
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/76de275e-a4fa-3704-8a8f-bc3d6f07f960.roa
File: 76de275e-a4fa-3704-8a8f-bc3d6f07f960.roa (raw, json)
Hash identifier: 5gbTjTVpBCnn4beI8Nly0OSd24aZYpB9sHgsVHwouV4=
Subject key identifier: 42:1A:4B:DC:90:AB:10:DC:FF:FE:3D:4B:84:3F:C3:09:0F:DA:93:29
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584F189796055F34442EF6C50E00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/76de275e-a4fa-3704-8a8f-bc3d6f07f960.roa
Signing time: Mon 07 Sep 2026 13:00:12 +0000
ROA not before: Mon 07 Sep 2026 13:00:12 +0000
ROA not after: Sun 06 Dec 2026 14:00:12 +0000
asID: 8987
IP address blocks: 130.137.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:18:97:96:05:5f:34:44:2e:f6:c5:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Sep 7 13:00:12 2026 GMT
Not After : Dec 6 14:00:12 2026 GMT
Subject: CN=c7c92e67-0ab5-4871-8b99-3423c55930c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:93:16:e6:59:05:9d:75:83:06:ac:86:6b:
90:08:f0:e9:d1:d7:06:90:89:fa:a8:79:74:12:7e:
98:ea:72:2a:3b:ff:90:03:29:45:67:4a:49:e8:ad:
f0:48:4c:64:8e:8c:28:6e:41:fc:12:de:03:b6:16:
c5:ea:a7:61:08:c0:a4:67:65:b5:a9:ee:d0:95:09:
26:78:ad:b3:83:e2:df:ee:7c:d6:36:32:44:15:44:
8b:e2:8f:89:a3:07:f3:47:1b:ed:a2:7f:33:f1:da:
e7:d5:6d:30:22:03:60:95:a7:72:71:0b:5f:d1:1a:
76:d6:6d:33:57:c0:42:d9:59:98:d5:83:a4:04:3b:
b2:e5:59:63:04:30:ba:45:40:85:cc:0f:a0:7e:ad:
e2:0c:c4:7b:84:6c:6b:15:7e:fc:51:97:63:4d:95:
52:5d:83:a7:6c:bc:f6:84:6a:30:53:06:b4:fd:6e:
96:a1:3a:34:a7:03:02:4b:a1:b2:87:2e:cf:2b:89:
04:08:d0:13:e2:80:ff:0b:8f:50:7c:98:05:38:c6:
fb:03:2d:1f:94:95:5c:ba:95:3b:e2:aa:b6:bc:ee:
57:01:32:09:e8:84:9b:66:79:18:ce:2c:ec:a5:7d:
94:f5:fb:b8:1b:ed:12:bd:45:1a:b9:62:b0:a2:d6:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1A:4B:DC:90:AB:10:DC:FF:FE:3D:4B:84:3F:C3:09:0F:DA:93:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/76de275e-a4fa-3704-8a8f-bc3d6f07f960.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:86:3f:29:ca:62:3a:b8:63:06:0b:42:7e:1a:92:57:e1:b9:
84:71:54:d9:35:9a:4e:77:d3:f5:02:31:7f:84:ef:43:b8:af:
94:c4:d4:17:bf:dd:41:85:51:9c:c4:97:1d:47:ca:a4:a8:56:
07:42:3f:fe:bb:1f:6a:53:e2:08:e4:33:76:81:a8:cc:8f:25:
c7:21:69:78:63:69:ad:d3:28:b5:f2:d6:7d:e5:cc:25:6a:75:
38:b2:18:87:16:4e:e6:b6:c8:c3:ce:c4:bd:3a:98:2f:45:f0:
c3:ec:c1:c6:67:c5:e9:02:0e:b4:41:c1:8a:c6:e7:a7:c8:8e:
2e:2e:48:c8:01:b6:bb:ed:75:b3:5f:b2:16:c6:42:c2:6f:64:
08:f3:6b:78:5b:7a:5c:e6:6c:e9:2c:9c:17:91:53:40:c8:cf:
a3:89:59:42:a6:d2:f5:4f:82:b6:e4:9a:62:1f:3b:a0:1b:d8:
5a:b5:7d:e5:b4:cd:3c:5d:99:b4:1f:73:3a:14:4a:8e:2f:73:
c1:c4:71:83:b0:c6:15:d4:63:94:4f:cd:45:65:0a:b1:10:82:
af:6b:da:8f:01:7c:53:c7:c6:8b:5d:f8:0e:b9:35:b6:f9:c8:
46:a0:4e:72:2b:b1:e9:f9:e4:94:5a:60:8c:b2:23:1d:e0:e1:
f1:e5:d2:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5YFXzRELvbFDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk
YzdjOTJlNjctMGFiNS00ODcxLThiOTktMzQyM2M1NTkzMGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZeTFuZZBZ11gwashmuQCPDp0dcGkIn6qHl0
En6Y6nIqO/+QAylFZ0pJ6K3wSExkjowobkH8Et4DthbF6qdhCMCkZ2W1qe7QlQkm
eK2zg+Lf7nzWNjJEFUSL4o+JowfzRxvton8z8drn1W0wIgNgladycQtf0Rp21m0z
V8BC2VmY1YOkBDuy5VljBDC6RUCFzA+gfq3iDMR7hGxrFX78UZdjTZVSXYOnbLz2
hGowUwa0/W6WoTo0pwMCS6Gyhy7PK4kECNAT4oD/C49QfJgFOMb7Ay0flJVcupU7
4qq2vO5XATIJ6ISbZnkYzizspX2U9fu4G+0SvUUauWKwotZasQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEIaS9yQqxDc//49S4Q/wwkP2pMpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNzZkZTI3NWUtYTRmYS0z
NzA0LThhOGYtYmMzZDZmMDdmOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgon8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+GPynKYjq4YwYLQn4aklfhuYRxVNk1mk530/UCMX+E70O4r5TE1Be/
3UGFUZzElx1HyqSoVgdCP/67H2pT4gjkM3aBqMyPJcchaXhjaa3TKLXy1n3lzCVq
dTiyGIcWTua2yMPOxL06mC9F8MPswcZnxekCDrRBwYrG56fIji4uSMgBtrvtdbNf
shbGQsJvZAjza3hbelzmbOksnBeRU0DIz6OJWUKm0vVPgrbkmmIfO6Ab2Fq1feW0
zTxdmbQfczoUSo4vc8HEcYOwxhXUY5RPzUVlCrEQgq9r2o8BfFPHxotd+A65Nbb5
yEagTnIrsen55JRaYIyyIx3g4fHl0nY=
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:18:32 2026 by rpki-client