$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa File: 42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa (raw, json) Hash identifier: ZzZVJxPtQ+qBaotlNU9RX4du1V5p1ErkxCwYEu1owi0= Subject key identifier: 64:1E:90:1E:54:65:AA:7B:00:D3:CB:4C:37:30:03:8F:A2:09:50:FF Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584D8AC5368C3C81785AC0AB8CA0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 130.137.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:36:8c:3c:81:78:5a:c0:ab:8c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=256b57ae-7549-451c-a43a-c879403485ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:80:98:4f:be:51:61:78:c4:55:4b:db:68:4f: 41:80:da:5b:68:ca:67:1b:06:bd:46:e7:49:38:63: fe:e2:2f:20:a7:b5:3f:30:7d:94:08:f6:9e:fa:48: 23:2f:00:f7:f3:22:02:6a:f8:3c:00:8c:c9:39:4e: 98:fc:90:f6:fe:f2:17:a8:dc:1d:21:59:00:db:4d: 04:a8:e3:c8:72:8f:f9:a3:53:1a:c3:0f:4d:a8:b9: fc:99:40:e2:80:99:27:77:ff:47:75:b9:aa:da:6d: 86:81:6d:e3:31:0b:28:79:6b:8b:e0:7d:dc:4d:a0: d4:a6:a0:b9:e5:a3:ad:20:bd:c2:cc:0f:3d:a1:66: 91:eb:1a:93:85:70:c0:41:5f:09:39:fe:99:f6:43: 26:48:5b:bd:85:37:57:fa:93:7f:e7:3a:ee:dc:18: 4c:a8:d8:42:90:71:f5:42:df:45:5d:ab:89:f2:5a: 9b:a5:f8:f9:cf:d2:96:78:0a:23:db:1b:e1:b3:b3: b4:a2:1d:93:88:ad:07:e9:01:2e:3e:18:d5:d1:cd: ad:80:3a:7f:56:02:3d:59:42:2a:bf:4d:e8:74:39: d0:5c:e2:4a:81:c9:05:cb:fd:fb:9c:4c:8d:23:01: 1e:45:48:3b:b3:c5:8f:be:c5:7e:e5:50:26:45:e8: 24:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1E:90:1E:54:65:AA:7B:00:D3:CB:4C:37:30:03:8F:A2:09:50:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ba:f1:d5:f5:48:d7:46:2b:f3:79:e2:9c:3e:b3:85:eb:66: 17:a3:1f:8e:13:c6:bf:73:42:a6:1c:f6:24:6e:fa:01:f4:7a: c3:2b:6c:ef:e7:56:5a:90:4c:48:22:d3:4a:b6:9e:1f:7f:d4: 66:b4:a2:7d:d1:1c:ee:63:af:83:57:22:8a:89:72:31:25:d1: d1:df:47:6b:00:df:51:4d:14:28:84:b4:2d:1a:f8:db:a6:c6: ea:7e:16:92:65:03:57:f5:58:26:82:4e:02:1e:fc:be:c4:4e: 18:ca:6c:b0:7f:15:a8:16:3e:7d:8a:0a:99:de:23:eb:9c:d6: 0a:19:84:c4:7a:ae:38:34:2d:a2:21:3c:9f:22:cb:5d:f1:7f: e2:0f:b3:87:f1:09:72:62:44:26:7f:49:09:c3:4e:e8:ff:c1: 29:eb:23:ad:fd:d5:27:85:75:8b:2d:84:37:c4:bd:f8:2d:67: d7:92:d7:5d:88:f4:25:14:a1:79:a2:39:d9:32:26:b2:90:bc: 94:83:90:53:6c:a1:52:1e:2d:59:cf:8e:16:3c:25:1c:19:00: b7:1e:e3:aa:d1:9c:55:0c:da:6e:e1:75:4a:5f:29:7a:4d:fa: 4a:b1:c9:cc:d8:d5:19:21:51:36:a5:fc:9b:db:0d:d5:f9:3c: eb:59:4f:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTaMPIF4WsCrjKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MjU2YjU3YWUtNzU0OS00NTFjLWE0M2EtYzg3OTQwMzQ4NWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApICYT75RYXjEVUvbaE9BgNpbaMpnGwa9RudJ OGP+4i8gp7U/MH2UCPae+kgjLwD38yICavg8AIzJOU6Y/JD2/vIXqNwdIVkA200E qOPIco/5o1Maww9NqLn8mUDigJknd/9Hdbmq2m2GgW3jMQsoeWuL4H3cTaDUpqC5 5aOtIL3CzA89oWaR6xqThXDAQV8JOf6Z9kMmSFu9hTdX+pN/5zru3BhMqNhCkHH1 Qt9FXauJ8lqbpfj5z9KWeAoj2xvhs7O0oh2TiK0H6QEuPhjV0c2tgDp/VgI9WUIq v03odDnQXOJKgckFy/37nEyNIwEeRUg7s8WPvsV+5VAmRegkCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQekB5UZap7ANPLTDcwA4+iCVD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDI3MDhiY2UtNjY3My0z YzliLWEzYzYtNDhlZWFjMWUzYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu68dX1SNdGK/N54pw+s4XrZhejH44Txr9zQqYc9iRu+gH0esMrbO/n VlqQTEgi00q2nh9/1Ga0on3RHO5jr4NXIoqJcjEl0dHfR2sA31FNFCiEtC0a+Num xup+FpJlA1f1WCaCTgIe/L7EThjKbLB/FagWPn2KCpneI+uc1goZhMR6rjg0LaIh PJ8iy13xf+IPs4fxCXJiRCZ/SQnDTuj/wSnrI6391SeFdYsthDfEvfgtZ9eS112I 9CUUoXmiOdkyJrKQvJSDkFNsoVIeLVnPjhY8JRwZALce46rRnFUM2m7hdUpfKXpN +kqxyczY1RkhUTal/JvbDdX5POtZT38= -----END CERTIFICATE-----Generated at Sun Apr 19 03:25:51 2026 by rpki-client