$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7f4d4070-b2c7-3170-af46-f18fdbb8a84d.roa File: 7f4d4070-b2c7-3170-af46-f18fdbb8a84d.roa (raw, json) Hash identifier: CfOHziVjadxTN3uyOwy9CMyT4f2iQF6roXVJJ7HgUkU= Subject key identifier: 44:4D:E6:0D:CD:AC:A0:55:D5:09:6B:03:12:D5:2D:41:9E:DA:E8:22 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584E5D14A3DFB4989AC82AC2EB20 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7f4d4070-b2c7-3170-af46-f18fdbb8a84d.roa Signing time: Thu 02 Jul 2026 09:00:12 +0000 ROA not before: Thu 02 Jul 2026 09:00:12 +0000 ROA not after: Wed 30 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 130.137.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:14:a3:df:b4:98:9a:c8:2a:c2:eb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 2 09:00:12 2026 GMT Not After : Sep 30 09:00:12 2026 GMT Subject: CN=e4130469-97e4-480c-a74b-bf73fb7050fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:09:b7:08:d0:18:f8:59:40:e0:d6:21:61:f6: 6d:68:2b:16:56:b3:7b:90:fd:2d:4f:93:56:b0:29: e3:da:e2:de:b3:e7:f7:26:25:d5:24:a1:b6:32:40: d6:94:50:4f:e7:01:72:b9:89:88:88:c0:1f:d7:f8: d7:71:2d:9d:d4:f1:3e:31:25:4a:7d:f3:74:b1:6e: 3e:2c:40:fe:3c:51:b3:07:0a:34:75:2c:a0:d2:9e: d8:2c:f6:f4:d8:12:5e:3a:3a:96:60:fd:e3:a8:cc: e6:d9:19:cf:c2:5a:65:b6:36:5d:49:38:1a:9d:7e: b7:cb:e2:30:4c:89:bd:dd:93:b8:55:b2:94:d6:02: ea:30:7e:4b:cf:03:23:03:87:74:6a:a9:69:e9:84: f1:62:2e:ba:a5:78:1e:b8:fa:bc:7a:f9:b8:d3:45: eb:b4:c1:3c:24:0d:69:b9:c8:81:7e:92:59:3c:03: 07:92:fb:66:cc:41:a3:62:09:99:a4:4d:d4:76:f3: e3:03:3f:9c:0c:a4:f5:98:4d:24:5d:97:4e:9f:31: 41:5b:82:19:d6:40:68:5b:45:59:d8:f3:fe:2e:7b: 80:29:73:9c:d9:c0:eb:55:7c:c6:98:01:a0:52:0f: d2:de:02:f4:73:81:29:9a:c0:bd:2d:8b:6d:d1:ac: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4D:E6:0D:CD:AC:A0:55:D5:09:6B:03:12:D5:2D:41:9E:DA:E8:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7f4d4070-b2c7-3170-af46-f18fdbb8a84d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e8:c1:c2:f4:6c:93:03:a2:51:19:2b:3c:53:eb:f1:7e:fc: 45:c1:0a:e6:c6:a8:c5:e0:74:4d:b2:4a:bf:97:16:ed:1d:98: 30:5f:1e:68:f7:83:1b:bc:b6:ac:b9:78:77:db:6d:d0:c4:39: a9:4f:96:ca:1a:c5:b9:7c:b6:0d:7f:54:6d:46:33:81:ce:c9: a6:6d:47:bc:f1:68:aa:7a:54:ab:f5:57:56:02:ba:db:18:21: b8:45:75:6b:b7:48:c7:26:bb:5f:fc:7f:4e:3b:53:c8:1b:3e: 61:cc:61:43:79:3e:ae:65:67:22:24:b7:2b:8d:14:bf:59:35: 01:25:de:40:18:39:73:c9:22:b6:32:53:f6:55:7e:d6:96:e4: c6:fe:0d:ed:d4:c3:ee:f0:0e:1a:08:0b:ea:97:f1:fc:95:66: c3:69:73:02:08:fe:8e:71:a9:0a:d2:f1:51:2d:4a:db:52:7a: 90:ea:1b:80:23:6f:96:09:c6:d7:02:2a:8c:f4:da:77:af:50: 92:03:2b:0e:76:7e:58:ea:78:ef:26:82:a0:d8:27:87:a8:20: 6e:c2:d8:85:2c:1c:97:47:38:f0:49:35:a9:74:03:88:e4:c5: 0a:43:21:d7:79:79:d9:df:39:87:a4:6c:60:67:9d:cc:fc:75: b0:d1:7b:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFKPftJiayCrC6yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk ZTQxMzA0NjktOTdlNC00ODBjLWE3NGItYmY3M2ZiNzA1MGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQm3CNAY+FlA4NYhYfZtaCsWVrN7kP0tT5NW sCnj2uLes+f3JiXVJKG2MkDWlFBP5wFyuYmIiMAf1/jXcS2d1PE+MSVKffN0sW4+ LED+PFGzBwo0dSyg0p7YLPb02BJeOjqWYP3jqMzm2RnPwlpltjZdSTganX63y+Iw TIm93ZO4VbKU1gLqMH5LzwMjA4d0aqlp6YTxYi66pXgeuPq8evm400XrtME8JA1p uciBfpJZPAMHkvtmzEGjYgmZpE3UdvPjAz+cDKT1mE0kXZdOnzFBW4IZ1kBoW0VZ 2PP+LnuAKXOc2cDrVXzGmAGgUg/S3gL0c4EpmsC9LYtt0aw0UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERN5g3NrKBV1QlrAxLVLUGe2ugiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvN2Y0ZDQwNzAtYjJjNy0z MTcwLWFmNDYtZjE4ZmRiYjhhODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPowcL0bJMDolEZKzxT6/F+/EXBCubGqMXgdE2ySr+XFu0dmDBfHmj3 gxu8tqy5eHfbbdDEOalPlsoaxbl8tg1/VG1GM4HOyaZtR7zxaKp6VKv1V1YCutsY IbhFdWu3SMcmu1/8f047U8gbPmHMYUN5Pq5lZyIktyuNFL9ZNQEl3kAYOXPJIrYy U/ZVftaW5Mb+De3Uw+7wDhoIC+qX8fyVZsNpcwII/o5xqQrS8VEtSttSepDqG4Aj b5YJxtcCKoz02nevUJIDKw52fljqeO8mgqDYJ4eoIG7C2IUsHJdHOPBJNal0A4jk xQpDIdd5ednfOYekbGBnncz8dbDRe80= -----END CERTIFICATE-----Generated at Sun Jul 19 22:15:45 2026 by rpki-client