
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/48ebc16d-41f4-3ab9-a2c7-5e1cb78ddbc2.roa
File: 48ebc16d-41f4-3ab9-a2c7-5e1cb78ddbc2.roa (raw, json)
Hash identifier: T/4xJOosiA5mgxqDlB40rX6mgLAO4Ji5PzNi2+Zyns4=
Subject key identifier: 10:F1:BB:8A:4A:F1:C0:38:8E:1D:39:4B:1D:5F:23:77:9C:BF:21:3C
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584D7A05235FC1A715043A5649E0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/48ebc16d-41f4-3ab9-a2c7-5e1cb78ddbc2.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 14618
IP address blocks: 130.137.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:23:5f:c1:a7:15:04:3a:56:49:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=a2392024-a2ce-47d7-9299-615b8b1ec5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:b0:bf:f7:4a:1f:fb:0f:88:7f:fb:6e:aa:
29:34:fe:d8:e4:08:61:c8:c4:b0:4b:8f:59:bb:0d:
44:06:dd:4d:5d:2a:f1:2d:78:be:37:8e:01:88:b1:
99:b5:93:6e:90:dc:d0:bf:2b:27:27:77:88:b4:06:
c7:d3:dd:3d:b4:b2:f9:2c:9e:4b:e5:58:c6:ea:79:
08:27:0f:24:74:6c:49:4f:a7:e3:85:38:44:36:c3:
a5:6a:b7:9d:4c:a7:f2:84:f2:3b:b8:86:49:e1:41:
65:32:7d:48:20:4c:ab:69:cb:9b:fd:21:e8:93:29:
93:84:53:0d:11:99:44:94:d0:f0:45:f1:76:04:7e:
69:ef:e7:14:87:93:1a:a1:bf:66:f5:1f:7b:54:43:
77:9d:e6:99:17:a4:21:d0:37:f3:93:4e:e2:d9:7c:
ee:0e:4d:79:cc:85:98:79:ec:09:ba:e0:4c:7b:63:
06:52:00:9e:52:f7:24:18:99:36:ae:6a:e4:c5:c2:
76:37:7d:9f:30:94:a2:72:2b:1b:4e:e6:43:4b:fe:
af:7a:c4:f5:54:1a:fa:bb:7f:94:32:4a:e6:4b:c5:
41:33:9f:8c:1c:ae:16:2f:29:17:f3:e6:56:4d:e4:
67:8f:4d:fe:aa:8b:b0:40:e0:6a:5d:bc:91:17:f5:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:BB:8A:4A:F1:C0:38:8E:1D:39:4B:1D:5F:23:77:9C:BF:21:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/48ebc16d-41f4-3ab9-a2c7-5e1cb78ddbc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:da:8a:18:f2:25:7f:e2:d5:fc:20:20:56:8f:3d:fb:59:75:
52:97:c9:a1:3d:0a:48:70:1f:ab:ec:d9:e4:29:f2:ff:06:b5:
fb:a8:2b:e6:52:20:66:93:6d:f6:6d:38:f8:64:c0:a2:c1:47:
40:5a:df:2a:dc:6e:0e:f2:96:75:e4:2e:1e:d7:4a:94:0b:30:
ff:ff:e4:f5:13:b8:05:5b:e5:fd:20:5e:59:db:7d:28:b1:11:
2a:5f:86:12:63:5a:14:0f:51:0b:dc:a9:25:02:93:fb:ba:ab:
80:63:d0:b0:0a:b0:44:46:66:f7:c7:49:cb:6a:19:4a:c0:e2:
26:cb:40:56:05:f4:0a:7e:e0:18:80:fd:20:a4:3f:ff:24:83:
d2:35:8d:44:31:79:b5:ad:d1:1e:fa:ac:0b:cf:4a:1b:94:eb:
40:e5:18:89:2b:41:56:18:98:33:01:5c:1d:3e:8d:ad:93:42:
4f:2c:07:16:05:a9:21:1a:f5:f4:cc:35:d2:20:88:32:b7:35:
ee:44:24:5f:89:9b:49:78:18:d6:70:71:37:3c:c4:e6:f5:d7:
27:b5:98:be:20:c0:cd:17:10:c5:99:35:5c:9d:8b:3a:1d:f6:
3e:ee:e3:9a:d0:f4:84:18:67:ac:b2:eb:a8:c9:76:3f:2b:19:
2d:f2:6b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:06 2026 by rpki-client