
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1674ebfa-6ae6-3335-9ffe-d0f63ed26abd.roa
File: 1674ebfa-6ae6-3335-9ffe-d0f63ed26abd.roa (raw, json)
Hash identifier: WMMx8Vr9qfsdPSKUgXXGS+SHIR/xOrKwozN5CbR8biI=
Subject key identifier: D2:B6:03:F2:95:62:EA:AE:08:5F:66:5A:13:19:BC:79:4D:6C:B8:42
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584E296F019271DC6057B1036A40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1674ebfa-6ae6-3335-9ffe-d0f63ed26abd.roa
Signing time: Sat 13 Jun 2026 21:00:12 +0000
ROA not before: Sat 13 Jun 2026 21:00:12 +0000
ROA not after: Fri 11 Sep 2026 21:00:12 +0000
asID: 14618
IP address blocks: 130.137.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:29:6f:01:92:71:dc:60:57:b1:03:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Jun 13 21:00:12 2026 GMT
Not After : Sep 11 21:00:12 2026 GMT
Subject: CN=f825a3f6-a99b-4f13-847d-614471d7d99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:9a:94:0d:db:b0:a5:94:9f:68:99:85:4c:
49:ab:c1:2d:02:a5:2f:a2:83:19:d8:d1:6b:df:69:
ab:2f:8c:e4:cf:c3:69:9d:97:32:fb:67:2c:d7:81:
06:88:65:29:2b:61:e8:d0:bd:fd:ec:26:cd:a4:ae:
6d:44:63:91:fe:bc:53:e5:8d:d5:e6:34:5f:73:5f:
c8:9c:d0:7e:56:ab:66:6f:50:90:48:23:e5:29:c5:
e2:78:ed:c6:c0:64:7b:83:26:6e:49:b1:0b:b0:04:
6b:3e:62:74:1c:c0:c1:74:ea:3d:cb:8f:78:6a:99:
53:ee:bb:b7:ea:55:2d:8d:da:d9:f4:e6:ac:d0:22:
50:c3:c7:b0:8f:a8:fd:29:f6:cf:0a:16:1c:7e:6d:
2c:d1:b7:d6:69:1d:a2:33:b5:be:3e:85:2c:4f:f3:
01:b4:5f:c1:14:73:a0:e1:29:9f:80:eb:44:05:ff:
b9:15:98:5b:c7:05:d0:2c:9a:41:0c:40:d8:57:e0:
19:8e:9b:94:50:e6:c9:aa:56:9c:d0:33:9d:7f:52:
b0:fe:a1:7f:34:16:2c:66:fd:ee:08:80:89:34:55:
5e:9d:98:60:99:15:ae:23:64:14:51:ab:2b:8e:3d:
73:fb:c4:1d:66:4a:da:63:bc:43:31:42:6f:d6:9d:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B6:03:F2:95:62:EA:AE:08:5F:66:5A:13:19:BC:79:4D:6C:B8:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1674ebfa-6ae6-3335-9ffe-d0f63ed26abd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:ee:58:4b:e2:40:68:ad:31:10:ce:fe:7c:5e:40:f6:7a:dd:
a0:d1:3b:8f:b1:a4:13:dc:3e:9e:b4:ae:ef:e0:d0:dd:48:37:
94:b5:1b:c8:02:a9:0c:4a:39:1e:89:d2:a0:ad:b4:4e:12:c1:
fc:dd:4b:d6:99:99:e4:35:5e:95:83:8d:fa:20:47:99:6a:6c:
81:d7:24:77:9e:5c:31:31:a3:54:2b:72:b1:7a:15:99:86:86:
0b:14:b4:39:d4:5f:ab:ab:9b:4d:cc:d0:ca:09:9c:41:ed:67:
7a:f7:a6:23:17:d4:65:1b:6d:d5:73:01:91:d6:64:f1:57:f0:
23:3f:92:47:07:7f:8b:c1:6e:75:6e:37:1a:af:fc:4e:06:01:
ea:0c:7d:4a:3f:d1:2a:5b:84:75:53:ea:09:96:04:4f:c9:66:
50:55:5f:1e:32:b9:94:b8:b2:4e:25:6e:d4:55:13:77:f0:6d:
31:e8:2b:39:cd:75:5b:2c:f3:e2:b9:a0:8a:f0:54:49:c2:70:
44:25:5c:79:51:ec:59:6b:d3:03:c6:df:e7:6a:51:e2:e6:bc:
fe:88:d8:50:ea:73:51:2d:67:b5:7e:34:71:61:a3:08:01:64:
38:59:1a:b0:ea:eb:5a:39:d8:dc:fa:7d:dd:69:dc:f6:e5:89:
b1:0f:58:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:14:48 2026 by rpki-client