$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ef60adf9-c8a5-393f-94bb-5aefa4db4f72.roa File: ef60adf9-c8a5-393f-94bb-5aefa4db4f72.roa (raw, json) Hash identifier: 7w86LaO60OhyJ9Xfo66nrpAZIplt7SQjbxJi+N7+j2A= Subject key identifier: 84:B9:1A:1C:C8:68:C2:3E:82:21:54:8C:7D:2D:3C:6B:4C:E0:EC:E1 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584EFF7770BDC2CDF89C50DE8600 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ef60adf9-c8a5-393f-94bb-5aefa4db4f72.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 130.137.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:70:bd:c2:cd:f8:9c:50:de:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=caa1f415-4fdc-4bec-bb61-5ec7cb9ee87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0a:ea:ed:d6:bf:4d:f8:b9:91:23:07:d9:79: e9:a5:b5:6b:8b:53:72:e6:d2:8c:05:ed:cb:13:dc: 03:d9:28:03:99:a4:45:18:2a:65:80:ff:6a:58:02: 68:77:27:c9:9c:da:1d:1f:cd:eb:25:6c:ae:40:88: a9:f8:63:68:83:1c:f0:ec:87:4b:f2:89:69:3c:f2: 13:63:1a:44:85:dc:a6:ef:31:97:5f:58:63:9d:58: 76:0f:48:a6:97:65:52:24:f4:82:58:44:52:d0:3d: 48:29:57:87:c4:8f:96:72:d6:1a:83:a1:76:5c:80: b7:25:ac:15:48:f3:65:bd:7f:98:1a:2e:8d:b6:65: 3c:16:b2:a5:b6:be:cd:d9:14:6b:ed:7d:ea:d0:6d: 6d:77:8a:ec:75:ee:b0:31:c4:ed:e6:e3:e4:38:97: d1:f1:4a:01:71:e2:8f:d7:b3:f6:23:19:71:c2:ee: 04:fc:d5:f0:17:3b:bf:64:52:eb:bc:1e:94:21:8a: 0e:49:07:06:28:8e:86:13:c2:3a:77:18:14:f4:1a: c1:34:74:53:4d:4c:21:df:c2:cd:90:f4:97:53:05: e6:5f:c3:f1:14:6d:14:1a:eb:21:ff:37:f9:df:d5: a0:71:05:c2:1d:d1:6a:8c:f4:ef:de:0c:bc:c8:77: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B9:1A:1C:C8:68:C2:3E:82:21:54:8C:7D:2D:3C:6B:4C:E0:EC:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ef60adf9-c8a5-393f-94bb-5aefa4db4f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:6b:42:85:c4:50:fa:02:43:98:08:c4:8b:a1:0f:75:9c:4a: 8a:69:3d:56:a8:70:b5:e2:25:48:1b:1f:d6:59:3d:0d:f1:d1: 18:c1:95:f2:60:68:49:f2:6e:8c:d8:f7:7f:ed:a4:f3:f3:36: 8a:ba:a4:c9:ab:28:31:79:21:cc:93:20:0b:62:2b:73:0c:76: 12:7a:0c:05:8e:a2:35:ef:67:e8:aa:f9:e6:07:91:0c:af:a6: 2d:ac:47:57:c1:f5:4c:6a:8f:d7:a3:24:93:86:82:b4:a4:dd: fc:37:0b:0b:26:0d:86:ff:3b:b1:7a:71:12:a6:13:05:d4:bb: ae:58:1f:c0:bf:85:28:e6:c0:ff:6b:a5:94:2a:df:cb:67:7b: 9d:85:03:2c:c1:14:ad:b0:2f:dd:0e:40:97:c4:68:12:66:60: a6:f4:69:b5:da:9c:d0:40:98:da:f7:83:18:7f:4f:e0:a9:5b: 04:79:a8:0e:70:5d:55:5a:90:0d:95:c8:ff:e6:3e:a1:34:a4: 38:4a:14:22:5f:2e:ad:d6:1f:eb:a1:ef:78:9b:b6:1e:aa:05: 93:18:63:cd:0f:59:28:48:8e:60:c5:c7:32:a0:6f:e7:9a:19: 2d:9b:02:c8:1c:ad:b0:3b:4f:e0:42:02:b5:33:be:bf:1f:16: 88:9b:6a:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3C9ws34nFDehgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk Y2FhMWY0MTUtNGZkYy00YmVjLWJiNjEtNWVjN2NiOWVlODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgrq7da/Tfi5kSMH2XnppbVri1Ny5tKMBe3L E9wD2SgDmaRFGCplgP9qWAJodyfJnNodH83rJWyuQIip+GNogxzw7IdL8olpPPIT YxpEhdym7zGXX1hjnVh2D0iml2VSJPSCWERS0D1IKVeHxI+WctYag6F2XIC3JawV SPNlvX+YGi6NtmU8FrKltr7N2RRr7X3q0G1td4rsde6wMcTt5uPkOJfR8UoBceKP 17P2Ixlxwu4E/NXwFzu/ZFLrvB6UIYoOSQcGKI6GE8I6dxgU9BrBNHRTTUwh38LN kPSXUwXmX8PxFG0UGush/zf539WgcQXCHdFqjPTv3gy8yHer/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS5GhzIaMI+giFUjH0tPGtM4OzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZWY2MGFkZjktYzhhNS0z OTNmLTk0YmItNWFlZmE0ZGI0ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1rQoXEUPoCQ5gIxIuhD3WcSoppPVaocLXiJUgbH9ZZPQ3x0RjBlfJg aEnybozY93/tpPPzNoq6pMmrKDF5IcyTIAtiK3MMdhJ6DAWOojXvZ+iq+eYHkQyv pi2sR1fB9Uxqj9ejJJOGgrSk3fw3CwsmDYb/O7F6cRKmEwXUu65YH8C/hSjmwP9r pZQq38tne52FAyzBFK2wL90OQJfEaBJmYKb0abXanNBAmNr3gxh/T+CpWwR5qA5w XVVakA2VyP/mPqE0pDhKFCJfLq3WH+uh73ibth6qBZMYY80PWShIjmDFxzKgb+ea GS2bAsgcrbA7T+BCArUzvr8fFoibakc= -----END CERTIFICATE-----Generated at Tue Sep 22 03:43:06 2026 by rpki-client