$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/23799b97-c2fe-31d2-921b-6e5abcbece3d.roa File: 23799b97-c2fe-31d2-921b-6e5abcbece3d.roa (raw, json) Hash identifier: UE4hnLvITm/AI3NGK0RNJVZGHU5E5gChFiSIH6N9mWE= Subject key identifier: 33:B1:0C:97:19:41:D5:33:44:02:FF:90:B1:9D:94:5A:1B:D0:FD:BC Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584E2AD464E43030DE77482ED2C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/23799b97-c2fe-31d2-921b-6e5abcbece3d.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 14618 IP address blocks: 130.137.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:64:e4:30:30:de:77:48:2e:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=1e8e0611-75c0-412e-8e28-4907da855f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:d7:f6:42:a7:98:09:60:1e:5f:cb:cd:48: cc:fd:c5:ae:c6:b4:5c:d9:25:d1:c3:51:fc:16:72: 11:13:0f:d4:37:38:8f:74:b2:31:01:a8:4e:43:54: 0b:0c:fb:ed:63:30:e2:c7:c2:8a:51:7f:f0:ab:81: 33:2b:19:ff:54:f4:8a:30:ed:62:04:08:3b:57:45: 99:1d:7b:ea:ef:0b:93:33:c4:6d:0e:62:75:54:6e: bc:c4:96:ed:a2:52:b3:69:fb:a3:60:9b:4e:fc:f2: 17:1b:11:e1:d1:cb:95:bb:1d:83:9c:70:2a:63:8c: 63:56:e6:6b:e1:f3:7d:6e:da:dd:0c:82:47:fc:b5: b5:8f:d6:f4:cd:e3:51:a3:44:27:19:11:14:e9:45: 77:c8:19:a7:0b:2c:d7:57:2c:85:65:89:4c:ca:ba: 5f:c3:f6:90:99:a7:d0:c4:6f:da:9d:d9:03:10:96: d9:cc:db:37:41:ed:c5:3c:31:66:b2:44:ce:36:ea: b4:55:90:3e:e9:17:d8:7b:68:d2:69:cf:7e:cf:8e: e0:e6:eb:53:99:a8:77:fa:c3:ec:c3:d0:54:88:c7: 1e:d8:8f:c9:79:4f:00:67:d1:81:ee:62:e2:89:e2: ce:9e:c7:17:87:8d:0a:95:20:4e:39:94:74:26:72: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B1:0C:97:19:41:D5:33:44:02:FF:90:B1:9D:94:5A:1B:D0:FD:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/23799b97-c2fe-31d2-921b-6e5abcbece3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:48:6a:45:05:24:21:61:cc:0f:8d:d6:1b:3b:12:d0:cc:48: c4:43:55:ab:8b:b1:a9:a8:b0:19:10:d1:b6:f1:f2:0c:04:c3: 11:fa:a6:b6:a4:9f:8d:5e:6c:e1:08:e0:45:ba:10:fe:70:46: 22:e0:10:d9:ee:60:cc:4d:04:4a:65:13:92:ac:d4:fc:f2:66: a9:a2:3e:cd:51:c4:06:50:73:aa:b2:e9:a6:ea:64:42:19:e1: ba:30:17:07:a3:93:10:44:dc:a0:13:0c:3a:07:d8:83:bb:c5: 77:a1:d5:33:e9:81:92:43:8e:c6:34:d0:5d:ad:e8:d2:30:e6: 17:b9:3d:da:19:5c:ff:9a:32:5e:a0:88:f8:f4:0a:a7:7b:3b: 08:37:a9:2b:c3:f3:ea:d7:47:87:0a:df:12:18:92:58:4f:1d: 83:1d:68:5e:f4:3c:ab:3a:45:b0:b3:90:a9:98:60:83:f4:7a: a1:9c:a4:8b:05:93:18:c4:31:cc:7f:04:1e:76:f0:de:c6:01: 8e:4c:f1:41:45:c5:1a:ee:a1:4b:89:cf:64:d1:86:75:74:6d: 3b:bf:8a:d3:33:e5:a5:fa:5a:87:b5:a3:35:83:01:aa:03:52: fe:69:ce:5c:48:50:68:69:90:66:a4:c3:f1:7d:64:4d:9e:77: 80:fb:d0:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1GTkMDDed0gu0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk MWU4ZTA2MTEtNzVjMC00MTJlLThlMjgtNDkwN2RhODU1ZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAbX9kKnmAlgHl/LzUjM/cWuxrRc2SXRw1H8 FnIREw/UNziPdLIxAahOQ1QLDPvtYzDix8KKUX/wq4EzKxn/VPSKMO1iBAg7V0WZ HXvq7wuTM8RtDmJ1VG68xJbtolKzafujYJtO/PIXGxHh0cuVux2DnHAqY4xjVuZr 4fN9btrdDIJH/LW1j9b0zeNRo0QnGREU6UV3yBmnCyzXVyyFZYlMyrpfw/aQmafQ xG/andkDEJbZzNs3Qe3FPDFmskTONuq0VZA+6RfYe2jSac9+z47g5utTmah3+sPs w9BUiMce2I/JeU8AZ9GB7mLiieLOnscXh40KlSBOOZR0JnLu8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOxDJcZQdUzRAL/kLGdlFob0P28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMjM3OTliOTctYzJmZS0z MWQyLTkyMWItNmU1YWJjYmVjZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBIakUFJCFhzA+N1hs7EtDMSMRDVauLsamosBkQ0bbx8gwEwxH6prak n41ebOEI4EW6EP5wRiLgENnuYMxNBEplE5Ks1PzyZqmiPs1RxAZQc6qy6abqZEIZ 4bowFwejkxBE3KATDDoH2IO7xXeh1TPpgZJDjsY00F2t6NIw5he5PdoZXP+aMl6g iPj0Cqd7Owg3qSvD8+rXR4cK3xIYklhPHYMdaF70PKs6RbCzkKmYYIP0eqGcpIsF kxjEMcx/BB528N7GAY5M8UFFxRruoUuJz2TRhnV0bTu/itMz5aX6Woe1ozWDAaoD Uv5pzlxIUGhpkGakw/F9ZE2ed4D70Ls= -----END CERTIFICATE-----Generated at Sun Jul 19 23:05:55 2026 by rpki-client