$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4c1b1ce2-4371-3a4b-abfe-684fa7833e65.roa File: 4c1b1ce2-4371-3a4b-abfe-684fa7833e65.roa (raw, json) Hash identifier: spdpRvAqvIKczgtlnoiQBf4yoDgNGKpivZkqfeZ5sTo= Subject key identifier: A6:C8:46:25:CB:4A:B7:10:6F:2C:B7:96:86:41:67:55:2B:AA:A6:F7 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F6F22DDD940BF7141242F7F80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4c1b1ce2-4371-3a4b-abfe-684fa7833e65.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 130.137.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:dd:d9:40:bf:71:41:24:2f:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=cd7bd073-ec2e-4bca-a90f-54188918c6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ec:ea:8c:3c:96:a6:a9:b9:85:31:2b:af:f7: 2a:33:cb:52:62:db:ea:bd:34:c7:c5:6e:5d:cd:26: 59:89:54:96:d1:62:11:73:24:fb:45:2b:d7:e9:3e: 97:60:4a:59:72:81:61:e0:3d:86:de:0a:9b:91:e6: bb:6b:73:5b:85:fc:f0:6d:74:ea:ec:79:a7:b2:90: 5e:5e:26:c0:f7:43:29:65:c2:df:19:6d:ed:81:1b: 1b:82:dd:a1:03:ee:b8:40:99:1d:fa:30:53:ec:65: e5:84:44:5c:ca:98:05:74:b2:d6:77:ba:b1:26:60: 6d:3f:ec:26:93:18:09:59:66:cb:9a:e3:3c:ad:40: f0:c7:d5:95:b0:b1:c8:c0:1c:89:be:a2:bd:7f:b8: ff:f2:58:98:6d:93:8e:99:20:35:ae:eb:d7:46:23: 6f:ac:e3:77:d2:1e:37:9c:8b:1e:9c:33:c7:35:bc: 06:08:ad:bc:a1:e5:40:60:6b:25:b7:3e:dc:f5:33: 83:68:df:dc:70:a3:cb:dc:8a:ff:32:7e:d1:2a:37: 83:08:fa:7b:e0:49:27:ac:09:c1:4c:13:1b:1a:e3: 9f:15:3f:4d:94:09:22:1f:6f:c1:1a:c5:0e:bc:4c: 00:64:22:85:93:51:18:fa:38:46:78:1b:64:02:61: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C8:46:25:CB:4A:B7:10:6F:2C:B7:96:86:41:67:55:2B:AA:A6:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4c1b1ce2-4371-3a4b-abfe-684fa7833e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:8b:c4:99:85:89:50:46:43:55:9c:a3:40:32:32:b9:8e:97: 32:27:7c:e5:d5:1c:63:74:3f:ad:f3:5a:1a:e4:13:51:d8:27: 81:df:0d:40:c4:88:c1:2a:1c:3f:60:70:cf:47:f2:5f:57:4e: 79:03:72:4c:89:11:33:9b:81:0c:d7:60:bc:32:c9:c8:dd:7a: e5:47:29:f2:33:77:a6:0d:ac:a5:80:01:27:74:d6:3c:1b:b7: 84:e6:c4:a9:3e:aa:67:fb:9b:30:ad:89:b4:47:ee:24:d7:a8: 47:76:46:81:18:2d:8a:35:48:92:df:22:e0:46:6c:62:33:92: 4d:f8:bf:be:96:51:90:8f:2b:5f:14:aa:98:8c:07:3a:ed:99: 98:3a:58:2f:b9:df:c1:86:5d:cd:8a:0b:70:a0:0e:03:3a:ae: ec:b1:89:f9:93:45:e2:45:4d:c7:8b:02:08:f3:2a:b1:48:55: 33:6c:b1:a2:65:07:6c:91:29:e4:68:af:46:89:28:11:02:57: 53:3e:c6:6a:3f:85:c5:0f:c1:59:38:46:0c:0c:72:61:da:9e: 7f:12:22:35:62:e9:08:b8:44:12:47:1b:ff:93:d3:49:64:13: d9:96:3d:0b:d2:28:59:2b:78:c1:77:8f:f2:b5:a6:12:2c:ed: a4:89:5c:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIt3ZQL9xQSQvf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2Q3YmQwNzMtZWMyZS00YmNhLWE5MGYtNTQxODg5MThjNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguzqjDyWpqm5hTErr/cqM8tSYtvqvTTHxW5d zSZZiVSW0WIRcyT7RSvX6T6XYEpZcoFh4D2G3gqbkea7a3NbhfzwbXTq7HmnspBe XibA90MpZcLfGW3tgRsbgt2hA+64QJkd+jBT7GXlhERcypgFdLLWd7qxJmBtP+wm kxgJWWbLmuM8rUDwx9WVsLHIwByJvqK9f7j/8liYbZOOmSA1ruvXRiNvrON30h43 nIsenDPHNbwGCK28oeVAYGsltz7c9TODaN/ccKPL3Ir/Mn7RKjeDCPp74EknrAnB TBMbGuOfFT9NlAkiH2/BGsUOvEwAZCKFk1EY+jhGeBtkAmFVNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbIRiXLSrcQbyy3loZBZ1Urqqb3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNGMxYjFjZTItNDM3MS0z YTRiLWFiZmUtNjg0ZmE3ODMzZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOLxJmFiVBGQ1Wco0AyMrmOlzInfOXVHGN0P63zWhrkE1HYJ4HfDUDE iMEqHD9gcM9H8l9XTnkDckyJETObgQzXYLwyycjdeuVHKfIzd6YNrKWAASd01jwb t4TmxKk+qmf7mzCtibRH7iTXqEd2RoEYLYo1SJLfIuBGbGIzkk34v76WUZCPK18U qpiMBzrtmZg6WC+538GGXc2KC3CgDgM6ruyxifmTReJFTceLAgjzKrFIVTNssaJl B2yRKeRor0aJKBECV1M+xmo/hcUPwVk4RgwMcmHann8SIjVi6Qi4RBJHG/+T00lk E9mWPQvSKFkreMF3j/K1phIs7aSJXMc= -----END CERTIFICATE-----Generated at Tue Oct 20 02:56:52 2026 by rpki-client