
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa
File: e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa (raw, json)
Hash identifier: iOaCI05n5tsS11h5EDrYtjPmahg8MKKFvKmpEQ5k1rA=
Subject key identifier: FE:66:F3:F3:B9:A8:7D:BB:B3:3C:E7:F3:C6:44:85:E4:73:61:5D:F2
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584D932545F20AA7E531A1552300
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa
Signing time: Tue 21 Apr 2026 01:00:24 +0000
ROA not before: Tue 21 Apr 2026 01:00:24 +0000
ROA not after: Mon 20 Jul 2026 01:00:24 +0000
asID: 8987
IP address blocks: 130.137.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:93:25:45:f2:0a:a7:e5:31:a1:55:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Apr 21 01:00:24 2026 GMT
Not After : Jul 20 01:00:24 2026 GMT
Subject: CN=da66e445-78b3-4dce-8e6c-9c9841a0268f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:2b:85:43:65:57:e8:39:1d:a0:2b:02:d2:
0f:b8:d4:13:de:31:c6:db:cd:7e:61:c6:73:89:77:
9f:4a:1d:61:ce:7f:31:ee:ac:44:ac:81:49:32:b4:
13:f7:0a:33:43:16:42:13:dd:8b:d7:0b:53:0f:37:
70:1b:f9:10:8c:5a:ff:38:1d:47:a8:fe:64:30:a1:
95:f6:87:42:f2:36:36:64:b6:8a:da:bf:3c:fb:40:
2c:7d:3f:49:ae:0c:f4:8c:59:65:7d:22:70:b8:8d:
d8:31:28:94:95:51:c6:28:29:12:a6:a1:07:2e:c3:
d3:b3:dc:9d:36:8d:c4:50:12:eb:65:31:2e:f4:70:
ea:24:4b:da:54:31:5f:fb:73:39:bd:5d:fc:c1:30:
26:64:b8:53:5d:a4:a6:6b:4d:de:c8:36:41:8b:d2:
18:a9:63:28:4d:fd:e0:e5:55:5d:82:33:96:45:fa:
3d:17:1f:ab:2a:3a:7d:f0:4f:3e:dc:7f:80:8c:be:
71:1c:65:a9:f7:77:63:3b:2d:33:70:b8:0c:1b:b3:
72:c5:63:ef:58:e6:2a:97:95:12:ac:80:e4:d9:68:
19:1f:4a:8f:e3:60:fd:cf:90:d0:b1:a8:4f:dc:90:
d7:74:28:ec:ae:db:bd:d2:78:0a:46:58:dd:27:b3:
5f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:66:F3:F3:B9:A8:7D:BB:B3:3C:E7:F3:C6:44:85:E4:73:61:5D:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:11:4a:d2:19:47:79:dc:90:87:db:e9:fb:53:b9:00:8d:21:
d9:4a:64:89:6a:04:74:31:67:94:ed:28:5a:e8:ff:dd:66:74:
00:37:3b:03:2f:24:26:55:62:a7:fd:a8:88:88:ec:f8:d0:6e:
cf:c8:30:27:2d:76:49:18:a0:0e:93:cf:a7:4e:a3:70:05:c9:
c2:ed:31:99:70:3d:56:cf:46:2d:1e:d5:d8:5c:9e:d6:03:25:
88:2d:0c:ed:80:4b:01:52:03:43:47:64:8c:11:41:3d:b2:b1:
ff:ab:70:97:a5:ec:03:d3:a5:7a:7e:be:31:1c:ae:67:a4:2d:
07:93:cb:90:85:55:8b:98:69:3b:72:ad:4e:dc:51:97:17:fb:
d5:6b:58:7c:b5:89:60:61:f8:ef:aa:e4:d9:ad:f1:5d:a1:96:
53:9d:a0:65:ff:ac:b2:ec:bc:cc:75:42:04:96:3e:65:c9:11:
f0:d7:96:81:42:f6:36:f1:05:d0:9b:7a:ee:3e:ce:e3:7f:5d:
f1:48:a8:46:8b:3a:ed:8b:d6:6d:c0:03:71:8d:a4:7d:33:e2:
9d:51:60:df:10:f9:4c:3c:a0:3c:3a:54:01:89:c4:86:1e:90:
cf:a9:47:6e:b9:c9:67:88:12:0d:72:de:ba:0a:0f:37:48:a2:
7f:04:95:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 16:36:37 2026 by rpki-client