
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a86fcde3-2133-330a-afd1-750691f9ac45.roa
File: a86fcde3-2133-330a-afd1-750691f9ac45.roa (raw, json)
Hash identifier: TMHCcIdNkqvIXvST5plUrECmM+KCBDDC4NFgmHjnRTQ=
Subject key identifier: 56:64:36:8B:C2:AD:67:2E:76:49:CF:B2:22:7E:97:69:BA:08:C2:6A
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584D7F9A7AE72770DC0CDFE537A4
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a86fcde3-2133-330a-afd1-750691f9ac45.roa
Signing time: Tue 14 Apr 2026 01:00:24 +0000
ROA not before: Tue 14 Apr 2026 01:00:24 +0000
ROA not after: Mon 13 Jul 2026 01:00:24 +0000
asID: 8987
IP address blocks: 130.137.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:9a:7a:e7:27:70:dc:0c:df:e5:37:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Apr 14 01:00:24 2026 GMT
Not After : Jul 13 01:00:24 2026 GMT
Subject: CN=00f6e5ff-3336-494d-9a21-1fa624f642c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:f6:9d:48:09:22:68:bd:ba:60:42:d5:49:
d0:20:54:74:5f:dc:fe:ad:a6:2d:0f:bf:49:a4:9c:
a7:df:b1:71:ce:31:4a:68:ce:c4:55:4a:d6:a7:cc:
36:19:28:d7:ae:89:48:6d:a7:d1:ed:f9:6e:47:c3:
34:9d:e7:44:21:29:f6:84:e6:9b:73:07:89:6a:e8:
21:d1:54:a6:cf:e6:d6:64:70:9a:0c:0a:fe:33:9d:
ee:c7:26:db:53:0e:1b:ac:30:4e:a3:8f:9b:d4:27:
40:8a:c4:1c:99:3b:c7:27:a9:48:79:17:55:2e:08:
31:ef:ba:8d:e1:00:3c:0d:54:3b:af:d6:83:12:09:
52:a5:a8:68:f3:3f:76:be:c5:05:9b:dc:2e:1e:7b:
31:5d:3a:67:a0:e7:34:44:64:18:2a:9b:42:e5:0b:
22:9a:c0:99:34:b8:98:ed:a8:89:c2:20:3f:d6:57:
91:38:bc:ed:aa:e7:94:1d:14:e7:dc:f2:ae:40:87:
7c:2c:d2:3e:9a:2b:1a:8e:ae:d9:49:2d:4b:46:ef:
b0:c6:aa:bb:6e:54:25:d2:d3:8e:91:c0:38:b1:2c:
04:c9:61:6b:fb:16:5f:5a:4d:f5:13:60:6f:97:b3:
3e:5c:33:70:05:1f:77:e8:6e:02:f7:af:b1:48:67:
71:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:64:36:8B:C2:AD:67:2E:76:49:CF:B2:22:7E:97:69:BA:08:C2:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a86fcde3-2133-330a-afd1-750691f9ac45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:50:9b:a8:68:20:98:d8:89:3e:05:ff:f1:83:30:24:e6:80:
d8:dc:ef:7b:d1:b7:fa:d6:a8:08:66:17:8a:12:ba:21:42:1c:
80:62:e5:ca:1d:f7:3a:d4:50:73:aa:ee:49:d6:21:3f:d2:9b:
6c:fc:ac:8d:36:2a:78:cd:ed:75:1a:03:3d:02:8b:16:44:9e:
2e:1c:7b:85:21:e9:aa:7a:8c:c7:9a:30:3c:a3:bd:b2:f0:bf:
6f:b0:19:63:39:e0:69:c1:a1:24:6a:07:c4:0c:49:0c:0c:d0:
9c:b7:c9:b9:39:33:51:7d:39:df:07:f4:4b:4b:27:f0:cd:b5:
e3:d6:f7:f5:a4:3d:ee:7d:c8:17:55:7b:1a:09:87:3f:aa:68:
64:e4:85:7a:05:ed:0d:10:6f:ee:4f:f1:f0:3f:48:fc:16:27:
85:45:32:c4:5c:65:47:6e:a0:bd:92:e6:e7:c1:43:87:25:1c:
a3:6a:1f:c4:df:c0:ae:c4:13:f9:30:db:39:95:12:29:59:4e:
5e:38:a3:82:df:33:09:16:63:84:93:b5:24:6e:be:dc:d2:39:
83:be:8a:05:92:19:4b:db:61:60:f6:39:bf:eb:1d:97:54:79:
03:c9:34:52:ca:48:04:85:fa:9b:e5:20:38:8d:15:39:05:4c:
41:03:9b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:24 2026 by rpki-client