
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa
File: 42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa (raw, json)
Hash identifier: Zn74ZZBzTODS7vtvyonHnjFlS8rou4gY0JVhlLaerkY=
Subject key identifier: 3E:98:5E:06:81:7C:6B:7E:AB:4F:A3:09:41:98:5C:6C:CD:72:2A:DF
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584CAA27068D836A85153834C800
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 16509
IP address blocks: 130.137.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:06:8d:83:6a:85:15:38:34:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=ea6b82f9-6efe-4ed5-9e4c-7c8663bff892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:16:e0:fe:71:c7:cc:86:9c:b2:10:a6:ea:
42:03:c0:42:98:1b:a9:04:c6:13:5a:04:74:9b:ba:
18:20:a1:53:b9:fb:67:b3:ed:b3:7e:05:d1:24:d1:
32:98:6f:68:79:e2:cc:0a:2a:fb:c7:2b:c8:e7:34:
ce:c3:85:bb:94:71:ed:69:d8:a4:13:0d:bb:06:30:
db:10:87:7b:08:f8:9c:96:f4:b3:81:9e:32:7f:17:
f7:a0:7e:aa:e8:14:95:4c:6b:34:09:08:c7:60:28:
2e:82:d3:0b:82:a7:31:48:fd:ce:48:34:8d:ed:f6:
06:d6:f2:13:0e:3c:5f:b2:86:4a:dc:7a:6b:08:52:
14:96:41:95:2a:24:06:8a:9b:f1:ab:fa:9a:ed:ab:
64:86:94:55:45:ce:54:04:0d:bf:05:cc:7f:cd:f2:
aa:57:99:74:9a:c2:03:6a:1c:b1:6c:fa:f7:4d:fe:
b4:92:80:84:f8:0e:33:f8:c3:98:98:e1:85:36:f3:
f2:97:3b:22:b5:97:10:9e:30:00:bb:a3:42:c6:e6:
bd:aa:db:40:d1:b7:d0:63:97:59:2a:7a:03:6f:9b:
c4:76:bc:71:48:cc:90:2f:ba:91:cb:ec:9a:1b:3a:
3b:cc:64:dc:56:30:2b:69:70:17:dd:c9:35:cf:5a:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:98:5E:06:81:7C:6B:7E:AB:4F:A3:09:41:98:5C:6C:CD:72:2A:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:e4:54:c9:44:d6:ce:26:12:0d:2d:38:93:df:8e:21:53:71:
11:8d:1e:ab:65:57:b7:96:b9:ca:b8:13:43:47:d7:5a:65:6f:
4a:bf:24:0b:ed:25:5b:f2:73:cc:6c:19:a9:2b:20:5f:1d:7f:
bf:38:80:b9:81:4a:f7:b6:10:6e:81:6f:5c:5c:bb:cc:0d:fb:
71:8c:06:26:a1:4e:8b:e6:29:5e:b3:6e:30:bf:5f:fd:01:14:
ec:5d:a1:d9:7b:cc:87:39:ff:cf:8d:17:98:b9:6b:bb:d7:01:
58:82:47:b6:8e:67:02:16:e2:bb:8c:73:fd:80:13:8d:5d:37:
cd:d3:34:86:30:a0:2b:b3:9a:bc:60:c1:a3:18:93:a1:d0:f7:
ab:4b:3d:70:4f:4c:e8:36:c3:95:c3:25:6c:aa:c8:a8:41:e2:
6b:53:57:61:77:44:18:29:24:c7:78:10:b5:be:a6:b6:62:9e:
c4:2c:85:cb:91:1e:21:36:17:9c:4d:27:ff:5e:52:ac:cf:13:
84:d9:ff:a4:06:a0:48:5b:7b:d4:d9:95:7b:8a:b8:af:bf:0d:
a5:77:38:be:bb:33:84:3f:12:15:b3:f2:c7:cd:b9:1b:0f:55:
9a:65:54:29:f5:2c:af:52:c8:4e:14:ec:32:7d:64:c7:cb:a9:
bd:8a:77:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwaNg2qFFTg0yAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk
ZWE2YjgyZjktNmVmZS00ZWQ1LTllNGMtN2M4NjYzYmZmODkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyIW4P5xx8yGnLIQpupCA8BCmBupBMYTWgR0
m7oYIKFTuftns+2zfgXRJNEymG9oeeLMCir7xyvI5zTOw4W7lHHtadikEw27BjDb
EId7CPiclvSzgZ4yfxf3oH6q6BSVTGs0CQjHYCgugtMLgqcxSP3OSDSN7fYG1vIT
DjxfsoZK3HprCFIUlkGVKiQGipvxq/qa7atkhpRVRc5UBA2/Bcx/zfKqV5l0msID
ahyxbPr3Tf60koCE+A4z+MOYmOGFNvPylzsitZcQnjAAu6NCxua9qttA0bfQY5dZ
KnoDb5vEdrxxSMyQL7qRy+yaGzo7zGTcVjAraXAX3ck1z1rbSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6YXgaBfGt+q0+jCUGYXGzNcirfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDI3MDhiY2UtNjY3My0z
YzliLWEzYzYtNDhlZWFjMWUzYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXkVMlE1s4mEg0tOJPfjiFTcRGNHqtlV7eWucq4E0NH11plb0q/JAvt
JVvyc8xsGakrIF8df784gLmBSve2EG6Bb1xcu8wN+3GMBiahTovmKV6zbjC/X/0B
FOxdodl7zIc5/8+NF5i5a7vXAViCR7aOZwIW4ruMc/2AE41dN83TNIYwoCuzmrxg
waMYk6HQ96tLPXBPTOg2w5XDJWyqyKhB4mtTV2F3RBgpJMd4ELW+prZinsQshcuR
HiE2F5xNJ/9eUqzPE4TZ/6QGoEhbe9TZlXuKuK+/DaV3OL67M4Q/EhWz8sfNuRsP
VZplVCn1LK9SyE4U7DJ9ZMfLqb2Kdx0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:42 2026 by rpki-client