
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3094e6fa-20e4-3ece-ac65-374371d73b15.roa
File: 3094e6fa-20e4-3ece-ac65-374371d73b15.roa (raw, json)
Hash identifier: MZDREt+qR+kkbv5MnwLg7jW8s+KzyyofCfHvCnp7NEo=
Subject key identifier: 5D:2D:1D:4A:96:F6:A2:9A:29:98:57:5C:89:F9:91:7E:54:CC:EA:1D
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584BBB758588CD08BE5200496E00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3094e6fa-20e4-3ece-ac65-374371d73b15.roa
Signing time: Mon 03 Nov 2025 02:00:31 +0000
ROA not before: Mon 03 Nov 2025 02:00:31 +0000
ROA not after: Sun 01 Feb 2026 02:00:31 +0000
asID: 8987
IP address blocks: 130.137.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bb:75:85:88:cd:08:be:52:00:49:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Nov 3 02:00:31 2025 GMT
Not After : Feb 1 02:00:31 2026 GMT
Subject: CN=c2288a72-b3e5-44d7-bfe3-f32d435ad373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:41:22:5f:c2:25:dc:84:6b:f1:86:4c:87:
7a:e8:87:7d:25:a5:42:24:fd:17:9a:f5:f2:c8:dc:
ab:f3:e5:35:81:c6:da:7c:65:9e:a6:21:61:79:8e:
a0:06:3d:a6:59:82:54:8d:a4:d2:38:2a:9c:a8:1e:
9c:4e:46:4c:a1:e7:42:81:c8:98:0b:7b:5f:36:2d:
4e:7a:38:0a:79:0b:ae:20:f3:41:36:0b:c4:f9:9b:
de:ba:af:e1:45:34:9d:5e:0e:ea:2c:57:62:b4:33:
ce:ea:e4:ab:91:ee:a8:af:cb:20:62:b1:05:7d:a0:
70:df:83:d4:38:4a:d1:30:0d:5c:6f:64:df:17:e9:
dc:02:7b:af:29:be:29:0f:2a:d5:d3:8b:e4:af:2f:
06:65:a6:a0:d6:ed:18:14:bd:a0:70:ba:c2:a7:06:
b6:ff:35:3c:b7:3c:f7:09:b5:4b:bb:50:8b:61:59:
9a:b1:3a:a3:15:41:6a:57:19:ea:43:0e:54:9f:ce:
a6:40:7f:d6:aa:54:40:3c:d1:db:83:f7:b8:37:7d:
bd:04:10:39:df:20:f4:ee:83:d2:99:fd:8a:6a:af:
f0:d6:b8:f0:e3:88:f2:94:b0:71:e2:b6:a2:03:dc:
db:de:29:b2:a9:8e:5a:c1:fd:99:3b:29:92:63:73:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2D:1D:4A:96:F6:A2:9A:29:98:57:5C:89:F9:91:7E:54:CC:EA:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3094e6fa-20e4-3ece-ac65-374371d73b15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:f9:3e:c7:ce:00:03:50:d0:13:17:80:d3:3f:7c:37:e1:2a:
ad:07:61:44:50:de:60:47:14:76:ec:9e:4a:5d:18:88:78:b7:
9f:0c:e7:9b:de:52:88:1a:e2:5e:38:b8:a7:0d:eb:b9:31:89:
fe:20:a8:c6:1f:8b:90:ff:c3:81:4d:51:3e:12:5f:b6:e2:1d:
af:f8:8f:0d:87:e8:a7:59:6d:0d:5c:32:e8:be:55:c8:18:fd:
c4:82:2c:72:3d:2c:9d:76:e6:7e:59:12:2d:9b:00:6a:d1:3e:
4e:25:07:72:8e:6e:3e:ac:f0:b0:6e:f5:52:30:29:a4:c1:15:
8d:25:6a:6f:1a:73:6f:92:41:72:04:68:65:67:f0:46:43:08:
d9:c7:a6:9e:32:a4:fa:c2:2c:9b:e0:e1:00:6b:b0:09:d7:18:
84:a2:b0:f8:cf:7e:b5:c8:34:4e:4c:d5:bf:1e:bc:0c:5f:d7:
d4:96:09:65:53:83:4d:c0:c9:41:69:db:8c:44:63:1c:2b:cb:
19:b1:d4:a3:d5:cf:78:c7:02:1b:5e:4a:f4:2a:06:58:6a:03:
8c:f5:2c:15:7d:e6:6b:09:dd:99:9e:f9:45:b2:c6:b1:da:7b:
3e:19:a8:ed:d3:56:08:e6:a9:8b:e6:5a:ad:c4:b1:1e:81:80:
75:45:bc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:40:24 2025 by rpki-client