
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6e23dbe1-cf06-3846-81f9-a358f5d83ce3.roa
File: 6e23dbe1-cf06-3846-81f9-a358f5d83ce3.roa (raw, json)
Hash identifier: 59tNNZWMJYsPgUkF10wPpw/MMzxuW1KY4k+BC1t/1r0=
Subject key identifier: 49:8A:15:D4:60:A1:86:C7:8E:35:A1:E1:7C:B4:98:59:80:B2:CE:44
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584BBE402849DDFB934FC0FAFA00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6e23dbe1-cf06-3846-81f9-a358f5d83ce3.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 16509
IP address blocks: 130.137.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:28:49:dd:fb:93:4f:c0:fa:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=48a7bdc4-ad5b-496d-80b7-62a009df99a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:5a:aa:4b:c6:a6:f6:ac:03:ba:81:c9:9e:
c4:51:cd:99:a0:38:56:3e:47:5b:c0:dc:ed:cf:be:
47:b0:c4:e4:08:f7:27:45:cb:2f:52:72:18:22:30:
fd:17:2a:bc:9b:e7:8f:69:98:70:8e:8b:e6:12:93:
42:35:b5:01:ea:78:7c:f7:5d:d0:6d:6d:f0:b6:a6:
40:78:4d:d1:8c:76:9a:02:3e:cd:87:fb:6b:8d:e7:
01:97:17:d1:a8:d3:bd:30:84:7b:6b:3e:2f:a2:cf:
bb:3b:ea:96:bb:d4:58:8e:89:21:6c:2b:db:88:38:
5d:21:80:ee:b6:f6:75:0b:e2:9d:7f:e9:a5:81:7b:
e6:fb:9c:13:8c:42:a1:76:3b:e1:d6:b2:62:71:4d:
54:cf:65:c6:73:e9:b5:7d:4a:5d:8b:37:89:76:62:
20:57:ac:29:d6:06:ab:bc:6b:0c:f2:b8:55:9c:b6:
f3:f0:e7:af:da:09:fe:e5:39:65:8b:bb:e5:b0:16:
d8:79:ca:0b:83:71:20:09:5e:e3:cf:45:c4:e1:4c:
72:c0:68:a0:43:bd:d9:61:a0:55:84:c9:9b:65:39:
9f:b9:93:1f:ae:fe:2a:0f:4b:76:62:3e:1e:3b:c1:
3e:7d:e0:d4:da:25:ca:09:10:58:b6:71:17:78:f7:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8A:15:D4:60:A1:86:C7:8E:35:A1:E1:7C:B4:98:59:80:B2:CE:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6e23dbe1-cf06-3846-81f9-a358f5d83ce3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:ac:bf:22:d7:8f:28:7e:9f:0d:90:f0:c4:86:c9:6a:ee:c8:
f4:e8:1e:38:64:5a:e8:3e:26:55:0d:26:b8:96:db:21:a7:5f:
97:55:a3:6f:4e:9f:cc:0a:24:60:39:e6:94:11:20:2c:a9:07:
c8:9b:9d:53:12:09:82:94:d8:d8:e2:87:fb:4e:d4:53:19:68:
60:42:1b:b5:cb:6a:17:1e:78:c8:23:3f:cd:8e:44:75:d5:6f:
f3:9d:28:88:70:ea:0a:61:d8:31:eb:2f:c6:c6:8b:56:97:e1:
1d:1c:06:f9:e0:6b:9f:38:d8:2e:d2:28:e4:42:5b:18:32:79:
22:3c:9d:5b:f1:3f:65:fa:29:1e:92:1d:87:33:99:7d:9f:80:
28:a5:19:35:a1:b1:39:c8:82:45:1a:51:36:44:6c:d2:94:9c:
e4:4e:44:9c:5b:bf:4a:87:1b:72:b4:4a:f1:5d:7b:ee:b4:20:
ec:f4:de:f1:25:2b:f6:aa:db:a3:fc:33:9e:22:4d:0c:22:4b:
c7:d8:37:e2:89:80:25:76:7e:0c:9a:33:7e:e9:91:96:21:e8:
83:1a:71:53:90:0a:00:2a:9d:84:e9:8b:b4:b3:a7:15:eb:05:
df:f8:0e:db:a5:bb:0d:c5:65:b2:48:8c:8f:51:d9:ee:a3:9f:
9b:bc:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:43:43 2025 by rpki-client