$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/306f9268-1bc8-3bfc-b5b9-7f7e23ece289.roa File: 306f9268-1bc8-3bfc-b5b9-7f7e23ece289.roa (raw, json) Hash identifier: /2T78KQIeBDxz+ebSJFn/MdnCSMpRxzaAnlP/uo17P4= Subject key identifier: 9B:67:4A:73:A1:F5:9F:06:0E:51:FC:7E:EA:9A:37:76:39:EB:78:50 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584E5D14A2702882ADCEDA5229F0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/306f9268-1bc8-3bfc-b5b9-7f7e23ece289.roa Signing time: Thu 02 Jul 2026 09:00:12 +0000 ROA not before: Thu 02 Jul 2026 09:00:12 +0000 ROA not after: Wed 30 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 130.137.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:14:a2:70:28:82:ad:ce:da:52:29:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 2 09:00:12 2026 GMT Not After : Sep 30 09:00:12 2026 GMT Subject: CN=c0b591f6-1c77-43a6-b9a1-06a1d4a1f444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:09:45:36:98:7d:fe:6b:ec:4a:09:92:96:5d: 59:37:56:7e:9d:da:e9:e2:36:bf:d4:b7:c8:53:59: 6c:a5:91:6a:23:44:41:7b:5b:43:ed:cb:2a:6f:0d: 85:cd:f0:de:8c:d4:ec:ec:2b:f2:52:93:e6:69:27: 7d:91:6b:be:5e:98:74:71:6f:b4:08:b1:27:f4:2c: a7:46:d4:9a:fa:51:58:54:dd:6d:ff:ec:db:f0:e5: 31:5a:b4:a1:46:b1:aa:8e:36:6e:dc:c6:55:8f:00: 42:0c:4c:b6:c3:d7:42:3c:96:c9:af:dd:09:da:8e: 53:fc:57:0c:ba:fc:20:1b:fc:b7:47:dc:b4:e2:57: 01:59:f1:36:a9:ab:45:9d:95:5f:4c:b0:ac:cf:34: 6c:aa:b1:ed:24:e5:96:02:f7:b3:c0:18:9d:e9:63: e0:5c:17:92:db:57:f7:78:94:11:bd:8d:a1:ba:02: 66:57:2e:92:c5:18:b6:80:97:56:d5:7b:1c:24:ea: e3:00:46:30:aa:a6:7d:70:a8:a6:d6:37:df:be:37: 06:fb:2d:04:16:b3:0e:ba:d3:f0:dd:23:b9:6e:65: e3:8a:74:b5:03:26:07:1c:c7:55:a0:2c:4d:96:e9: 8d:70:04:12:31:ec:1a:4f:f2:f3:a7:5b:2e:35:c3: 1e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:67:4A:73:A1:F5:9F:06:0E:51:FC:7E:EA:9A:37:76:39:EB:78:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/306f9268-1bc8-3bfc-b5b9-7f7e23ece289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:83:ee:0a:93:56:d6:4d:10:ed:b8:49:03:67:80:48:1b:7e: 0e:fd:f4:20:46:d5:6f:2c:23:2c:d0:e8:ed:51:aa:4f:84:e6: a0:cb:c2:c2:2b:62:52:d8:0b:a6:00:0b:d4:eb:8d:10:be:c7: f9:08:c1:50:15:93:07:f7:99:1d:df:8a:aa:45:65:54:47:b9: b7:fa:5d:3b:36:66:28:04:bc:43:d7:e3:31:b3:9a:f5:94:41: fe:b0:36:64:52:0b:df:c8:b4:a5:c4:b0:ad:00:d6:61:fa:79: a2:2f:28:81:af:93:07:d2:83:ba:9e:2c:c9:96:68:01:18:80: 60:b4:b0:06:ec:3a:71:2a:0e:59:31:d1:bb:c7:f6:22:77:c3: 77:e2:c6:a1:ca:5a:c0:ee:ba:ad:a1:2a:6d:3c:bd:fa:d7:e8: 46:a7:cb:90:ba:b0:46:d2:fd:26:6f:b6:9e:af:86:ec:28:9b: 9c:76:26:45:e2:92:02:50:72:17:d4:a0:c9:49:1b:c7:b6:0b: c9:b0:19:93:72:9f:03:96:30:2f:15:c5:36:65:25:13:26:2d: df:2a:ce:3e:6b:4d:5c:09:3c:11:68:4c:c0:0f:c9:ab:6c:1d: f9:b2:3f:de:d7:a3:66:4a:b6:f5:8b:6d:2a:b2:db:d1:a7:bc: 9a:54:13:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFKJwKIKtztpSKfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk YzBiNTkxZjYtMWM3Ny00M2E2LWI5YTEtMDZhMWQ0YTFmNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wlFNph9/mvsSgmSll1ZN1Z+ndrp4ja/1LfI U1lspZFqI0RBe1tD7csqbw2FzfDejNTs7CvyUpPmaSd9kWu+Xph0cW+0CLEn9Cyn RtSa+lFYVN1t/+zb8OUxWrShRrGqjjZu3MZVjwBCDEy2w9dCPJbJr90J2o5T/FcM uvwgG/y3R9y04lcBWfE2qatFnZVfTLCszzRsqrHtJOWWAvezwBid6WPgXBeS21f3 eJQRvY2hugJmVy6SxRi2gJdW1XscJOrjAEYwqqZ9cKim1jffvjcG+y0EFrMOutPw 3SO5bmXjinS1AyYHHMdVoCxNlumNcAQSMewaT/Lzp1suNcMefwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtnSnOh9Z8GDlH8fuqaN3Y563hQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMzA2ZjkyNjgtMWJjOC0z YmZjLWI1YjktN2Y3ZTIzZWNlMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgombMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuD7gqTVtZNEO24SQNngEgbfg799CBG1W8sIyzQ6O1Rqk+E5qDLwsIr YlLYC6YAC9TrjRC+x/kIwVAVkwf3mR3fiqpFZVRHubf6XTs2ZigEvEPX4zGzmvWU Qf6wNmRSC9/ItKXEsK0A1mH6eaIvKIGvkwfSg7qeLMmWaAEYgGC0sAbsOnEqDlkx 0bvH9iJ3w3fixqHKWsDuuq2hKm08vfrX6Eany5C6sEbS/SZvtp6vhuwom5x2JkXi kgJQchfUoMlJG8e2C8mwGZNynwOWMC8VxTZlJRMmLd8qzj5rTVwJPBFoTMAPyats HfmyP97Xo2ZKtvWLbSqy29GnvJpUE6w= -----END CERTIFICATE-----Generated at Sun Jul 19 22:14:50 2026 by rpki-client