$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa File: 443a0997-c399-3ce3-a707-a3b7e8ec5700.roa (raw, json) Hash identifier: YxCBqQbhlGjBd+f9tQ1Cl4lgBuE6mRGOE9FKagmW2Gw= Subject key identifier: 50:91:C6:D8:4A:40:DE:2E:42:76:C1:3B:A2:7D:77:11:B1:79:CF:BD Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584E07008E00654FB94D5B416900 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 16509 IP address blocks: 130.137.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:8e:00:65:4f:b9:4d:5b:41:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=e3af381e-d43f-4de6-81a0-d78e0f930ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:61:d0:36:cc:a9:e9:3e:37:40:ae:a2:45: 8f:23:1e:70:e2:07:79:28:c2:31:a3:cb:d8:5c:01: f0:63:83:b1:ae:fe:54:da:31:85:2b:11:04:37:ec: d1:15:de:27:51:be:48:6b:40:89:16:b1:49:3e:cc: 38:d7:2b:26:76:59:b9:d7:90:b0:e2:a3:35:fb:67: c2:62:1b:dd:f6:bb:72:5c:e0:29:3f:eb:7f:a2:f6: 52:c4:de:cf:8b:af:38:ee:01:25:c1:54:63:86:8a: 3a:d2:cb:9c:07:d7:92:a2:74:c2:62:f4:e6:35:a4: d9:67:1c:93:0e:7e:3c:c3:2a:d3:1e:75:40:9f:03: 7e:2b:2d:65:cc:33:9e:6f:69:8e:7a:a6:78:5a:74: 92:e6:97:65:b5:05:b6:36:2e:88:77:03:b7:8b:31: 0f:2d:46:7b:39:d3:25:28:f2:2b:76:c2:2b:83:33: a3:f7:ed:68:72:ee:9c:11:8b:4f:46:d9:66:e5:01: a3:d5:b0:b5:48:f0:65:09:9c:9c:fa:e5:24:a3:d7: 06:21:9c:10:4c:f3:cf:9e:df:6c:1d:b6:7d:f0:4c: 22:fb:ce:33:68:29:5f:0d:df:41:9d:17:55:bc:13: 66:f5:ee:7e:68:7a:89:1e:0c:1b:a4:d1:1e:21:00: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:91:C6:D8:4A:40:DE:2E:42:76:C1:3B:A2:7D:77:11:B1:79:CF:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:7e:96:23:65:7a:d1:ba:b3:c8:62:b8:26:bf:57:96:07:e7: a8:cb:6f:27:cb:8c:22:cb:66:98:a2:b6:4f:9d:8a:81:23:0b: 74:28:8a:e3:c3:ca:a9:d5:01:94:d0:d8:38:67:c7:f3:5a:94: 69:b1:a6:fa:97:d1:78:12:38:39:dd:b0:a9:65:8b:f1:ec:54: 73:59:8c:77:e5:68:70:43:31:8b:4d:5c:1b:d6:f5:02:ac:56: b4:0f:09:de:2a:57:00:f3:39:17:01:f2:f3:80:7d:2c:81:e7: 13:48:82:25:4b:49:a3:6d:3d:f8:d9:3d:53:ac:fb:90:9b:aa: 67:28:e0:9d:01:9b:30:00:b2:40:82:93:bb:92:c8:29:20:3e: 22:21:16:14:8a:9f:b8:55:78:c9:b0:03:64:71:62:02:10:81: fc:99:2a:41:78:1e:9a:83:b0:6c:eb:fe:4a:87:36:30:0f:07: ea:58:94:2a:15:63:79:e1:94:90:6d:19:a4:4a:01:48:c9:f9: 0a:c5:67:62:44:3b:b7:b1:84:9f:01:bc:10:55:04:2a:7a:58: 56:77:fa:8e:53:25:c5:c7:d7:10:c4:b8:56:3c:d6:ba:b5:0f: 7d:35:4a:df:20:a9:d9:9f:14:54:ba:9a:a7:51:c1:15:05:76: 22:a4:4e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAI4AZU+5TVtBaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk ZTNhZjM4MWUtZDQzZi00ZGU2LTgxYTAtZDc4ZTBmOTMwZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK9h0DbMqek+N0CuokWPIx5w4gd5KMIxo8vY XAHwY4Oxrv5U2jGFKxEEN+zRFd4nUb5Ia0CJFrFJPsw41ysmdlm515Cw4qM1+2fC Yhvd9rtyXOApP+t/ovZSxN7Pi6847gElwVRjhoo60sucB9eSonTCYvTmNaTZZxyT Dn48wyrTHnVAnwN+Ky1lzDOeb2mOeqZ4WnSS5pdltQW2Ni6IdwO3izEPLUZ7OdMl KPIrdsIrgzOj9+1ocu6cEYtPRtlm5QGj1bC1SPBlCZyc+uUko9cGIZwQTPPPnt9s HbZ98Ewi+84zaClfDd9BnRdVvBNm9e5+aHqJHgwbpNEeIQBIdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCRxthKQN4uQnbBO6J9dxGxec+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDQzYTA5OTctYzM5OS0z Y2UzLWE3MDctYTNiN2U4ZWM1NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh+liNletG6s8hiuCa/V5YH56jLbyfLjCLLZpiitk+dioEjC3QoiuPD yqnVAZTQ2Dhnx/NalGmxpvqX0XgSODndsKlli/HsVHNZjHflaHBDMYtNXBvW9QKs VrQPCd4qVwDzORcB8vOAfSyB5xNIgiVLSaNtPfjZPVOs+5Cbqmco4J0BmzAAskCC k7uSyCkgPiIhFhSKn7hVeMmwA2RxYgIQgfyZKkF4HpqDsGzr/kqHNjAPB+pYlCoV Y3nhlJBtGaRKAUjJ+QrFZ2JEO7exhJ8BvBBVBCp6WFZ3+o5TJcXH1xDEuFY81rq1 D301St8gqdmfFFS6mqdRwRUFdiKkTkc= -----END CERTIFICATE-----Generated at Wed Jun 3 21:05:10 2026 by rpki-client