
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0ef970e6-d4e8-3790-901d-8464307c9a2e.roa
File: 0ef970e6-d4e8-3790-901d-8464307c9a2e.roa (raw, json)
Hash identifier: 96YrX/sxuTw2KK/BJv+7Qk9ItQnKtgnMyBz1lVgdCQk=
Subject key identifier: AB:2B:F3:9F:2E:71:0F:55:85:3A:43:A2:88:EE:F7:91:70:E1:0B:2E
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584D7CCFCC4C802CFFFB8F6FA600
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0ef970e6-d4e8-3790-901d-8464307c9a2e.roa
Signing time: Mon 13 Apr 2026 01:00:24 +0000
ROA not before: Mon 13 Apr 2026 01:00:24 +0000
ROA not after: Sun 12 Jul 2026 01:00:24 +0000
asID: 8987
IP address blocks: 130.137.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7c:cf:cc:4c:80:2c:ff:fb:8f:6f:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Apr 13 01:00:24 2026 GMT
Not After : Jul 12 01:00:24 2026 GMT
Subject: CN=e76fc4e5-89de-4746-9d0a-95cf0f022836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e9:a8:e9:6d:45:07:90:d0:50:a9:db:c7:e8:
36:e9:57:43:c4:82:20:94:b7:4b:cc:ab:9b:c9:1e:
5c:fe:e8:8a:38:1b:5a:f4:5c:0a:91:9b:b4:88:6f:
bc:8a:d7:13:a4:c6:76:03:45:aa:f8:15:f9:fc:a3:
c7:a5:90:91:5f:cf:16:45:27:76:76:1c:3e:23:6f:
85:51:3c:e4:41:8d:fa:6b:06:51:2b:82:24:68:e8:
0f:36:23:62:70:7a:bc:84:81:5c:e7:5d:60:46:cc:
b8:4d:40:90:b2:a8:dc:c3:50:19:ab:16:98:75:e7:
72:78:74:da:d6:e4:6c:d1:ee:8b:2c:a1:76:f7:c3:
eb:76:0d:f7:67:3e:ec:2a:38:c3:5b:c7:9d:17:1f:
1a:ad:69:4c:aa:98:5f:0d:7e:52:fe:8e:ad:be:ca:
d3:51:57:ff:28:ca:14:b0:27:0e:96:a2:27:7f:1f:
7a:ad:aa:69:94:87:29:e1:40:6c:58:ec:cc:eb:8c:
ce:e7:6f:42:fb:d8:33:c4:21:78:bc:67:24:f9:07:
ab:a2:2d:4c:98:9a:39:2c:33:44:99:ee:02:6e:3b:
ea:ff:da:eb:70:d6:4d:f5:93:91:59:64:9e:5a:da:
9a:9e:5c:63:a3:49:be:8b:79:86:e2:3d:1a:e7:f8:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2B:F3:9F:2E:71:0F:55:85:3A:43:A2:88:EE:F7:91:70:E1:0B:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0ef970e6-d4e8-3790-901d-8464307c9a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:47:05:23:87:c3:b4:a3:a7:66:66:35:38:a1:3a:84:79:da:
55:fd:3d:65:e1:4b:e8:f8:58:a7:81:f6:5c:75:7f:88:49:16:
7a:6b:a5:68:38:d2:ea:e8:a0:c3:5e:35:22:9d:75:0e:0e:d4:
d6:2b:df:22:60:87:12:66:c8:2b:5b:28:61:ff:77:94:e1:02:
e1:ff:ae:27:31:db:f5:7b:ab:ac:ce:38:6a:5a:65:fc:b6:75:
c6:3e:d6:a7:95:dd:6e:a4:bf:e1:13:b8:ab:45:7d:3e:2f:ac:
7a:63:3a:02:db:a0:55:61:e6:b6:a5:8f:a9:4e:40:f7:ab:5e:
b7:27:8c:3c:ef:0b:1f:3a:15:58:e9:7d:75:f6:92:0f:9e:b3:
84:92:43:77:df:77:3f:75:05:13:c0:f0:59:84:00:54:6f:b2:
9f:84:1b:4b:5d:37:15:ad:cd:40:0b:c5:a8:be:45:d1:08:35:
1c:86:61:f6:df:be:59:06:92:e4:5d:d2:1d:9c:91:9a:02:08:
70:3e:d8:49:7e:24:6e:cf:ea:d5:be:c2:87:12:89:20:0b:94:
87:a3:34:c5:6d:9b:68:8e:37:a0:51:14:66:ba:a3:5d:db:06:
15:de:b3:1b:9c:33:96:e2:0b:86:d2:08:5f:17:2c:e0:f2:d7:
53:6e:f5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:57:03 2026 by rpki-client