$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa File: 8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa (raw, json) Hash identifier: uCKnrDWc0tkuHeo8KfNa4gMYFx+9aNVeT9y5AkuUV1w= Subject key identifier: 05:4A:3D:8E:2D:A8:50:C4:86:97:D1:BF:5A:86:DE:D7:95:3C:24:D7 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584E5D14A5505DD35DE6A0A50000 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa Signing time: Thu 02 Jul 2026 09:00:12 +0000 ROA not before: Thu 02 Jul 2026 09:00:12 +0000 ROA not after: Wed 30 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 130.137.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:14:a5:50:5d:d3:5d:e6:a0:a5:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 2 09:00:12 2026 GMT Not After : Sep 30 09:00:12 2026 GMT Subject: CN=a825c488-51fa-45d7-9ff3-282b64c090ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:07:f2:57:99:3d:bd:8e:92:7f:54:ae:4a:10: 00:61:fc:26:71:5b:82:18:2a:de:38:41:d2:fd:e7: 46:87:8e:2e:11:b4:d7:af:43:02:88:ee:f8:c8:e2: 58:e9:74:f8:be:06:26:bd:3c:ae:55:3f:92:30:98: ff:27:75:1d:4b:de:19:6f:ae:67:18:f1:d1:a4:a7: 9f:8f:45:4e:a7:4c:97:a6:0e:09:c2:4a:4b:ce:d4: 01:40:b3:6b:b5:1b:8f:cb:96:56:70:a5:37:dc:2b: ab:66:5f:a2:98:81:8e:a3:0c:4e:6b:ee:f6:da:86: d2:33:d7:ed:70:68:aa:2b:71:6a:37:ec:46:ab:0f: 9e:63:eb:17:eb:42:0a:46:b9:13:c6:ff:b2:c5:02: 52:b0:e2:89:83:a6:ee:28:39:08:3b:7a:53:6d:28: 7a:af:12:5a:34:74:e4:b0:d3:32:fe:bc:34:75:e2: 32:de:c6:bd:d7:a8:6a:29:cd:bf:ca:e3:92:76:df: 2d:c1:01:6f:77:53:4d:b5:f5:a0:56:b0:ac:8b:7b: 85:5c:96:73:d3:41:b5:23:2b:73:46:7e:90:91:0f: 46:eb:56:9e:fd:11:20:86:d6:40:0a:5b:81:5e:e3: 87:ae:cc:49:b1:6f:78:77:af:2c:b5:57:0f:1d:06: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4A:3D:8E:2D:A8:50:C4:86:97:D1:BF:5A:86:DE:D7:95:3C:24:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0a:1d:2f:64:a6:6f:83:2a:cb:90:72:20:b0:f9:09:f2:c7: 07:0d:2a:04:72:ab:69:fa:c8:7e:b6:ae:6f:86:fe:67:c1:cb: 6c:03:79:8d:d9:de:07:88:00:71:25:12:98:1d:62:16:e5:a8: f0:57:18:8f:ca:24:50:dc:ee:a8:a5:84:f9:2a:c7:c8:36:33: 96:e7:01:6b:a7:f2:5c:73:9f:05:db:68:e6:97:d8:1e:0f:15: ba:40:a9:11:01:97:fc:08:de:57:d8:b2:3d:e9:66:d5:a0:f6: 19:57:fa:da:43:ea:28:c2:74:45:de:4b:bc:a7:48:15:ff:af: 64:df:00:bf:cf:a0:c3:1e:0e:f3:7c:19:4a:09:9a:a7:4c:a7: e6:f0:af:06:42:dc:23:de:f8:f9:fc:ce:c2:45:f7:00:09:41: c9:2a:71:ad:69:45:5a:1c:ca:85:fc:d8:fd:7e:45:d5:6f:d1: b9:8a:74:e9:bd:52:e0:67:2b:38:14:24:a6:3e:0c:d1:4c:f9: 9d:43:c1:b3:d4:45:eb:0f:fb:3a:72:c1:56:cb:06:cc:fb:50: ea:58:94:8e:df:99:7d:35:0b:7d:a4:fe:7c:91:40:c9:fd:ae: de:ca:6e:65:5e:2e:05:57:ce:cc:d9:ed:f8:99:8f:2d:bf:2e: d9:4e:17:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFKVQXdNd5qClAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk YTgyNWM0ODgtNTFmYS00NWQ3LTlmZjMtMjgyYjY0YzA5MGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQfyV5k9vY6Sf1SuShAAYfwmcVuCGCreOEHS /edGh44uEbTXr0MCiO74yOJY6XT4vgYmvTyuVT+SMJj/J3UdS94Zb65nGPHRpKef j0VOp0yXpg4JwkpLztQBQLNrtRuPy5ZWcKU33CurZl+imIGOowxOa+722obSM9ft cGiqK3FqN+xGqw+eY+sX60IKRrkTxv+yxQJSsOKJg6buKDkIO3pTbSh6rxJaNHTk sNMy/rw0deIy3sa916hqKc2/yuOSdt8twQFvd1NNtfWgVrCsi3uFXJZz00G1Iytz Rn6QkQ9G61ae/REghtZACluBXuOHrsxJsW94d68stVcPHQZDhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVKPY4tqFDEhpfRv1qG3teVPCTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGMyZmMxZTctNDM5MC0z ZDE4LWJhZGMtYTZmYTFjMWY2ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMKHS9kpm+DKsuQciCw+QnyxwcNKgRyq2n6yH62rm+G/mfBy2wDeY3Z 3geIAHElEpgdYhblqPBXGI/KJFDc7qilhPkqx8g2M5bnAWun8lxznwXbaOaX2B4P FbpAqREBl/wI3lfYsj3pZtWg9hlX+tpD6ijCdEXeS7ynSBX/r2TfAL/PoMMeDvN8 GUoJmqdMp+bwrwZC3CPe+Pn8zsJF9wAJQckqca1pRVocyoX82P1+RdVv0bmKdOm9 UuBnKzgUJKY+DNFM+Z1DwbPUResP+zpywVbLBsz7UOpYlI7fmX01C32k/nyRQMn9 rt7KbmVeLgVXzszZ7fiZjy2/LtlOFzM= -----END CERTIFICATE-----Generated at Sun Jul 19 22:15:23 2026 by rpki-client