
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa
File: b8891b9b-22d6-354f-9592-c7a2be892635.roa (raw, json)
Hash identifier: 3iZv4ibfUlO/CHpAwqpjaelJnzI0q9WCfSjlfWeNbDo=
Subject key identifier: 00:A7:E5:AF:EF:D3:18:1B:F8:F9:7B:21:26:83:DF:8C:ED:D3:37:9C
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584E296F01C4DF53B5F1FBD7BF00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa
Signing time: Sat 13 Jun 2026 21:00:12 +0000
ROA not before: Sat 13 Jun 2026 21:00:12 +0000
ROA not after: Fri 11 Sep 2026 21:00:12 +0000
asID: 16509
IP address blocks: 130.137.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:29:6f:01:c4:df:53:b5:f1:fb:d7:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Jun 13 21:00:12 2026 GMT
Not After : Sep 11 21:00:12 2026 GMT
Subject: CN=6cdcbbfd-82da-43f2-8f89-22b7f09ceb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:76:77:52:d5:2a:31:b8:c7:c6:88:7d:5c:
ef:67:f0:39:cf:8f:b7:fd:fb:1e:1b:ad:0f:08:b0:
48:09:7d:32:75:7a:d0:9a:c0:06:71:10:ce:68:64:
b5:f9:7a:48:89:72:85:9b:7e:ad:ee:90:c0:ac:56:
a1:6d:d2:b6:11:8d:59:c1:06:2e:74:86:e3:df:43:
99:d2:53:69:77:39:24:cd:66:f2:1a:be:dd:a4:d9:
e7:0c:83:c4:a2:67:3a:eb:90:22:8b:3f:b0:2e:eb:
0f:40:7f:4e:fb:c6:05:73:8c:5d:01:60:b7:87:c4:
11:5f:55:5b:a0:19:2f:b7:69:6f:58:91:60:54:a8:
68:a5:c6:41:65:5c:ba:a0:28:44:1a:d7:08:a6:f8:
78:71:53:12:9d:a4:5b:e9:80:af:f9:9f:7a:49:06:
dc:62:24:27:81:b7:7e:34:76:a1:1f:6a:f3:3f:f1:
d1:c4:fc:4e:db:1b:86:b6:29:c9:e5:ad:61:14:1c:
60:b6:23:82:7b:d6:cb:11:d7:7d:6b:ae:03:0e:6b:
c2:0d:47:5b:34:20:80:1c:06:b7:59:d4:b5:36:4c:
c1:62:b6:d6:3e:52:df:c9:8e:47:bf:a4:9a:c8:f9:
32:5a:c7:50:dc:d0:cb:32:00:8d:22:25:71:f7:55:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A7:E5:AF:EF:D3:18:1B:F8:F9:7B:21:26:83:DF:8C:ED:D3:37:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:15:2f:85:67:f6:63:cb:bd:3b:b4:ad:f6:77:85:14:89:aa:
95:15:5e:27:53:11:5d:e5:a9:47:63:f3:50:f4:54:d4:83:4a:
cc:f5:1d:c0:30:bd:0c:45:a9:e4:ec:58:fd:a1:b8:86:62:e5:
5a:7e:60:c7:68:99:4f:93:ca:08:46:aa:03:75:40:a0:65:ba:
97:c0:d7:39:8b:5e:1b:ba:55:a7:01:1f:ab:8b:60:2f:5a:ee:
84:69:4f:35:bc:1d:dd:1b:fb:01:b0:19:73:ce:c1:7f:a2:d4:
d2:b3:2e:76:ab:22:5d:85:d5:31:54:de:6c:0d:fb:cf:db:93:
5b:be:60:f4:05:48:45:16:17:b4:1a:23:7e:ea:82:93:95:64:
06:f9:1d:7b:07:59:ae:4c:0a:e3:41:f1:c0:75:50:1f:b8:90:
1f:19:dd:90:9f:b7:99:ab:0f:3b:2a:11:f7:d4:11:e7:6a:2e:
aa:2e:00:db:5d:e2:fb:c1:ca:72:3a:8d:4c:7b:70:49:3c:f8:
0d:78:05:0a:7a:c9:2d:57:4a:6d:6c:b2:e6:38:ad:b4:94:c5:
d6:78:bf:6d:fa:fa:90:d7:51:f0:c6:da:29:1e:17:13:04:4c:
90:a9:7b:1a:5e:4d:6e:2b:47:68:ec:5d:00:e8:57:30:2d:2d:
2d:50:12:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:15:57 2026 by rpki-client