
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0332aedc-95c1-37e8-9209-30a498b49ce0.roa
File: 0332aedc-95c1-37e8-9209-30a498b49ce0.roa (raw, json)
Hash identifier: QW2U2rJImVkvA5PF+2FhAS4sHKY0NEH0ipQIi4j3QJg=
Subject key identifier: 3E:75:EB:32:45:0B:92:2A:E4:09:8F:D5:70:80:EB:87:29:1D:C5:DC
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584BBE402ECBBE209D0D09988700
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0332aedc-95c1-37e8-9209-30a498b49ce0.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 8987
IP address blocks: 130.137.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:2e:cb:be:20:9d:0d:09:98:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=6f72ae31-4bed-4efe-9890-fbfbc66773ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:ac:57:c5:af:80:10:84:da:98:65:73:9d:
25:d0:18:a1:cd:cd:73:23:8b:5a:a8:80:fe:3f:62:
04:a0:11:32:c5:bd:3b:63:48:2f:ab:f8:b4:ad:ec:
4e:9b:6c:ee:7d:04:57:a5:45:48:dd:06:f3:d8:25:
42:8b:3a:31:55:49:1f:e7:3c:a0:a7:d5:e0:a8:2b:
38:50:a1:2e:d2:23:d5:e2:ae:5a:05:3e:08:ea:e9:
63:89:15:84:63:89:21:9c:b1:e1:ac:52:7f:f2:dc:
65:cf:ef:81:a6:9d:ce:51:1c:25:b6:0e:dd:6a:2e:
fe:fc:b5:d2:f0:94:63:bb:ec:28:dd:2c:40:6c:7e:
d3:9e:5b:65:50:8c:0c:29:3a:20:01:b4:d3:e9:ef:
7a:21:09:c9:1b:2c:16:d8:ee:eb:6a:33:92:e6:84:
fc:85:98:dc:a5:ff:a9:35:d5:42:3c:83:86:f9:e3:
e4:f0:b5:90:6a:b3:3a:8c:7a:a6:17:46:f3:12:29:
a8:ec:ed:4e:f4:6e:40:df:8c:1b:1c:3a:3b:cf:22:
80:e3:6d:92:03:8b:de:80:3b:50:b9:0f:37:98:ab:
11:ae:1e:48:89:16:2a:a3:0c:14:f5:87:c0:02:b0:
bf:43:ea:be:d4:1e:7f:db:52:de:cf:6d:eb:d2:78:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:75:EB:32:45:0B:92:2A:E4:09:8F:D5:70:80:EB:87:29:1D:C5:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0332aedc-95c1-37e8-9209-30a498b49ce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:04:11:bd:08:56:cc:08:93:c1:ef:c8:8c:46:34:8f:f4:79:
19:2e:18:88:f9:ae:89:a9:57:4a:2a:5c:a5:96:7f:6c:a1:24:
a0:0f:71:de:d4:e1:e2:2a:30:2d:2c:e0:24:df:34:9e:86:65:
9a:51:d8:33:7e:81:e5:f8:07:87:9c:20:ad:5e:f8:17:27:16:
cd:89:99:b4:97:49:7d:de:c4:3a:1f:ce:3d:90:2d:8a:5c:9c:
77:ac:ce:b3:9f:29:f7:bc:b2:be:35:50:54:d2:e9:04:ea:8d:
76:fe:72:ce:86:8d:2e:6a:85:b4:6c:e6:e6:22:50:33:ec:d4:
55:ae:a5:b5:3f:ae:51:2f:3a:63:b1:30:a3:a6:e4:88:25:5f:
f0:34:0e:ae:20:03:8a:a2:31:f8:c5:21:b4:cc:90:24:6f:95:
63:f5:c7:7a:4b:51:44:83:6c:63:5e:9c:1d:3c:89:42:96:fb:
cf:91:9f:bd:bc:f8:3e:13:f4:87:a9:87:ba:9b:e1:f1:c8:96:
5c:0d:6f:cc:f8:bb:52:c6:03:64:94:33:65:72:dd:46:d9:fe:
fb:7a:be:8b:f7:53:0d:96:df:2a:31:aa:fa:bd:14:8c:15:d8:
25:da:00:8c:ef:58:6b:49:1d:24:37:02:a3:ec:92:c4:fc:20:
8b:93:34:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QC7LviCdDQmYhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk
NmY3MmFlMzEtNGJlZC00ZWZlLTk4OTAtZmJmYmM2Njc3M2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd2sV8WvgBCE2phlc50l0Bihzc1zI4taqID+
P2IEoBEyxb07Y0gvq/i0rexOm2zufQRXpUVI3Qbz2CVCizoxVUkf5zygp9XgqCs4
UKEu0iPV4q5aBT4I6uljiRWEY4khnLHhrFJ/8txlz++Bpp3OURwltg7dai7+/LXS
8JRju+wo3SxAbH7TnltlUIwMKTogAbTT6e96IQnJGywW2O7rajOS5oT8hZjcpf+p
NdVCPIOG+ePk8LWQarM6jHqmF0bzEimo7O1O9G5A34wbHDo7zyKA422SA4vegDtQ
uQ83mKsRrh5IiRYqowwU9YfAArC/Q+q+1B5/21Lez23r0njEMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD516zJFC5Iq5AmP1XCA64cpHcXcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMDMzMmFlZGMtOTVjMS0z
N2U4LTkyMDktMzBhNDk4YjQ5Y2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYEEb0IVswIk8HvyIxGNI/0eRkuGIj5rompV0oqXKWWf2yhJKAPcd7U
4eIqMC0s4CTfNJ6GZZpR2DN+geX4B4ecIK1e+BcnFs2JmbSXSX3exDofzj2QLYpc
nHeszrOfKfe8sr41UFTS6QTqjXb+cs6GjS5qhbRs5uYiUDPs1FWupbU/rlEvOmOx
MKOm5IglX/A0Dq4gA4qiMfjFIbTMkCRvlWP1x3pLUUSDbGNenB08iUKW+8+Rn728
+D4T9Ieph7qb4fHIllwNb8z4u1LGA2SUM2Vy3UbZ/vt6vov3Uw2W3yoxqvq9FIwV
2CXaAIzvWGtJHSQ3AqPsksT8IIuTNLw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:00:12 2025 by rpki-client