
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/09f936fc-95a0-3018-bf28-0440ff7d50e5.roa
File: 09f936fc-95a0-3018-bf28-0440ff7d50e5.roa (raw, json)
Hash identifier: LNXSGEmXV0QjY9b/hsS0eL9k3cvObMqy/DpdRZn8Lm0=
Subject key identifier: 26:E3:44:57:A6:B7:B1:55:6D:EC:4A:02:69:96:AA:E6:2B:41:1A:C2
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584BB88D164D4134BB76CFC71A00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/09f936fc-95a0-3018-bf28-0440ff7d50e5.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 16509
IP address blocks: 130.137.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:16:4d:41:34:bb:76:cf:c7:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=ea5cd649-cd85-479c-aba1-60b1b777b26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:23:50:2c:d7:fe:63:97:0a:dc:a7:d0:49:
15:2c:45:42:a4:7c:d7:96:3b:53:47:75:c4:49:ce:
77:52:60:c9:9c:ac:69:4c:c4:b2:f4:c3:f4:00:cd:
f3:1f:ee:a7:71:db:5a:d2:54:93:1f:6f:e6:67:88:
a7:7f:75:12:8c:77:ea:c2:6c:81:6d:53:f9:79:e5:
f6:1d:d8:bb:27:f1:de:0f:18:77:2e:66:ee:1f:78:
ec:80:ea:67:0b:15:a1:39:02:cf:8b:d8:e0:38:21:
63:04:0d:b5:12:52:f5:ea:d6:2f:64:ee:a6:cd:f4:
1f:34:cf:86:54:c9:22:e3:d7:aa:c1:4d:b9:21:f8:
49:8e:7e:7e:61:11:2a:28:1e:74:65:f2:17:6e:ff:
47:1f:98:bb:75:75:df:d3:bb:98:6c:a5:6c:b5:81:
88:93:b3:7f:c5:53:ef:10:f6:ff:0b:db:38:81:a3:
8b:d9:bd:b2:2c:8e:2d:02:9a:0e:ad:4e:ce:99:66:
15:b0:bd:9a:a3:bb:19:55:6f:c9:2d:80:3d:9a:1e:
64:00:fa:e4:97:a3:a3:1b:f3:e9:e4:b0:51:40:6c:
dc:1a:be:45:27:07:dd:9d:74:4a:60:99:f3:34:a6:
6b:8d:8d:84:db:7b:94:6b:86:53:f6:5d:c5:37:51:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E3:44:57:A6:B7:B1:55:6D:EC:4A:02:69:96:AA:E6:2B:41:1A:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/09f936fc-95a0-3018-bf28-0440ff7d50e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:5a:f1:33:89:2e:5e:73:ca:e3:e6:f6:76:a7:2e:19:ec:bb:
c4:a8:09:20:6c:f1:90:7e:5b:76:bc:5f:47:a2:2f:1e:f3:44:
8a:2c:f0:c5:dc:0b:ea:39:da:57:f3:4f:55:be:66:ce:1b:d8:
79:e1:0f:e3:96:6d:bb:6e:9f:7c:8a:8d:42:5c:fe:a2:d4:db:
c1:6b:8a:33:8d:47:e1:9f:08:62:c2:c0:db:c8:96:22:cf:c1:
17:97:0b:73:db:f5:1f:ed:bd:85:7e:47:6f:bb:12:ab:ae:f7:
1e:d7:77:e2:a0:13:55:31:5d:0b:9f:10:de:23:78:a5:13:22:
cc:53:bf:cb:3c:e0:6a:04:22:d7:96:b4:cf:39:19:6f:4a:b4:
25:db:4c:27:a0:7a:62:e3:6d:fe:72:3d:72:1c:6c:3e:c7:f6:
fd:b2:a5:df:08:d1:d7:e5:e0:81:24:2e:8c:a0:52:9d:66:f9:
fc:16:30:04:85:9a:34:ba:fa:e0:cd:10:b2:94:a4:ed:6d:8d:
f6:ed:4a:8d:f6:a4:d8:ba:f4:19:ec:7d:fd:ca:b0:00:7e:d1:
8f:79:98:ce:03:c4:d4:86:96:35:c3:aa:db:5f:d8:ab:89:d5:
69:46:b3:a0:3d:00:ca:a5:9b:b0:cf:1b:ec:d4:d5:46:81:50:
40:b0:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:53 2025 by rpki-client