$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ba55a1e4-2d79-3695-8442-96a538b35f02.roa File: ba55a1e4-2d79-3695-8442-96a538b35f02.roa (raw, json) Hash identifier: zgOKIz7Tnf7ZBf3AyUe95YaPmCKwLaUR3LaVJ/KgYrk= Subject key identifier: 80:5E:77:51:59:D3:13:C5:7E:4C:67:EA:85:A1:E8:BF:9E:0D:06:29 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584EFF7770CACBCEF9088472F080 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ba55a1e4-2d79-3695-8442-96a538b35f02.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 8987 IP address blocks: 130.137.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:70:ca:cb:ce:f9:08:84:72:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=b24c67a5-1f99-42ae-8fa2-1d61225a324f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a2:42:c3:92:63:5e:d4:29:c9:de:7b:b3:16: 82:8b:ee:ec:7b:dc:c9:63:23:84:ee:b8:dd:6e:0d: 93:b1:ba:bd:a6:2d:29:6c:76:1a:f3:6f:75:ff:d9: 9a:c1:4a:ae:3b:a9:66:78:c8:d0:75:65:e4:87:de: 5d:a6:2e:39:22:d0:1c:33:e1:77:48:96:6a:74:97: 24:c1:b2:82:1c:f0:71:c0:49:d3:64:c3:ff:f5:29: 9f:40:43:5b:40:c7:de:be:35:ed:5c:2f:74:02:6a: a2:00:81:a2:af:f8:7a:5b:fe:46:1b:50:93:cf:25: 74:4d:3f:a0:86:28:65:5e:19:b0:b3:03:36:98:fe: 6e:c7:8f:67:8e:d4:43:a0:49:e2:0a:fd:bb:90:7f: 3a:cd:a3:6d:99:0d:17:2b:00:9f:f5:13:22:ca:13: 70:50:89:91:d9:65:85:cf:65:a4:ae:2a:ee:6a:b9: 36:06:c8:41:a6:4e:bf:43:34:77:52:f2:8c:5f:f6: 12:c6:71:45:10:2e:27:8f:80:9b:55:30:ea:aa:65: 5e:4c:c5:e3:3a:d8:f7:14:1b:c8:7d:a8:29:8a:ff: 67:d0:8d:bb:bd:85:db:1a:7a:a3:86:a5:1c:2f:5c: 50:df:d7:ae:4e:11:31:34:64:98:2e:6a:9b:60:68: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5E:77:51:59:D3:13:C5:7E:4C:67:EA:85:A1:E8:BF:9E:0D:06:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ba55a1e4-2d79-3695-8442-96a538b35f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:de:9d:2b:79:de:9a:56:9a:98:28:f4:38:e0:58:6d:21:5d: 4a:9a:30:31:8f:83:aa:08:23:35:e1:38:cf:a8:ca:0b:f4:70: 89:12:e8:09:49:3a:ed:bc:0e:ce:c9:04:cf:5d:8f:c8:a3:20: a7:ed:7d:cd:fe:43:0f:30:44:ff:2a:bc:bf:ee:8d:cc:2e:85: fa:6c:9b:ac:68:8a:db:13:10:e0:56:25:17:de:43:86:4e:2f: 99:de:f7:fa:7b:c3:f5:b9:45:f4:5b:70:33:19:c4:10:dc:6e: 1d:a8:93:40:00:c0:2d:28:a9:81:bc:1f:1a:de:c9:39:5a:14: 8f:c2:3a:a0:57:ff:07:a8:88:3d:57:3b:7e:b3:50:c5:f9:25: 10:51:c8:be:ae:3c:20:1f:4b:c8:cd:17:1b:24:78:5c:0a:53: 65:46:9e:1e:49:09:30:e9:4b:aa:ac:2e:11:72:c6:83:a1:67: 4c:46:e9:1b:b6:04:11:fe:cb:c5:f0:4d:2d:3c:a3:78:c5:a2: 41:d6:16:37:34:e4:cc:d7:a4:4a:6d:91:01:f9:21:2b:9b:95: 1d:2a:d0:98:75:5e:a8:29:cd:c7:05:46:27:ad:1b:6b:dd:da: 7b:63:f1:3e:3e:ea:dc:7c:37:d1:0b:4a:c2:58:17:76:3d:52: d4:d0:7f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3DKy875CIRy8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk YjI0YzY3YTUtMWY5OS00MmFlLThmYTItMWQ2MTIyNWEzMjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6JCw5JjXtQpyd57sxaCi+7se9zJYyOE7rjd bg2Tsbq9pi0pbHYa8291/9mawUquO6lmeMjQdWXkh95dpi45ItAcM+F3SJZqdJck wbKCHPBxwEnTZMP/9SmfQENbQMfevjXtXC90AmqiAIGir/h6W/5GG1CTzyV0TT+g hihlXhmwswM2mP5ux49njtRDoEniCv27kH86zaNtmQ0XKwCf9RMiyhNwUImR2WWF z2Wkriruark2BshBpk6/QzR3UvKMX/YSxnFFEC4nj4CbVTDqqmVeTMXjOtj3FBvI fagpiv9n0I27vYXbGnqjhqUcL1xQ39euThExNGSYLmqbYGg8OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBed1FZ0xPFfkxn6oWh6L+eDQYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmE1NWExZTQtMmQ3OS0z Njk1LTg0NDItOTZhNTM4YjM1ZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjenSt53ppWmpgo9DjgWG0hXUqaMDGPg6oIIzXhOM+oygv0cIkS6AlJ Ou28Ds7JBM9dj8ijIKftfc3+Qw8wRP8qvL/ujcwuhfpsm6xoitsTEOBWJRfeQ4ZO L5ne9/p7w/W5RfRbcDMZxBDcbh2ok0AAwC0oqYG8HxreyTlaFI/COqBX/weoiD1X O36zUMX5JRBRyL6uPCAfS8jNFxskeFwKU2VGnh5JCTDpS6qsLhFyxoOhZ0xG6Ru2 BBH+y8XwTS08o3jFokHWFjc05MzXpEptkQH5ISublR0q0Jh1XqgpzccFRietG2vd 2ntj8T4+6tx8N9ELSsJYF3Y9UtTQf6k= -----END CERTIFICATE-----Generated at Wed Sep 2 15:22:00 2026 by rpki-client