
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/be330c09-7165-3fbe-8743-335dd4a04cd1.roa
File: be330c09-7165-3fbe-8743-335dd4a04cd1.roa (raw, json)
Hash identifier: idUFRqxWtTuU5dsX4h1/2RgCRF8eAq0gzxHYeKKhFAw=
Subject key identifier: F9:18:79:30:0F:F5:C1:9D:DB:31:30:D3:18:E9:41:04:DB:07:BC:3E
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584C9C31A397B4D921A209183000
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/be330c09-7165-3fbe-8743-335dd4a04cd1.roa
Signing time: Thu 22 Jan 2026 14:00:37 +0000
ROA not before: Thu 22 Jan 2026 14:00:37 +0000
ROA not after: Wed 22 Apr 2026 13:00:37 +0000
asID: 16509
IP address blocks: 130.137.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:9c:31:a3:97:b4:d9:21:a2:09:18:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Jan 22 14:00:37 2026 GMT
Not After : Apr 22 13:00:37 2026 GMT
Subject: CN=e2ad1153-b474-4c72-8ce0-927768852242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:9d:fb:53:db:dc:46:23:8a:6e:9b:81:9f:
83:82:fc:71:c2:01:ab:c7:68:41:2b:23:25:c0:48:
66:56:d2:1a:66:d4:4e:e8:60:de:d0:29:b4:be:d0:
d1:15:ce:a8:ef:68:2c:ee:8e:30:9d:a7:3a:91:f6:
58:88:83:b6:30:19:88:6c:41:eb:86:a6:dc:79:4e:
b9:39:a0:7b:9d:8d:0b:12:c0:8d:e2:0c:f7:fc:b0:
88:e6:80:8d:2d:a9:7d:95:2f:2c:58:b6:97:c7:07:
e7:d0:0e:9a:03:68:c3:43:82:f2:24:d9:30:ee:cc:
e9:f4:e6:4d:0f:0f:14:09:7a:18:4a:e2:bf:2a:33:
d5:cf:ab:80:6a:ff:dc:23:30:80:c9:2a:8b:68:cc:
d0:f4:ae:31:cc:98:e7:00:52:bd:c0:20:e8:fe:3f:
15:43:89:d2:3f:9b:35:f3:5c:39:5a:09:ac:ec:78:
a8:15:ab:1d:3f:f9:64:79:92:f1:be:57:f9:8f:d2:
47:d8:c0:5e:3a:8f:9a:34:4b:30:eb:d0:b8:5c:5d:
5f:15:75:ca:45:6d:6b:2a:50:cc:84:03:21:1c:5b:
fe:45:76:af:6f:29:65:b0:a3:16:19:52:7c:a1:e7:
49:78:a7:be:9a:0a:21:e6:f4:19:e5:d4:65:df:18:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:18:79:30:0F:F5:C1:9D:DB:31:30:D3:18:E9:41:04:DB:07:BC:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/be330c09-7165-3fbe-8743-335dd4a04cd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:f1:2b:52:f3:7d:e0:e9:01:2f:fb:27:0f:d2:c2:f1:1d:66:
fc:80:60:fc:62:bd:7f:34:fc:d1:3d:b8:99:66:b5:42:c8:1f:
8d:2d:82:b1:ac:84:e9:d6:2e:81:56:30:50:18:9e:3f:63:c9:
29:0a:6d:01:f4:98:60:25:ee:7d:de:cd:7e:7b:10:b6:75:b0:
0a:ff:c5:9b:38:8c:45:3f:ea:39:65:5d:b5:e8:14:54:d5:05:
e9:f6:a1:d2:00:48:57:b7:74:29:eb:45:06:06:6b:c2:9a:33:
60:d3:c9:1b:3a:65:80:c6:ec:72:f4:87:11:76:08:81:43:b5:
f5:bd:10:b0:cf:5d:5e:27:9e:d3:cb:21:c8:0e:f2:47:df:f7:
01:43:ee:52:be:41:76:7c:7d:fb:1a:29:66:49:87:26:3d:14:
9e:1d:5e:95:6f:fb:21:16:dd:57:a7:2e:6c:a8:04:57:46:0c:
e5:a8:26:a1:c0:0e:e1:df:50:61:ed:96:6f:97:c0:0b:82:3c:
2a:29:cb:c1:b1:7f:d7:23:ce:a8:f0:9c:10:b1:98:ed:21:36:
3d:80:6f:f0:18:b1:bd:ca:6b:5c:79:8f:7c:2a:37:ef:81:2b:
d1:22:c5:3a:cf:47:61:04:0d:72:a6:24:41:83:c7:b2:d8:d2:
05:7c:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:39 2026 by rpki-client