$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbca3ea0-394d-3e41-bd61-9a8924809796.roa File: bbca3ea0-394d-3e41-bd61-9a8924809796.roa (raw, json) Hash identifier: UMGZIBI4tW1WFr5gCgUaY1FFAN3E2vb2KzMRp9mz9G8= Subject key identifier: CD:75:76:A9:18:BA:C3:39:94:DF:AF:8D:23:02:36:A8:F6:7C:CB:2F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584EB2B1BEC0204ADD8A9BD37360 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbca3ea0-394d-3e41-bd61-9a8924809796.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 21664 IP address blocks: 130.137.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:be:c0:20:4a:dd:8a:9b:d3:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=fc72ef32-c988-4816-a399-223e64dff628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c5:e7:48:ec:5c:29:9b:4c:64:5b:13:14:6c: 0f:7d:bf:78:1f:47:c1:d5:cb:4a:98:fe:76:25:f9: db:d5:70:91:b7:1b:a7:30:59:70:f4:9e:12:8b:15: 7b:3d:11:39:f8:d0:2f:1f:19:e2:51:aa:6a:9e:48: 1f:bd:1e:17:87:97:e2:1d:f9:94:0f:01:ce:dc:75: 4b:aa:e6:17:2a:be:18:7c:34:74:08:09:81:99:f7: da:4e:de:ce:68:e3:14:30:cc:5f:1c:fa:2f:cf:07: f9:55:40:bf:28:d6:a9:3c:b7:63:d5:13:f2:30:0e: 89:de:2a:77:e6:f8:c6:24:d0:3a:4f:75:2f:54:ed: b7:11:45:95:28:b1:b4:cd:42:27:3b:48:96:d0:23: a9:21:af:44:44:5c:14:1d:2a:48:fb:fd:94:99:27: 97:28:74:62:7c:c1:37:25:a6:b4:7c:00:a8:40:ad: e7:7c:44:ab:19:17:c0:12:dc:d6:37:16:df:d8:e9: 6c:d0:57:85:bc:73:0b:19:5a:c9:2d:9c:69:06:a4: d6:28:f1:ac:9b:48:e6:11:b7:f3:9e:03:f5:d8:76: a3:fb:7a:2e:24:0b:45:10:76:33:e2:3d:e3:21:1e: 77:47:f8:91:2f:8f:ce:a4:29:da:bd:d7:16:ef:d4: 0e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:75:76:A9:18:BA:C3:39:94:DF:AF:8D:23:02:36:A8:F6:7C:CB:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbca3ea0-394d-3e41-bd61-9a8924809796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:11:8e:2d:c9:cf:f0:d8:5c:73:8a:b6:3b:d2:0a:d2:8d:56: a6:13:b3:b9:81:93:61:a8:69:80:b6:7f:07:a2:b4:f4:eb:e8: 83:60:71:51:89:83:c3:aa:d2:04:a2:54:7a:1b:fb:20:23:08: 7a:7f:d1:66:f9:29:ae:2b:3e:e2:cc:3c:a0:9f:40:cd:9a:53: f6:00:b1:1b:58:6a:09:86:28:22:8c:18:6a:de:a3:a1:45:c5: b5:23:6a:4c:88:b1:9a:39:3d:50:78:f6:29:3b:07:86:9b:9f: 9b:8b:1c:de:b6:83:3a:88:8c:43:42:99:42:29:e8:d0:f1:df: f9:b7:6a:95:dd:e6:ab:41:b0:5c:a6:cb:19:52:da:20:24:ec: 5d:ca:dc:df:19:45:9f:62:61:5f:15:a8:ce:26:9c:2d:42:84: 11:5f:1b:07:89:ae:e5:cc:97:47:80:00:70:83:39:e9:9a:f5: f0:c4:0c:00:90:5f:82:59:bb:59:c9:17:63:67:05:20:2f:fa: 87:b7:c3:28:0e:ba:43:55:ed:4a:0d:8c:e2:6b:1b:75:30:84: af:c8:aa:93:6a:10:9e:ed:74:b9:d3:b8:c4:ba:a5:65:70:d9: bc:2e:b4:55:7d:71:6a:7d:32:83:33:ef:e9:9e:2b:eb:f2:38: 9b:32:e7:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysb7AIErdipvTc2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZmM3MmVmMzItYzk4OC00ODE2LWEzOTktMjIzZTY0ZGZmNjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sXnSOxcKZtMZFsTFGwPfb94H0fB1ctKmP52 Jfnb1XCRtxunMFlw9J4SixV7PRE5+NAvHxniUapqnkgfvR4Xh5fiHfmUDwHO3HVL quYXKr4YfDR0CAmBmffaTt7OaOMUMMxfHPovzwf5VUC/KNapPLdj1RPyMA6J3ip3 5vjGJNA6T3UvVO23EUWVKLG0zUInO0iW0COpIa9ERFwUHSpI+/2UmSeXKHRifME3 Jaa0fACoQK3nfESrGRfAEtzWNxbf2Ols0FeFvHMLGVrJLZxpBqTWKPGsm0jmEbfz ngP12Haj+3ouJAtFEHYz4j3jIR53R/iRL4/OpCnavdcW79QO0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM11dqkYusM5lN+vjSMCNqj2fMsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmJjYTNlYTAtMzk0ZC0z ZTQxLWJkNjEtOWE4OTI0ODA5Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIRji3Jz/DYXHOKtjvSCtKNVqYTs7mBk2GoaYC2fweitPTr6INgcVGJ g8Oq0gSiVHob+yAjCHp/0Wb5Ka4rPuLMPKCfQM2aU/YAsRtYagmGKCKMGGreo6FF xbUjakyIsZo5PVB49ik7B4abn5uLHN62gzqIjENCmUIp6NDx3/m3apXd5qtBsFym yxlS2iAk7F3K3N8ZRZ9iYV8VqM4mnC1ChBFfGweJruXMl0eAAHCDOema9fDEDACQ X4JZu1nJF2NnBSAv+oe3wygOukNV7UoNjOJrG3UwhK/IqpNqEJ7tdLnTuMS6pWVw 2bwutFV9cWp9MoMz7+meK+vyOJsy5w8= -----END CERTIFICATE-----Generated at Thu Sep 17 21:54:25 2026 by rpki-client