$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa File: 2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa (raw, json) Hash identifier: mMDz2RXK6XaOtxXm/4xrzDjMvzdJE05ufCeiy0brsv0= Subject key identifier: FB:B6:58:8B:1F:5E:B6:15:3D:4E:06:3A:1B:C4:0F:86:81:F2:2F:30 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584E6F3A26B3AC46DCB90717CA08 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 16509 IP address blocks: 130.137.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:26:b3:ac:46:dc:b9:07:17:ca:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=2ad6934b-e0ad-429b-ba51-112f956805ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0b:60:28:2b:ae:5e:2f:2d:bc:7e:b2:f6:df: 2c:20:fd:d0:1f:dd:9e:55:39:c8:5c:a1:b0:d6:fe: b1:38:b5:0e:1f:d0:24:69:94:aa:e9:b9:e9:d9:85: bd:dc:ae:7a:52:74:3a:b6:d6:a1:d4:bb:fd:ba:7c: f2:59:1c:c5:b4:a5:87:57:1e:60:7a:69:08:ac:d7: 82:7a:aa:25:bc:27:0f:3e:97:94:e7:ea:d8:bb:66: c3:15:bc:08:ac:8f:bf:b3:9c:93:2c:b6:2e:0a:aa: 2a:41:11:ba:a9:9b:2c:f0:f5:d2:24:a7:a4:07:79: 4c:04:11:a9:65:e0:b8:7d:cc:49:ca:37:20:12:f0: 6d:73:34:10:39:b1:1b:a1:41:7a:4f:44:49:bf:e0: c1:bf:56:f7:90:23:24:31:65:fe:9c:a4:b6:86:bc: 01:30:23:69:89:e7:56:a9:80:90:de:4f:2e:c6:5e: 4a:14:7d:52:5c:64:86:9b:bd:53:df:52:01:88:03: 9e:e8:58:91:3a:8e:11:f0:bb:39:3f:79:7b:fa:fb: 1a:ac:ae:b7:7c:c3:fc:66:ee:d5:e5:f2:0b:4a:f8: 8c:47:1d:40:d3:17:a1:c6:ca:44:7b:e7:b2:56:62: b9:c9:86:3c:cd:b1:5c:b2:cf:4d:e6:de:df:0b:32: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B6:58:8B:1F:5E:B6:15:3D:4E:06:3A:1B:C4:0F:86:81:F2:2F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a4ab7a0-25a9-3379-8e3e-6adcc4033f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ae:82:52:da:ad:d7:a1:91:29:fc:fb:e3:70:80:bf:f3:83: a3:6e:05:df:52:06:12:05:52:28:d3:2e:55:17:be:09:e1:91: 81:81:86:2d:74:eb:02:7e:21:75:4a:c9:68:57:89:dc:95:c9: de:1c:63:86:d5:fd:8f:cf:fa:78:87:73:b0:b7:df:03:10:27: 71:6f:a4:ab:59:ab:c9:07:4b:a6:df:d2:fb:df:55:28:f2:05: 9b:9e:50:c7:8d:00:14:57:5e:c2:b4:1f:ce:ed:7b:8d:8d:fb: b9:10:f9:48:6b:be:03:09:5d:29:e6:c9:35:29:b3:4c:72:ce: e1:33:32:2c:2f:3b:44:ab:5f:b1:d3:08:fc:ed:b3:80:25:e7: 2f:8f:99:35:6e:ae:6b:09:5a:e1:d4:b8:38:85:66:df:bf:2b: 1f:a9:69:c6:4c:ff:bd:0c:b2:eb:01:82:b7:00:0f:f6:f5:09: d0:12:90:29:d1:10:21:24:33:fb:bd:85:74:00:4d:58:3f:d4: 3b:bd:82:97:dc:ec:e2:4d:92:84:ea:84:4b:38:e1:43:f8:f0: 2f:f3:eb:ce:cf:64:d0:cc:74:f0:46:da:30:cc:07:c7:68:43: 5f:71:bb:65:0e:9c:ac:6a:26:9a:bb:fa:f4:9e:c8:43:86:a6: 75:b5:28:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOiazrEbcuQcXyggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MmFkNjkzNGItZTBhZC00MjliLWJhNTEtMTEyZjk1NjgwNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgtgKCuuXi8tvH6y9t8sIP3QH92eVTnIXKGw 1v6xOLUOH9AkaZSq6bnp2YW93K56UnQ6ttah1Lv9unzyWRzFtKWHVx5gemkIrNeC eqolvCcPPpeU5+rYu2bDFbwIrI+/s5yTLLYuCqoqQRG6qZss8PXSJKekB3lMBBGp ZeC4fcxJyjcgEvBtczQQObEboUF6T0RJv+DBv1b3kCMkMWX+nKS2hrwBMCNpiedW qYCQ3k8uxl5KFH1SXGSGm71T31IBiAOe6FiROo4R8Ls5P3l7+vsarK63fMP8Zu7V 5fILSviMRx1A0xehxspEe+eyVmK5yYY8zbFcss9N5t7fCzLhEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPu2WIsfXrYVPU4GOhvED4aB8i8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmE0YWI3YTAtMjVhOS0z Mzc5LThlM2UtNmFkY2M0MDMzZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2uglLardehkSn8++NwgL/zg6NuBd9SBhIFUijTLlUXvgnhkYGBhi10 6wJ+IXVKyWhXidyVyd4cY4bV/Y/P+niHc7C33wMQJ3FvpKtZq8kHS6bf0vvfVSjy BZueUMeNABRXXsK0H87te42N+7kQ+UhrvgMJXSnmyTUps0xyzuEzMiwvO0SrX7HT CPzts4Al5y+PmTVurmsJWuHUuDiFZt+/Kx+pacZM/70MsusBgrcAD/b1CdASkCnR ECEkM/u9hXQATVg/1Du9gpfc7OJNkoTqhEs44UP48C/z687PZNDMdPBG2jDMB8do Q19xu2UOnKxqJpq7+vSeyEOGpnW1KFg= -----END CERTIFICATE-----Generated at Sun Jul 19 22:15:00 2026 by rpki-client