
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa
File: 2b802f54-be87-3e85-b569-cf6fbafa55b0.roa (raw, json)
Hash identifier: fNCgbnH0uJX+/B4NQN0KctShET+9JNbrYCxGqQuZnLs=
Subject key identifier: AF:A3:18:12:1F:9A:64:7C:6D:7E:14:F3:00:DA:9F:71:DD:A0:6E:E6
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584EB6E1A15810E96A0114CD6E40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa
Signing time: Mon 03 Aug 2026 13:00:12 +0000
ROA not before: Mon 03 Aug 2026 13:00:12 +0000
ROA not after: Sun 01 Nov 2026 14:00:12 +0000
asID: 16509
IP address blocks: 130.137.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b6:e1:a1:58:10:e9:6a:01:14:cd:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Aug 3 13:00:12 2026 GMT
Not After : Nov 1 14:00:12 2026 GMT
Subject: CN=c382c10a-8a0f-4d03-b4d3-55e29a858288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:88:8c:7e:4f:5a:f6:c9:68:cb:05:88:3d:
c3:19:04:b4:0a:1b:13:2f:13:cd:2a:8f:89:52:8a:
36:22:86:40:5d:03:9a:c4:5e:45:4d:b8:8d:e5:72:
72:7e:e9:b1:b2:39:a2:7d:46:ca:c6:f4:57:18:52:
cb:33:1a:93:fa:7b:64:a8:6e:7a:65:6c:03:41:5a:
cf:05:2d:99:a0:1c:fc:f6:de:b5:83:83:bd:06:59:
d5:42:bc:10:55:a4:83:ac:e5:60:75:e1:ae:85:3a:
bf:4d:b3:0b:39:21:66:c8:ce:4c:6e:d9:b3:ce:c0:
5c:ad:a2:cb:25:5e:29:df:38:a5:02:04:01:ab:d0:
2b:da:0b:9d:d8:79:32:d4:61:ae:cd:0a:bf:8f:b7:
e5:fc:0e:31:40:5b:de:5c:9a:29:ed:e2:d2:08:08:
f6:fc:95:9b:83:40:0f:fb:e9:4d:88:76:d2:3c:e9:
5f:07:9c:c0:b4:7a:59:a9:b6:25:87:44:d1:ff:ec:
78:67:9c:6d:97:f5:4a:fc:7c:ef:ef:de:02:e8:66:
d9:b2:0c:e4:56:b1:5a:55:87:a1:20:1c:02:3b:c3:
2f:18:de:9c:7d:02:f7:a5:de:c3:15:fc:c4:b7:a2:
02:b3:bb:11:fa:ad:8c:8e:7b:00:4c:fd:7f:92:ea:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A3:18:12:1F:9A:64:7C:6D:7E:14:F3:00:DA:9F:71:DD:A0:6E:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:54:f5:94:ab:19:a4:4b:e9:8b:a2:c2:b8:48:6b:65:62:a2:
e9:1e:61:89:d4:cb:a8:42:a8:97:89:98:c0:da:0e:d6:9e:a1:
58:0e:ca:a8:98:15:c3:57:62:6a:97:fe:20:a2:51:a0:7c:a6:
4d:bd:dd:25:60:9e:81:26:53:17:da:4d:e2:fa:96:00:b6:71:
2e:4b:76:e8:f9:7a:77:88:7e:8d:ba:34:0f:c0:eb:54:81:4f:
21:14:2a:25:8b:0e:9b:2a:ad:bb:b4:8a:62:dd:be:ba:7c:37:
d5:a5:05:d2:b6:83:21:3c:6d:86:21:96:a6:d9:e6:d3:f8:73:
74:b1:2b:9e:ba:c7:4a:b2:5f:9d:07:1c:6b:a0:aa:a7:5d:d2:
7a:2b:80:26:ca:be:62:70:29:f2:95:63:79:94:2c:82:3b:cd:
5a:6f:c1:1e:c2:ce:79:32:97:a9:57:ba:bd:da:52:a6:5f:f1:
12:8f:b7:37:46:9d:6a:ba:2b:cb:40:7a:c9:3f:cb:dc:3a:75:
5c:c5:8c:df:82:de:3e:d1:04:dd:8f:0f:64:03:ef:95:c0:ae:
70:8e:23:af:73:0a:16:64:16:65:d2:7f:8d:d0:33:8b:9c:53:
59:c4:ce:88:7d:9f:0f:57:d9:d0:79:13:69:59:46:f4:dd:17:
6e:df:1f:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624aFYEOlqARTNbkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk
YzM4MmMxMGEtOGEwZi00ZDAzLWI0ZDMtNTVlMjlhODU4Mjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzySIjH5PWvbJaMsFiD3DGQS0ChsTLxPNKo+J
Uoo2IoZAXQOaxF5FTbiN5XJyfumxsjmifUbKxvRXGFLLMxqT+ntkqG56ZWwDQVrP
BS2ZoBz89t61g4O9BlnVQrwQVaSDrOVgdeGuhTq/TbMLOSFmyM5MbtmzzsBcraLL
JV4p3zilAgQBq9Ar2gud2Hky1GGuzQq/j7fl/A4xQFveXJop7eLSCAj2/JWbg0AP
++lNiHbSPOlfB5zAtHpZqbYlh0TR/+x4Z5xtl/VK/Hzv794C6GbZsgzkVrFaVYeh
IBwCO8MvGN6cfQL3pd7DFfzEt6ICs7sR+q2MjnsATP1/kuqKgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+jGBIfmmR8bX4U8wDan3HdoG7mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmI4MDJmNTQtYmU4Ny0z
ZTg1LWI1NjktY2Y2ZmJhZmE1NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtU9ZSrGaRL6YuiwrhIa2VioukeYYnUy6hCqJeJmMDaDtaeoVgOyqiY
FcNXYmqX/iCiUaB8pk293SVgnoEmUxfaTeL6lgC2cS5Lduj5eneIfo26NA/A61SB
TyEUKiWLDpsqrbu0imLdvrp8N9WlBdK2gyE8bYYhlqbZ5tP4c3SxK566x0qyX50H
HGugqqdd0norgCbKvmJwKfKVY3mULII7zVpvwR7Cznkyl6lXur3aUqZf8RKPtzdG
nWq6K8tAesk/y9w6dVzFjN+C3j7RBN2PD2QD75XArnCOI69zChZkFmXSf43QM4uc
U1nEzoh9nw9X2dB5E2lZRvTdF27fH3s=
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:41:57 2026 by rpki-client