b:d1:46:2b:15:b0:d6:c7:30:b5:d2:30:b4:72:84:8c:ac:ea: be:af:32:20:00:9c:1e:49:e2:9d:58:c4:0c:6f:39:e0:e8:c0: 68:9b:2a:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5ZFxUzQFZd7+aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk Y2UzZDI1ODktMWZhNS00ODcwLWFkOWYtZGZmNGI2MzAzZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohWirNW5QAk6JfOcJMa/Cq2r5Rh6bm3jREiX R8GKOTrLEMI3HkzSHolUUVMaXLaBAFOcmfS28FkiBIntUH2qCWQ7XhOXohIDqwua xLP5q7OKQv926rLWg23ccD2BDREfUuRLC/5rWNSu78FiQk31nCeLf5cczDx+/KEz 37wTPnMUWLDA7CulWGiDUd82C930YVxp3P2mum6I+iNXhgtKc3tGOH8grI1985Yg Lgs2G7h9kwJHV0i2dApTsbLvC4lmekPjeX9xq3V5ko+RXjDhPBH2X0KUKvhN9dsx KDMsQr6QMA+bG1KKoAJts5ycEefeGWOdGWj5q/bQD6SxI6jqjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0otIBt5cBuN1/bGbfjC8X0ZDc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDkwZjY2MjctY2Y0Zi0z M2VjLWFhZjktOGMxNTYzZmEwNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgoncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKZ089jsMvWT3GBX2z6BLtHfyJf9HB8HlA39tZ4CqNYaVexdB9OC2sz g10V8E1rIkRTlDofwu2vKOK+ytSUGnjJIxz+V56sCw8OzwC3wdt9aEaZl45fuHwV ErmJZTaeHR2CFjevo5rcs29+99tZ8HerT8cLDkzbdj2mo1C8VrWkVpV/UoSo9Clg y+WeBXn9xPrpF+xm97OcrG+qh5V/BxJom6vE9ZriE0NLCj2a0G2W5mXHqTCdAABV iZr8vqWsA0+MrmBRGAiEP+t5du5ypdRjG3YlCkfvAAvRRisVsNbHMLXSMLRyhIys 6r6vMiAAnB5J4p1YxAxvOeDowGibKuc= -----END CERTIFICATE-----Generated at Tue Sep 22 13:15:34 2026 by rpki-client