$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f5ec61ab-6b35-3777-8ced-1257536758a0.roa File: f5ec61ab-6b35-3777-8ced-1257536758a0.roa (raw, json) Hash identifier: igZ2cf6TJibBY//8T7RBY0PcQCQXvdbJONXokKeqEfo= Subject key identifier: 94:DE:1F:41:D8:14:B5:10:4F:A4:F9:06:82:F7:E4:27:2E:0D:F5:DB Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584CB287239ABA2AA1DFBE342080 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f5ec61ab-6b35-3777-8ced-1257536758a0.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 8987 IP address blocks: 130.137.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:23:9a:ba:2a:a1:df:be:34:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=1f3652fb-db85-4031-9e11-c9e9f457fa69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8f:96:bf:ed:10:06:cd:28:58:0e:34:38:3d: 70:08:ad:f3:db:22:f1:9c:27:7c:71:1c:fc:e0:f3: 12:60:a4:02:93:4a:1b:b7:a7:9a:bc:5d:ab:82:89: b1:c5:c1:3b:f4:3e:1f:a9:5f:fb:ff:5d:40:d4:41: 18:1a:0d:bb:87:54:84:01:9e:fe:fb:8e:ae:e8:3a: 7a:89:f3:d5:36:14:5c:6c:90:b8:81:d5:81:82:4b: f6:77:8e:25:7f:3b:04:a7:a5:d7:c0:ac:0c:a9:ff: 86:67:ff:bd:09:52:f9:33:81:a4:65:34:35:79:0a: 6e:fe:dc:af:a3:0c:39:62:97:7d:4d:0d:fe:52:db: da:3f:dd:c6:43:80:50:c7:c7:91:eb:a3:51:ed:ed: 5f:40:7f:38:c6:84:c0:7d:8c:cf:e9:4d:18:53:fa: f5:6a:f2:93:03:89:3a:8e:b7:47:cc:40:ff:0c:ce: 8f:35:35:0c:73:c5:69:1d:e5:66:87:d0:55:4f:10: 35:59:e9:79:ec:99:73:cf:71:78:39:4d:66:ed:d5: 47:32:90:f2:80:22:e9:54:26:36:82:bd:15:4a:b7: 0e:ee:8c:45:f8:e8:40:32:14:1b:2c:16:78:71:6e: 7a:6e:8b:5e:6a:aa:1b:cb:47:1b:54:29:40:19:2d: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DE:1F:41:D8:14:B5:10:4F:A4:F9:06:82:F7:E4:27:2E:0D:F5:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f5ec61ab-6b35-3777-8ced-1257536758a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:df:50:2c:5e:66:8e:f1:92:36:fb:1f:24:27:9a:ed:bf:12: b0:b8:ec:cc:0a:3d:b0:f1:d4:18:7c:4b:cd:2d:7e:31:6c:c3: 07:55:7a:8c:f2:65:3c:e8:f1:10:83:09:ab:24:76:f3:8a:34: b8:7c:f8:b7:bf:44:c0:ed:3a:f5:53:fa:fa:6b:cb:d3:3b:8c: 98:1d:d5:4f:86:49:8c:d6:f7:9d:3c:a3:49:6b:07:a6:a6:8d: 97:76:d0:a3:71:2d:e7:a3:79:75:8a:06:33:88:eb:6a:78:85: 04:0a:c3:6b:1b:2a:06:13:2c:77:b0:11:fd:7e:14:df:3b:4c: d2:b6:32:b1:b6:41:c7:a6:25:6e:ec:6f:bb:30:f9:65:46:bd: 94:a8:ee:2f:57:39:a3:53:ac:f4:82:3f:04:e9:8c:56:aa:e3: 51:57:de:3e:1b:de:0c:75:7e:7c:72:75:0b:db:a8:2c:ac:dd: 03:9b:97:e8:b5:06:e4:9c:5e:76:ff:1f:4f:b6:9d:58:ea:1e: b1:8a:6c:4e:b5:3f:c6:4b:58:44:d0:7d:54:97:96:4a:9d:83: 52:d6:cd:9a:86:26:8c:a3:87:96:e8:26:33:35:23:3b:ef:cd: 32:66:00:f3:80:fc:49:e0:db:ae:08:3e:53:62:d6:f1:00:59: fb:3f:38:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhyOauiqh3740IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk MWYzNjUyZmItZGI4NS00MDMxLTllMTEtYzllOWY0NTdmYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY+Wv+0QBs0oWA40OD1wCK3z2yLxnCd8cRz8 4PMSYKQCk0obt6eavF2rgomxxcE79D4fqV/7/11A1EEYGg27h1SEAZ7++46u6Dp6 ifPVNhRcbJC4gdWBgkv2d44lfzsEp6XXwKwMqf+GZ/+9CVL5M4GkZTQ1eQpu/tyv oww5Ypd9TQ3+UtvaP93GQ4BQx8eR66NR7e1fQH84xoTAfYzP6U0YU/r1avKTA4k6 jrdHzED/DM6PNTUMc8VpHeVmh9BVTxA1Wel57Jlzz3F4OU1m7dVHMpDygCLpVCY2 gr0VSrcO7oxF+OhAMhQbLBZ4cW56boteaqoby0cbVClAGS2HgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTeH0HYFLUQT6T5BoL35CcuDfXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZjVlYzYxYWItNmIzNS0z Nzc3LThjZWQtMTI1NzUzNjc1OGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvfUCxeZo7xkjb7HyQnmu2/ErC47MwKPbDx1Bh8S80tfjFswwdVeozy ZTzo8RCDCaskdvOKNLh8+Le/RMDtOvVT+vpry9M7jJgd1U+GSYzW9508o0lrB6am jZd20KNxLeejeXWKBjOI62p4hQQKw2sbKgYTLHewEf1+FN87TNK2MrG2QcemJW7s b7sw+WVGvZSo7i9XOaNTrPSCPwTpjFaq41FX3j4b3gx1fnxydQvbqCys3QObl+i1 BuScXnb/H0+2nVjqHrGKbE61P8ZLWETQfVSXlkqdg1LWzZqGJoyjh5boJjM1Izvv zTJmAPOA/Eng264IPlNi1vEAWfs/OOw= -----END CERTIFICATE-----Generated at Mon Mar 2 10:44:14 2026 by rpki-client