$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cab68961-fd6c-3af4-85fc-9de1b49f45d0.roa File: cab68961-fd6c-3af4-85fc-9de1b49f45d0.roa (raw, json) Hash identifier: cf9BwdGeay4WeVtVslZE9/8RBgAEm0a1ezYxccdB7Nw= Subject key identifier: E1:94:D5:D8:C1:36:B4:20:FE:2D:AD:37:65:AB:06:B6:3F:42:6C:87 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584E5D14A5D97D2C9E430EEB7060 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cab68961-fd6c-3af4-85fc-9de1b49f45d0.roa Signing time: Thu 02 Jul 2026 09:00:12 +0000 ROA not before: Thu 02 Jul 2026 09:00:12 +0000 ROA not after: Wed 30 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 130.137.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:14:a5:d9:7d:2c:9e:43:0e:eb:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 2 09:00:12 2026 GMT Not After : Sep 30 09:00:12 2026 GMT Subject: CN=8ab9e69b-d5ca-41dc-8e5a-b3f86a18722f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:45:b0:ab:ed:6f:6f:86:78:55:5c:f4:9c: b5:1e:3c:a5:68:d9:b0:c9:fe:f9:90:06:c4:25:b5: 3d:23:e3:5f:b2:39:9b:4e:a5:58:3c:48:94:bd:e6: 90:a2:32:49:ee:30:2d:60:f8:e9:45:d5:4d:9e:b3: 27:0d:54:95:5f:07:39:a1:1d:09:9e:55:2c:68:df: 2c:71:aa:a0:fc:c1:ca:70:8a:64:2d:71:ad:e9:be: c5:33:4e:58:1e:1d:45:66:85:dd:46:1d:85:82:83: 63:0f:df:5c:05:f0:fa:ff:c6:2e:86:a9:f5:60:1a: cd:3e:1a:ec:2d:b7:d8:6a:0d:21:5d:e9:6e:80:d7: ed:f4:73:97:d0:91:93:20:47:85:47:26:a8:5a:c8: 10:96:8a:4b:d7:2c:dc:8d:aa:27:5c:b4:1a:d1:4e: 42:46:0e:87:6c:18:48:e0:80:01:97:39:5f:fa:f7: f8:31:92:c3:7e:10:bb:27:53:8d:68:34:51:43:9c: e2:6d:31:25:ab:2a:51:50:55:4e:c8:c7:f1:1b:d1: c4:49:fa:a4:81:04:5f:a9:18:9b:b3:f6:10:4a:11: cf:59:39:4b:fc:6d:66:58:fe:b3:4d:c6:d7:0a:bb: 46:db:f6:f0:12:3d:b5:98:c8:c6:aa:f4:f0:2d:98: d0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:94:D5:D8:C1:36:B4:20:FE:2D:AD:37:65:AB:06:B6:3F:42:6C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cab68961-fd6c-3af4-85fc-9de1b49f45d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:3f:ba:9d:71:7c:e6:86:01:8a:e3:ca:24:e7:41:07:21:aa: 72:0f:f4:76:94:0b:b1:cd:8c:81:7b:93:1f:b1:70:0e:bb:11: 6d:72:f1:57:d7:95:04:a1:f2:56:52:e6:b3:81:13:89:ed:29: 60:67:a6:16:bc:de:25:ca:46:56:21:0f:d1:e9:89:99:1e:05: 8d:e1:28:3e:e7:69:04:c4:9c:79:2d:8d:b5:48:65:d1:37:ba: 68:d0:d7:44:43:e6:69:26:02:b0:45:68:74:ef:0d:f9:5e:7f: 13:c5:18:5e:e5:eb:0e:c4:8e:0f:83:5c:f5:92:6a:67:fe:d6: 3d:8c:fe:a1:5f:23:e0:2d:60:1a:86:b5:83:d4:ee:e2:1c:41: a4:54:73:02:72:a7:46:d2:d9:50:a1:30:d3:94:4f:1a:b7:e6: 8d:68:2c:f0:93:30:13:f7:9b:93:77:46:15:f9:fc:80:c5:99: 7d:da:80:85:20:25:a0:fe:19:b6:90:0c:c9:d2:ee:f1:60:ee: ee:29:56:16:f6:b0:df:99:6f:e0:e5:fb:14:ed:88:f8:43:41: 55:8f:d8:6c:c4:25:74:b9:df:a6:c0:e2:c7:09:36:02:c1:23: 87:ca:43:0d:22:bb:fd:29:f7:5c:e5:d2:6b:cb:69:7c:92:b4: 2e:9e:2f:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFKXZfSyeQw7rcGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk OGFiOWU2OWItZDVjYS00MWRjLThlNWEtYjNmODZhMTg3MjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd1FsKvtb2+GeFVc9Jy1HjylaNmwyf75kAbE JbU9I+NfsjmbTqVYPEiUveaQojJJ7jAtYPjpRdVNnrMnDVSVXwc5oR0JnlUsaN8s caqg/MHKcIpkLXGt6b7FM05YHh1FZoXdRh2FgoNjD99cBfD6/8Yuhqn1YBrNPhrs LbfYag0hXelugNft9HOX0JGTIEeFRyaoWsgQlopL1yzcjaonXLQa0U5CRg6HbBhI 4IABlzlf+vf4MZLDfhC7J1ONaDRRQ5zibTElqypRUFVOyMfxG9HESfqkgQRfqRib s/YQShHPWTlL/G1mWP6zTcbXCrtG2/bwEj21mMjGqvTwLZjQCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGU1djBNrQg/i2tN2WrBrY/QmyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2FiNjg5NjEtZmQ2Yy0z YWY0LTg1ZmMtOWRlMWI0OWY0NWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY/up1xfOaGAYrjyiTnQQchqnIP9HaUC7HNjIF7kx+xcA67EW1y8VfX lQSh8lZS5rOBE4ntKWBnpha83iXKRlYhD9HpiZkeBY3hKD7naQTEnHktjbVIZdE3 umjQ10RD5mkmArBFaHTvDflefxPFGF7l6w7Ejg+DXPWSamf+1j2M/qFfI+AtYBqG tYPU7uIcQaRUcwJyp0bS2VChMNOUTxq35o1oLPCTMBP3m5N3RhX5/IDFmX3agIUg JaD+GbaQDMnS7vFg7u4pVhb2sN+Zb+Dl+xTtiPhDQVWP2GzEJXS536bA4scJNgLB I4fKQw0iu/0p91zl0mvLaXyStC6eLxc= -----END CERTIFICATE-----Generated at Sun Jul 19 22:14:58 2026 by rpki-client