$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b3281932-f29d-3e34-ba8c-1b2a5c7fe372.roa File: b3281932-f29d-3e34-ba8c-1b2a5c7fe372.roa (raw, json) Hash identifier: cTDVqu3hX+Xm1CicKBA2QpjeHBAZP2CXaSKF5yx8yrI= Subject key identifier: 50:A4:B2:63:CA:47:67:F7:C5:E0:60:9D:41:BF:E2:25:D4:ED:4E:B1 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584F6F22DDFD87BA7D8E1DCDF670 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b3281932-f29d-3e34-ba8c-1b2a5c7fe372.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 130.137.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:dd:fd:87:ba:7d:8e:1d:cd:f6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=3d1cdd5f-9c2d-4ab8-b1a5-a21820b5cf30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:63:39:32:dd:26:7d:53:9f:02:aa:8a:d1:43: 6e:4a:1e:46:af:f4:5b:99:8a:53:4e:8f:9d:24:56: 39:d6:b2:48:7f:d2:8e:dd:32:74:1b:64:3c:d9:17: 4a:35:29:ed:de:9e:8e:de:00:52:1a:6c:34:ea:b1: d1:49:04:a2:e5:dd:bd:83:1d:5b:47:4a:58:df:99: 0c:c6:ca:3c:2d:8f:94:30:dd:c4:23:92:05:cc:13: ef:b7:2f:20:64:4e:83:1d:f7:1b:6b:fd:be:0c:5c: 61:e3:38:89:42:03:d2:e8:6e:93:bd:7c:88:fc:55: e4:a9:2a:3b:74:08:8d:53:a6:13:3e:cb:d6:11:bb: 8a:74:6c:eb:30:a1:6c:30:94:46:9f:ac:df:81:8f: 2b:25:1a:92:f3:46:7b:9b:4e:f6:99:bb:42:41:d6: 98:a4:5f:56:71:10:14:e8:af:e5:f6:27:d1:85:29: 02:35:15:e3:10:75:33:04:14:f9:b5:26:0b:d4:cc: d2:07:5c:c1:14:f0:1f:a2:8c:fa:7f:16:af:f5:2c: 48:89:b3:be:67:c3:b8:04:86:d2:f6:f1:92:d6:d4: 2f:cd:1e:fb:95:8c:07:aa:d3:f0:26:f5:e1:00:73: 35:59:72:99:c2:61:06:43:5d:ee:0a:0b:73:f3:a7: 99:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A4:B2:63:CA:47:67:F7:C5:E0:60:9D:41:BF:E2:25:D4:ED:4E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b3281932-f29d-3e34-ba8c-1b2a5c7fe372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:96:d6:77:e5:89:58:f1:a8:93:53:32:b9:6f:e7:22:8b:0b: 46:3e:f8:64:9e:5d:5f:e0:78:f4:96:27:ed:6b:06:99:78:83: c5:02:56:c5:11:fb:9b:69:16:6c:c8:4e:a3:dd:49:b8:0d:84: ad:34:38:0c:46:10:59:03:cc:8c:ed:46:0f:f5:b2:d4:62:2d: b9:42:71:95:9f:e3:a2:ed:60:7e:63:1c:a8:4c:32:98:86:9e: a4:03:22:88:52:a7:26:d0:2e:cb:30:ea:92:a8:4b:6d:3b:ea: 92:b2:9e:68:cd:cc:60:45:1a:e8:b1:35:4e:63:a6:9e:45:a4: cb:eb:08:1a:b1:bd:46:f1:43:2f:86:16:4b:da:c4:2f:f3:7a: 80:70:0e:6f:f2:eb:8a:28:b5:11:50:a6:a6:61:92:a8:57:43: 6a:a9:5a:23:d9:16:7c:c7:26:1d:65:69:c4:52:5a:c3:a0:1a: 00:02:3b:90:88:dc:c6:76:fc:32:25:6b:bf:bd:78:b7:41:eb: 05:38:ce:d1:4d:da:12:6e:3d:53:82:95:d0:12:d0:3a:7c:ec: ac:a7:50:46:e5:85:fe:8d:78:46:a7:ad:dd:b4:74:da:06:07: 67:20:f6:cd:ed:48:1c:4d:4f:88:6e:ac:af:3a:9a:f2:27:ee: 69:d8:78:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIt39h7p9jh3N9nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk M2QxY2RkNWYtOWMyZC00YWI4LWIxYTUtYTIxODIwYjVjZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2M5Mt0mfVOfAqqK0UNuSh5Gr/RbmYpTTo+d JFY51rJIf9KO3TJ0G2Q82RdKNSnt3p6O3gBSGmw06rHRSQSi5d29gx1bR0pY35kM xso8LY+UMN3EI5IFzBPvty8gZE6DHfcba/2+DFxh4ziJQgPS6G6TvXyI/FXkqSo7 dAiNU6YTPsvWEbuKdGzrMKFsMJRGn6zfgY8rJRqS80Z7m072mbtCQdaYpF9WcRAU 6K/l9ifRhSkCNRXjEHUzBBT5tSYL1MzSB1zBFPAfooz6fxav9SxIibO+Z8O4BIbS 9vGS1tQvzR77lYwHqtPwJvXhAHM1WXKZwmEGQ13uCgtz86eZcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCksmPKR2f3xeBgnUG/4iXU7U6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjMyODE5MzItZjI5ZC0z ZTM0LWJhOGMtMWIyYTVjN2ZlMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOW1nfliVjxqJNTMrlv5yKLC0Y++GSeXV/gePSWJ+1rBpl4g8UCVsUR +5tpFmzITqPdSbgNhK00OAxGEFkDzIztRg/1stRiLblCcZWf46LtYH5jHKhMMpiG nqQDIohSpybQLssw6pKoS2076pKynmjNzGBFGuixNU5jpp5FpMvrCBqxvUbxQy+G FkvaxC/zeoBwDm/y64ootRFQpqZhkqhXQ2qpWiPZFnzHJh1lacRSWsOgGgACO5CI 3MZ2/DIla7+9eLdB6wU4ztFN2hJuPVOCldAS0Dp87KynUEblhf6NeEanrd20dNoG B2cg9s3tSBxNT4hurK86mvIn7mnYeDo= -----END CERTIFICATE-----Generated at Mon Oct 19 03:40:28 2026 by rpki-client