$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcdd20f7-aade-355d-ac1f-970b9d656380.roa File: dcdd20f7-aade-355d-ac1f-970b9d656380.roa (raw, json) Hash identifier: OKEKwK/yDyGobN1V6xVZacYjiMUVD+nsq9qWczWL/oc= Subject key identifier: 84:36:9B:8B:37:57:3F:18:23:74:84:0A:00:CF:43:46:0A:AB:1A:41 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584C9C31A73B8EFE1DD13E681A80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcdd20f7-aade-355d-ac1f-970b9d656380.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 16509 IP address blocks: 130.137.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:a7:3b:8e:fe:1d:d1:3e:68:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=3fe15a70-4bb6-4850-9dd0-9342e70cb0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:0f:69:74:95:aa:ce:c7:fa:9f:59:39:5c: 75:63:70:b1:9f:c5:52:f1:3c:65:e9:ac:bd:43:c2: 8a:e9:f0:0b:f2:3a:2c:72:47:4d:c0:93:b6:db:49: 23:d3:02:13:21:79:12:57:f8:93:a7:54:40:f4:84: 48:c0:cf:83:4b:b1:b3:23:a2:6e:79:26:69:b8:00: b6:f2:91:a3:3c:06:58:1d:0e:c2:70:4f:ac:d1:71: 0e:9d:4e:65:9a:a2:f1:44:aa:80:b2:57:4a:32:5c: d4:32:d2:1c:be:76:22:da:66:ce:f8:c2:32:38:cf: a9:88:c1:b8:62:fb:70:45:8b:33:37:f7:de:08:36: 75:59:0b:d4:96:bb:3b:38:08:f5:a6:f0:8d:d2:e9: a7:04:07:70:15:d4:af:01:b7:e3:5d:f9:30:ee:c5: 1e:1b:79:47:bf:fa:cd:ac:35:78:b6:7d:27:0c:47: d1:00:f7:20:0b:5d:8c:c4:21:c0:88:76:3f:75:0e: 27:2b:ba:30:29:01:a2:7f:a5:ce:e2:c3:c4:db:89: 18:19:17:9e:06:55:3f:ee:0a:40:48:0b:12:c9:35: d6:e1:76:58:de:75:8d:38:eb:af:c6:03:ac:b3:48: fb:b9:3c:62:27:15:8b:37:63:8c:40:da:58:52:d2: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:36:9B:8B:37:57:3F:18:23:74:84:0A:00:CF:43:46:0A:AB:1A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcdd20f7-aade-355d-ac1f-970b9d656380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:37:ac:93:00:3b:4f:8c:a3:f6:85:ca:51:81:07:9c:0e:3d: 66:1f:a7:1c:64:40:16:86:e6:6d:ad:20:55:a1:ba:af:d9:0f: c0:1e:2e:2e:49:c3:9f:4c:cc:8d:48:56:76:5e:5b:75:68:3d: 9e:70:eb:b2:ea:a1:23:b3:10:28:b7:93:84:a5:a6:6e:43:b5: e7:e2:b5:b2:82:36:30:74:c1:97:b4:cf:b3:5a:18:aa:27:5b: 47:2d:d0:77:05:09:cc:9b:3d:a9:69:e9:0b:10:46:4b:55:94: 5c:5c:e0:ec:e0:59:05:ab:7b:3a:25:7f:14:13:e4:0f:dd:de: 04:8a:73:50:1c:da:fd:1b:25:95:61:c3:d2:4d:9d:6d:9a:07: 43:ea:56:fb:8f:e5:eb:12:d8:c3:08:50:0b:ae:11:f8:21:c1: 7c:43:2f:d2:36:9e:76:b3:97:b7:44:13:57:e0:36:e2:db:e2: 80:49:e1:19:96:47:6d:90:9f:6b:a5:cb:bd:84:2e:65:c8:57: b1:d4:82:41:3c:f6:71:8e:36:ad:2a:0b:ad:b0:01:82:fa:7b: 34:18:4f:67:a4:e4:e0:28:22:7e:36:f9:93:28:9f:32:76:05: fe:7b:71:a5:6e:dd:14:70:d1:8b:a6:c4:f3:71:21:21:08:66: 41:dc:3e:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEycMac7jv4d0T5oGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk M2ZlMTVhNzAtNGJiNi00ODUwLTlkZDAtOTM0MmU3MGNiMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvIPaXSVqs7H+p9ZOVx1Y3Cxn8VS8Txl6ay9 Q8KK6fAL8josckdNwJO220kj0wITIXkSV/iTp1RA9IRIwM+DS7GzI6JueSZpuAC2 8pGjPAZYHQ7CcE+s0XEOnU5lmqLxRKqAsldKMlzUMtIcvnYi2mbO+MIyOM+piMG4 YvtwRYszN/feCDZ1WQvUlrs7OAj1pvCN0umnBAdwFdSvAbfjXfkw7sUeG3lHv/rN rDV4tn0nDEfRAPcgC12MxCHAiHY/dQ4nK7owKQGif6XO4sPE24kYGReeBlU/7gpA SAsSyTXW4XZY3nWNOOuvxgOss0j7uTxiJxWLN2OMQNpYUtI+7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQ2m4s3Vz8YI3SECgDPQ0YKqxpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZGNkZDIwZjctYWFkZS0z NTVkLWFjMWYtOTcwYjlkNjU2MzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB03rJMAO0+Mo/aFylGBB5wOPWYfpxxkQBaG5m2tIFWhuq/ZD8AeLi5J w59MzI1IVnZeW3VoPZ5w67LqoSOzECi3k4Slpm5DtefitbKCNjB0wZe0z7NaGKon W0ct0HcFCcybPalp6QsQRktVlFxc4OzgWQWrezolfxQT5A/d3gSKc1Ac2v0bJZVh w9JNnW2aB0PqVvuP5esS2MMIUAuuEfghwXxDL9I2nnazl7dEE1fgNuLb4oBJ4RmW R22Qn2uly72ELmXIV7HUgkE89nGONq0qC62wAYL6ezQYT2ek5OAoIn42+ZMonzJ2 Bf57caVu3RRw0YumxPNxISEIZkHcPpU= -----END CERTIFICATE-----Generated at Mon Mar 2 07:48:06 2026 by rpki-client