$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a86fcde3-2133-330a-afd1-750691f9ac45.roa File: a86fcde3-2133-330a-afd1-750691f9ac45.roa (raw, json) Hash identifier: LdBQZo1eW1xi9QeBVa827YxdHXrujpW/51Ts5dvQahY= Subject key identifier: 4C:8B:65:89:57:05:A1:01:FD:65:F2:E6:03:A7:36:C4:6D:88:15:EF Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F02421BF6AD03B1D4893C8840 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a86fcde3-2133-330a-afd1-750691f9ac45.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 8987 IP address blocks: 130.137.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:1b:f6:ad:03:b1:d4:89:3c:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=b830fa6f-fcca-4b82-8f5e-2102d0c48481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e5:fc:5c:4a:76:e5:6f:dd:f7:8a:da:e8:02: b4:d2:ac:03:2c:18:f5:55:fd:58:27:94:a2:7d:d8: 3d:60:05:42:df:dd:1a:45:6d:cf:55:00:c8:86:02: a7:8e:c3:c2:d0:88:3f:3d:29:1e:0c:dd:e0:19:2a: f5:f9:e6:c6:13:bf:64:6b:1a:81:c3:d2:c8:dd:c7: e8:81:9d:4b:59:f8:86:ef:c8:65:eb:de:60:00:ef: 51:22:53:6a:c7:c0:56:1f:9d:ed:f4:62:e6:3a:77: 11:f8:f1:23:1d:fb:7e:83:25:79:b5:56:e2:12:64: 3a:b1:b1:31:e8:be:e6:50:a2:20:6c:28:df:a9:3c: fb:1c:68:d5:01:71:6d:d1:ba:f3:28:3b:f2:a2:9d: f4:29:8b:20:16:1e:ba:32:5d:d2:90:16:02:34:75: 4d:c0:57:44:ce:cd:c0:f3:9f:92:a1:a3:43:bf:50: 36:f6:b8:ef:d5:c4:2c:ae:3d:6e:59:3c:74:c6:62: d9:4e:63:86:30:d9:43:21:76:98:91:c8:62:be:6a: 91:bd:20:8b:eb:25:52:07:01:10:42:4a:e6:2f:36: e4:79:27:85:a5:93:1a:d4:5c:4f:2a:c8:fb:cb:de: 91:3a:8c:8f:fc:76:92:03:51:99:14:df:99:91:63: 6a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8B:65:89:57:05:A1:01:FD:65:F2:E6:03:A7:36:C4:6D:88:15:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a86fcde3-2133-330a-afd1-750691f9ac45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e4:68:06:2a:e1:0e:5c:e8:02:6b:47:0b:35:4c:1e:d6:ee: 56:4d:19:1f:98:f1:b3:9d:0e:68:4c:53:5d:f4:92:6b:d9:97: 4f:91:70:25:8d:13:28:91:b7:64:e1:28:87:61:46:8c:dc:e7: 66:93:ff:cd:50:b8:39:39:2e:73:0f:e5:4e:9d:28:3c:96:5f: 70:5a:d5:82:0c:fe:6d:6d:5a:bd:9d:da:40:3f:e4:7d:b8:a9: 07:0d:c4:ef:e4:dd:fe:c2:9a:c7:ab:26:da:14:97:33:75:a3: 8d:b9:cd:ed:c3:ef:49:db:04:7e:04:21:4a:2a:c8:0a:b1:d4: 9c:40:bf:fd:b4:56:a8:41:f0:40:77:cb:64:4a:b1:a7:14:bd: 6b:17:ad:e2:f0:2c:fc:e4:f9:09:e2:89:7e:7c:5f:df:02:ef: 8a:2e:6b:9f:3c:0e:f9:b5:58:fa:ae:33:99:9b:0b:9a:5a:a7: 64:9c:28:2b:4d:ee:33:42:e7:8c:06:6c:ef:d6:35:6c:67:c5: f4:71:0d:72:f8:15:21:8b:5d:c0:70:58:88:de:d7:2f:34:fe: b0:2f:3b:1c:6f:42:dd:48:13:61:4b:99:45:d3:f4:91:5f:3c: 8c:5b:d3:3c:5a:d5:95:92:d4:10:e1:94:8f:56:39:0b:38:80: ed:be:7d:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhv2rQOx1Ik8iEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YjgzMGZhNmYtZmNjYS00YjgyLThmNWUtMjEwMmQwYzQ4NDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOX8XEp25W/d94ra6AK00qwDLBj1Vf1YJ5Si fdg9YAVC390aRW3PVQDIhgKnjsPC0Ig/PSkeDN3gGSr1+ebGE79kaxqBw9LI3cfo gZ1LWfiG78hl695gAO9RIlNqx8BWH53t9GLmOncR+PEjHft+gyV5tVbiEmQ6sbEx 6L7mUKIgbCjfqTz7HGjVAXFt0brzKDvyop30KYsgFh66Ml3SkBYCNHVNwFdEzs3A 85+SoaNDv1A29rjv1cQsrj1uWTx0xmLZTmOGMNlDIXaYkchivmqRvSCL6yVSBwEQ QkrmLzbkeSeFpZMa1FxPKsj7y96ROoyP/HaSA1GZFN+ZkWNqRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyLZYlXBaEB/WXy5gOnNsRtiBXvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTg2ZmNkZTMtMjEzMy0z MzBhLWFmZDEtNzUwNjkxZjlhYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfkaAYq4Q5c6AJrRws1TB7W7lZNGR+Y8bOdDmhMU130kmvZl0+RcCWN EyiRt2ThKIdhRozc52aT/81QuDk5LnMP5U6dKDyWX3Ba1YIM/m1tWr2d2kA/5H24 qQcNxO/k3f7CmserJtoUlzN1o425ze3D70nbBH4EIUoqyAqx1JxAv/20VqhB8EB3 y2RKsacUvWsXreLwLPzk+QniiX58X98C74oua588Dvm1WPquM5mbC5pap2ScKCtN 7jNC54wGbO/WNWxnxfRxDXL4FSGLXcBwWIje1y80/rAvOxxvQt1IE2FLmUXT9JFf PIxb0zxa1ZWS1BDhlI9WOQs4gO2+faI= -----END CERTIFICATE-----Generated at Wed Sep 2 15:22:34 2026 by rpki-client