$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5db238c6-1721-36ea-b230-33bd44e6a0b5.roa File: 5db238c6-1721-36ea-b230-33bd44e6a0b5.roa (raw, json) Hash identifier: VLrw9lBi2py2/FHdyHtYZCGQFbFVssVDo+glG1Y4Qao= Subject key identifier: 64:25:E1:5C:98:CA:5C:80:D3:2B:E6:F4:B5:1C:05:F0:17:82:9A:B0 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584EFF77711739B0595B972A8900 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5db238c6-1721-36ea-b230-33bd44e6a0b5.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 8987 IP address blocks: 130.137.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:71:17:39:b0:59:5b:97:2a:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=270d09e2-a3eb-4a7e-9152-6c3a20dc8e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fe:e4:fd:8e:b5:bc:09:56:2c:aa:53:27:79: 29:a6:3c:39:c7:fd:c2:b4:17:ef:74:85:14:df:b8: d4:2b:78:33:4d:da:c8:fe:3c:7e:0a:5c:e2:e0:e7: 79:54:2a:76:4e:76:08:dc:e4:7b:60:af:05:bc:11: 13:ff:8c:ce:3d:83:a4:b6:46:3f:99:2f:f9:5b:2b: 62:ef:29:d1:81:10:3c:3e:9d:32:58:b1:70:6d:59: 9f:fc:55:68:20:ad:ac:fa:c3:62:58:36:af:33:00: 81:5d:60:7d:2b:9b:30:38:ab:16:b8:c4:2b:c3:4a: c4:f2:c6:b2:b5:f9:59:71:c8:ae:a0:d0:10:48:4c: c7:e0:93:5c:9b:38:8d:5e:7d:34:88:30:17:61:06: 22:53:ae:f6:a2:9c:0e:fd:00:ce:67:bf:45:7a:77: 51:91:6e:27:f3:1a:3c:21:24:f7:cb:2b:51:7c:3d: 34:04:a0:f8:87:79:22:37:e9:13:da:84:b1:04:39: ce:bd:34:d5:e7:76:2d:88:ed:f9:b6:99:b2:78:a8: 78:22:a1:66:9c:c4:ab:8a:d0:0c:ed:0d:d2:5c:6a: 48:5d:49:c1:c4:40:60:36:7c:1f:a0:b3:f3:d9:41: df:e5:57:3e:1e:af:ad:69:98:8b:c4:5f:12:42:f6: 24:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:25:E1:5C:98:CA:5C:80:D3:2B:E6:F4:B5:1C:05:F0:17:82:9A:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5db238c6-1721-36ea-b230-33bd44e6a0b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:11:b1:2e:e2:b7:4b:1e:de:66:b8:f7:e5:52:f6:c5:69:e7: 56:8b:d8:15:a0:10:93:03:77:bf:21:a1:e5:e4:f3:bd:e9:26: cc:2f:fc:b7:84:ed:60:16:0a:26:77:f4:78:2c:5e:a2:74:d5: 44:f3:00:fb:49:8e:b9:9d:e9:59:81:b7:16:1e:1f:c5:83:4b: d5:50:a3:94:48:59:40:70:99:c3:9f:36:1a:35:da:a6:c7:0c: 27:e5:cc:8a:cc:d9:25:52:2d:74:f8:db:73:d3:19:9f:80:41: 21:85:06:e6:be:37:62:34:9b:61:26:d7:95:35:ea:fc:dc:82: 27:32:6b:ca:2d:66:b9:7f:82:2a:96:33:2d:cc:2c:7b:23:b6: 59:6c:96:e5:34:c0:b2:4e:ec:20:05:68:ea:7a:28:99:d6:76: 66:54:48:b7:5e:16:b8:e5:46:87:db:bf:33:38:a7:a1:cb:5a: 12:4e:db:a0:2a:e5:b1:50:e5:6a:79:84:e7:7b:ac:68:43:44: a2:84:dc:ac:7d:cf:86:c3:01:44:d7:3a:69:2d:61:97:b7:63: 00:52:c3:63:90:d7:f9:5d:14:99:91:e7:c8:54:e0:6d:67:1e: ae:da:7b:c4:e5:26:45:4e:d5:85:eb:f6:13:42:72:46:a0:02: b7:69:60:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3EXObBZW5cqiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk MjcwZDA5ZTItYTNlYi00YTdlLTkxNTItNmMzYTIwZGM4ZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/7k/Y61vAlWLKpTJ3kppjw5x/3CtBfvdIUU 37jUK3gzTdrI/jx+Clzi4Od5VCp2TnYI3OR7YK8FvBET/4zOPYOktkY/mS/5Wyti 7ynRgRA8Pp0yWLFwbVmf/FVoIK2s+sNiWDavMwCBXWB9K5swOKsWuMQrw0rE8say tflZcciuoNAQSEzH4JNcmziNXn00iDAXYQYiU672opwO/QDOZ79FendRkW4n8xo8 IST3yytRfD00BKD4h3kiN+kT2oSxBDnOvTTV53YtiO35tpmyeKh4IqFmnMSritAM 7Q3SXGpIXUnBxEBgNnwfoLPz2UHf5Vc+Hq+taZiLxF8SQvYkMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQl4VyYylyA0yvm9LUcBfAXgpqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWRiMjM4YzYtMTcyMS0z NmVhLWIyMzAtMzNiZDQ0ZTZhMGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQRsS7it0se3ma49+VS9sVp51aL2BWgEJMDd78hoeXk873pJswv/LeE 7WAWCiZ39HgsXqJ01UTzAPtJjrmd6VmBtxYeH8WDS9VQo5RIWUBwmcOfNho12qbH DCflzIrM2SVSLXT423PTGZ+AQSGFBua+N2I0m2Em15U16vzcgicya8otZrl/giqW My3MLHsjtllsluU0wLJO7CAFaOp6KJnWdmZUSLdeFrjlRofbvzM4p6HLWhJO26Aq 5bFQ5Wp5hOd7rGhDRKKE3Kx9z4bDAUTXOmktYZe3YwBSw2OQ1/ldFJmR58hU4G1n Hq7ae8TlJkVO1YXr9hNCckagArdpYKs= -----END CERTIFICATE-----Generated at Wed Sep 2 15:22:18 2026 by rpki-client