
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19c7da6f-0b63-3e7f-9ee5-04cc2bce160c.roa
File: 19c7da6f-0b63-3e7f-9ee5-04cc2bce160c.roa (raw, json)
Hash identifier: zPgetBXGY9ug8Jk9412dizYnruSHaGMWNNgEg2XA2ME=
Subject key identifier: A4:08:D5:D1:97:59:F9:49:1C:35:06:0D:0C:4B:7A:75:02:17:4B:EB
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584CA061A79CA6A82F064BC4DF40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19c7da6f-0b63-3e7f-9ee5-04cc2bce160c.roa
Signing time: Sat 24 Jan 2026 02:00:31 +0000
ROA not before: Sat 24 Jan 2026 02:00:31 +0000
ROA not after: Fri 24 Apr 2026 01:00:31 +0000
asID: 14618
IP address blocks: 130.137.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a0:61:a7:9c:a6:a8:2f:06:4b:c4:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Jan 24 02:00:31 2026 GMT
Not After : Apr 24 01:00:31 2026 GMT
Subject: CN=8d646fbb-789a-42e8-a84f-d4741471352c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:50:fc:8a:70:10:88:30:b6:b5:88:de:ea:d8:
65:b4:28:05:3c:d5:02:bd:be:7e:e0:92:3a:80:58:
8e:a2:b1:ef:1a:ac:35:89:2b:e9:bb:6d:01:54:99:
95:47:e5:10:f3:09:32:7d:aa:b3:0d:52:84:fc:57:
e3:31:2f:68:d9:04:f5:10:73:83:48:5e:57:30:47:
db:c9:de:40:78:e3:db:8c:70:33:3f:57:b0:10:4e:
5b:83:5d:56:34:80:74:72:8b:10:a9:5b:95:32:31:
4a:cc:7d:35:2d:b8:5e:82:5f:83:78:56:a7:ad:7a:
3a:59:af:4c:52:7b:12:ed:c0:b2:44:6c:9f:cd:49:
1f:3b:21:90:3f:a4:2d:5f:8a:61:4b:1c:38:20:30:
19:0a:65:eb:47:74:d7:a4:ab:35:a5:be:4d:95:c4:
91:5d:11:cd:81:75:2b:a7:bd:b8:6e:d1:5e:f7:fa:
2c:48:a4:e8:0d:5c:60:9b:70:09:10:9f:0b:9d:3f:
bd:b6:e4:5f:88:db:5a:e0:b1:ec:4c:39:7b:27:ab:
69:09:a5:7f:3b:48:64:a1:f1:d4:5a:bd:d1:63:c5:
d7:7b:e3:3a:c3:70:28:2c:00:3d:73:80:51:bd:fa:
b8:da:19:86:6e:43:93:06:c1:16:5b:40:ce:57:aa:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:08:D5:D1:97:59:F9:49:1C:35:06:0D:0C:4B:7A:75:02:17:4B:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19c7da6f-0b63-3e7f-9ee5-04cc2bce160c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:d8:3a:02:9b:05:61:95:97:10:79:28:d1:b5:44:77:2b:5d:
5d:d2:df:50:cb:1e:a2:3c:26:d0:81:f6:9e:a9:06:db:c3:ee:
51:cc:43:28:36:5c:ad:cd:27:d1:df:d8:9b:f6:56:a2:48:39:
c8:de:6a:01:fd:99:06:27:a5:22:37:7a:cc:7f:4b:aa:f1:ae:
83:e1:cd:4c:2f:ee:ea:c9:af:77:b3:41:bc:7b:fa:6b:7f:5d:
2f:1f:98:00:77:94:d9:64:00:05:eb:35:2b:cd:b7:db:15:94:
72:a1:08:39:ae:6c:7b:8c:94:e4:6e:2e:44:40:a7:11:f9:72:
59:51:ba:af:ff:ce:69:82:0c:c6:4d:dc:d0:ba:7f:03:a4:d1:
4a:1d:8b:27:63:4b:7e:e8:df:49:b6:ce:51:c0:c7:43:df:52:
f7:50:23:10:68:42:0d:bf:a2:83:78:82:5f:cb:25:6c:ff:0e:
dd:fd:ff:08:3a:88:f3:12:89:20:3a:84:83:aa:be:28:6b:d1:
28:ea:87:5b:b9:6b:66:6d:04:23:c3:b8:f5:76:1c:85:ee:5e:
93:13:60:dd:40:21:31:07:c1:35:9e:94:34:93:db:8e:51:9a:
0e:6d:3b:95:cd:10:a3:a8:f9:28:4f:d6:de:7d:5a:77:74:a6:
f0:95:c7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:20 2026 by rpki-client