$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8229664b-c17d-3ddf-b634-add360282bea.roa File: 8229664b-c17d-3ddf-b634-add360282bea.roa (raw, json) Hash identifier: 8Px6fBPNdHI4kS+xoSBS2TPBNYdA2Q8wGAsZ8iAEL58= Subject key identifier: 99:2A:8A:67:0D:A1:9B:C3:73:B4:D5:92:5D:56:94:96:D1:66:01:6D Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584FA5932C0F19E434AB00696400 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8229664b-c17d-3ddf-b634-add360282bea.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 8987 IP address blocks: 130.137.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:2c:0f:19:e4:34:ab:00:69:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=fd46e850-1ad9-4bdb-aff4-675822bef884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1d:42:98:5a:b7:bc:24:38:3c:8c:f5:89:7a: f4:5b:f5:25:4c:95:63:bf:dd:fb:f5:ce:0c:6a:14: 25:f9:01:d7:cc:32:75:3b:76:57:ad:bf:92:52:ae: 81:83:26:c4:c0:bf:ad:87:a1:53:80:98:96:74:d5: 3a:a3:1b:a8:95:8e:80:50:24:15:e0:e2:79:2c:32: 2c:be:fe:9d:7d:a2:2d:46:6a:ab:95:61:f4:55:b3: d6:7f:4f:ee:31:9f:e3:6c:ec:cd:17:40:97:b9:3e: 35:d1:b5:6b:1f:e0:db:1c:d2:a2:78:72:82:cc:68: 9c:53:9f:25:cb:44:e1:bd:bd:78:c3:75:87:72:6f: 5e:23:9c:5e:e4:ad:97:29:85:d4:19:c2:93:ca:c7: b0:ae:b4:e2:1e:36:0a:c3:35:69:be:ea:ab:02:d7: a7:3f:1f:55:e4:59:73:3c:4d:9d:80:ca:09:3c:dd: 82:ee:78:8d:f3:ec:51:73:6c:07:8b:b9:81:41:cf: 01:18:dc:0e:76:9a:73:5d:dd:58:af:0c:d9:da:3a: 88:4f:4f:a2:74:73:6c:81:b8:55:d7:67:14:38:85: 36:22:f7:c6:34:43:82:f3:c8:ac:a0:f0:de:d7:61: 81:25:ca:c9:e5:e7:32:7e:3e:fd:c6:33:24:51:37: 7f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2A:8A:67:0D:A1:9B:C3:73:B4:D5:92:5D:56:94:96:D1:66:01:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8229664b-c17d-3ddf-b634-add360282bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:2b:bf:3f:2a:37:ff:6a:10:4e:d8:48:b1:cc:6f:74:4e:08: 6a:1e:39:27:2a:48:ef:6d:0c:b0:8f:7b:13:7d:df:b7:ec:bf: 2a:18:39:e6:cc:90:aa:28:c7:44:ca:10:87:80:26:cd:56:19: 64:ba:89:48:2f:0b:d9:a0:77:08:60:2e:89:24:0c:60:d4:05: f0:0f:24:44:39:7e:d6:54:62:e1:a3:03:97:6c:ac:b3:50:fa: 92:9d:3f:e8:64:bb:66:c6:dd:f5:5e:03:ab:50:29:28:3b:73: 9c:86:70:d3:66:1f:19:1a:90:fb:82:ea:b6:4b:51:3f:b0:77: 5b:c1:26:1c:07:9a:42:d2:97:02:2b:75:83:34:9e:ff:c2:83: 43:87:f9:ae:0a:6c:b1:d3:ef:92:bd:01:17:3c:a1:d4:0a:07: ed:2a:29:9a:ab:14:9f:1d:77:bd:17:cc:a8:9e:05:1b:02:53: 77:a3:82:3a:d8:cf:d0:ac:aa:f4:3a:1b:de:02:08:1f:3a:21: b7:d0:82:47:84:35:2f:84:43:19:61:0b:f9:17:e8:1e:72:05: 7e:cf:3d:55:08:71:aa:20:5a:6b:c2:80:65:74:52:f0:1b:fa: 13:9a:c2:41:a6:ca:34:49:0a:f8:8c:e9:ea:77:3f:ee:e4:c2: d2:f1:7f:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+lkywPGeQ0qwBpZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk ZmQ0NmU4NTAtMWFkOS00YmRiLWFmZjQtNjc1ODIyYmVmODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph1CmFq3vCQ4PIz1iXr0W/UlTJVjv9379c4M ahQl+QHXzDJ1O3ZXrb+SUq6BgybEwL+th6FTgJiWdNU6oxuolY6AUCQV4OJ5LDIs vv6dfaItRmqrlWH0VbPWf0/uMZ/jbOzNF0CXuT410bVrH+DbHNKieHKCzGicU58l y0Thvb14w3WHcm9eI5xe5K2XKYXUGcKTysewrrTiHjYKwzVpvuqrAtenPx9V5Flz PE2dgMoJPN2C7niN8+xRc2wHi7mBQc8BGNwOdppzXd1YrwzZ2jqIT0+idHNsgbhV 12cUOIU2IvfGNEOC88isoPDe12GBJcrJ5ecyfj79xjMkUTd/fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkqimcNoZvDc7TVkl1WlJbRZgFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvODIyOTY2NGItYzE3ZC0z ZGRmLWI2MzQtYWRkMzYwMjgyYmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHErvz8qN/9qEE7YSLHMb3ROCGoeOScqSO9tDLCPexN937fsvyoYOebM kKoox0TKEIeAJs1WGWS6iUgvC9mgdwhgLokkDGDUBfAPJEQ5ftZUYuGjA5dsrLNQ +pKdP+hku2bG3fVeA6tQKSg7c5yGcNNmHxkakPuC6rZLUT+wd1vBJhwHmkLSlwIr dYM0nv/Cg0OH+a4KbLHT75K9ARc8odQKB+0qKZqrFJ8dd70XzKieBRsCU3ejgjrY z9CsqvQ6G94CCB86IbfQgkeENS+EQxlhC/kX6B5yBX7PPVUIcaogWmvCgGV0UvAb +hOawkGmyjRJCviM6ep3P+7kwtLxf5w= -----END CERTIFICATE-----Generated at Wed Oct 28 14:37:55 2026 by rpki-client