$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f89c3cdc-34eb-38b0-9922-525110d16d32.roa File: f89c3cdc-34eb-38b0-9922-525110d16d32.roa (raw, json) Hash identifier: pwBewh7ap+O7kKrMwcYNQ+nYVWcGnDlgbI+JtzTPErg= Subject key identifier: E8:E6:88:7C:38:4E:B7:2D:3F:FE:D9:81:09:4C:BC:EF:1A:1A:85:FD Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584E736A1F00B110526FEC7A1E40 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f89c3cdc-34eb-38b0-9922-525110d16d32.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 8987 IP address blocks: 130.137.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:1f:00:b1:10:52:6f:ec:7a:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=37bb7e6f-26e2-44df-8dc9-740f6f36cb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:28:e2:11:f8:83:ee:17:fd:58:78:10:f0: dc:84:fc:35:81:60:68:f5:96:a8:2d:49:37:9b:35: 24:8c:b6:ec:cb:1c:ce:2f:52:04:54:60:6a:15:c6: 23:ed:37:b5:b0:df:c5:7a:1e:78:1b:b3:16:14:77: dc:0e:34:d0:25:ef:5c:24:ec:d0:0e:05:c2:e6:07: 56:69:14:81:35:64:9c:98:ef:27:2f:96:09:d1:b6: 32:e0:b5:ff:3e:b5:99:db:26:23:81:6f:f5:90:31: 9b:5b:23:0c:be:d5:65:0d:a4:b6:33:d8:65:5e:a0: 09:c7:1b:ee:fb:d4:94:42:a4:fd:00:c0:d3:57:3f: 55:fe:13:ba:ad:3e:80:58:fb:e6:27:09:0e:c9:53: 65:2f:dd:e2:12:5b:51:46:54:35:41:de:11:67:18: 21:fa:ef:b4:18:32:9c:f9:39:84:49:88:17:17:19: 7c:b7:89:e9:85:b3:f3:5a:cb:32:dc:6e:8c:31:4d: ce:11:33:e4:3b:c2:3a:29:97:0a:9e:f9:f7:12:b0: 35:4c:90:9a:d2:42:70:b3:58:b2:f0:31:86:5b:8d: 8c:17:f1:0c:e3:51:87:7b:f7:1f:ed:2a:28:f3:0a: 61:0c:77:95:5c:a7:21:ec:2a:18:a6:5d:c3:25:de: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E6:88:7C:38:4E:B7:2D:3F:FE:D9:81:09:4C:BC:EF:1A:1A:85:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f89c3cdc-34eb-38b0-9922-525110d16d32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b9:d6:20:82:09:c1:95:19:eb:90:26:45:4e:31:7b:6c:88: 0c:da:49:c1:40:de:25:3b:c8:1c:07:b2:7e:af:68:d3:64:5b: b2:a4:45:16:4e:a0:95:14:6c:03:27:c9:16:1c:10:15:3b:23: 0c:74:e3:3f:c7:be:fc:8d:0b:fe:17:71:af:b6:24:84:8a:20: 6a:6f:65:7e:f5:98:f2:99:e0:f9:a0:68:57:ca:6c:a9:e1:0f: a6:34:7a:d3:9e:56:d0:4f:07:64:60:ff:b9:30:60:26:9c:04: 53:c8:69:ba:94:a3:4a:54:1d:6b:e9:6b:eb:82:5d:34:cd:e4: ab:ff:48:21:4e:56:1d:73:97:91:db:c9:d0:59:a4:a9:78:6f: 92:04:e0:12:56:e3:b1:1c:fd:24:74:c9:b2:05:ac:37:78:ff: 46:e3:d8:76:da:b3:1b:d6:89:b8:2f:93:7f:65:53:49:3f:e2: 9a:ed:31:78:83:0b:eb:73:75:99:39:6e:85:56:84:1d:b7:f8: b0:6c:69:03:75:28:da:00:83:93:4d:51:d0:30:75:46:28:62: d1:3b:a1:4f:0a:fd:02:29:42:5c:6e:56:aa:b5:1b:d5:31:3a: 70:03:33:96:32:16:1f:d9:ff:47:12:d9:97:1a:05:41:68:c0: c8:d4:7a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zah8AsRBSb+x6HkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk MzdiYjdlNmYtMjZlMi00NGRmLThkYzktNzQwZjZmMzZjYjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeAo4hH4g+4X/Vh4EPDchPw1gWBo9ZaoLUk3 mzUkjLbsyxzOL1IEVGBqFcYj7Te1sN/Feh54G7MWFHfcDjTQJe9cJOzQDgXC5gdW aRSBNWScmO8nL5YJ0bYy4LX/PrWZ2yYjgW/1kDGbWyMMvtVlDaS2M9hlXqAJxxvu +9SUQqT9AMDTVz9V/hO6rT6AWPvmJwkOyVNlL93iEltRRlQ1Qd4RZxgh+u+0GDKc +TmESYgXFxl8t4nphbPzWssy3G6MMU3OETPkO8I6KZcKnvn3ErA1TJCa0kJws1iy 8DGGW42MF/EM41GHe/cf7Soo8wphDHeVXKch7CoYpl3DJd7BiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjmiHw4TrctP/7ZgQlMvO8aGoX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZjg5YzNjZGMtMzRlYi0z OGIwLTk5MjItNTI1MTEwZDE2ZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgoktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC251iCCCcGVGeuQJkVOMXtsiAzaScFA3iU7yBwHsn6vaNNkW7KkRRZO oJUUbAMnyRYcEBU7Iwx04z/HvvyNC/4Xca+2JISKIGpvZX71mPKZ4PmgaFfKbKnh D6Y0etOeVtBPB2Rg/7kwYCacBFPIabqUo0pUHWvpa+uCXTTN5Kv/SCFOVh1zl5Hb ydBZpKl4b5IE4BJW47Ec/SR0ybIFrDd4/0bj2HbasxvWibgvk39lU0k/4prtMXiD C+tzdZk5boVWhB23+LBsaQN1KNoAg5NNUdAwdUYoYtE7oU8K/QIpQlxuVqq1G9Ux OnADM5YyFh/Z/0cS2ZcaBUFowMjUelk= -----END CERTIFICATE-----Generated at Sun Jul 19 05:27:51 2026 by rpki-client