
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa
File: cd5a3695-dc79-32b2-b279-0651d13c045f.roa (raw, json)
Hash identifier: QpyS8YrUfs2WCIyJgj+LeLGtJ4/jCjda7AAFkIERnzU=
Subject key identifier: D0:E7:79:24:B2:4A:89:2C:96:03:BE:C5:D9:49:FB:53:CD:C3:68:F8
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584D7A051E63195D309380DB6B30
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 16509
IP address blocks: 130.137.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:1e:63:19:5d:30:93:80:db:6b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=cb907e50-13a9-4a64-83b1-c147d78f1ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:53:23:6e:fa:cf:88:8a:4e:70:42:99:bf:
01:b9:f6:b3:74:b7:2f:d3:8b:df:ac:38:c5:b8:ea:
52:a6:37:78:b5:ea:c5:7b:b5:98:ce:cc:85:93:51:
e9:b2:a0:43:43:11:9c:1a:a4:9f:de:a8:a0:88:6b:
f6:4a:aa:ab:81:d2:6e:06:32:f9:74:41:e1:7f:b7:
39:40:48:21:3d:b9:75:87:f1:30:34:62:51:44:19:
41:b0:86:f1:4f:9b:69:df:6c:54:5e:f1:d0:15:08:
7a:a7:f0:07:f5:fa:db:2b:bc:48:fc:e2:b0:bc:3a:
09:4f:2c:b2:02:91:f3:18:38:0a:71:01:0d:13:55:
79:1d:5d:94:9f:7a:36:d9:c6:19:5b:89:f4:ab:c4:
e7:15:98:42:cd:15:52:68:ef:e7:4c:d7:61:1f:14:
e7:8b:8e:fb:dc:60:1c:ac:f8:4d:57:44:36:1b:28:
11:09:d2:c3:54:6a:86:80:83:e8:7c:e0:21:2c:86:
35:1e:e6:fd:ae:24:6f:a2:f8:88:00:7d:36:c7:b3:
67:a5:59:82:fd:d3:58:74:d2:73:fd:b3:ed:53:ea:
a2:0a:b0:0a:50:0a:88:90:c7:3c:7b:54:6b:8f:30:
b4:37:68:a6:5b:7d:9c:10:65:02:33:42:fb:f4:aa:
91:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E7:79:24:B2:4A:89:2C:96:03:BE:C5:D9:49:FB:53:CD:C3:68:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:ec:54:4e:03:1b:ef:d0:6e:5f:f2:82:3a:4e:cd:30:25:e4:
a2:37:50:8c:a2:42:3a:19:62:3a:31:31:60:4e:0f:4d:aa:0a:
ef:fd:16:ac:57:9c:67:11:ba:fa:ea:c5:3a:0a:8a:cd:c1:8a:
d5:2f:34:1b:86:5a:cb:16:df:d2:42:03:e4:cc:72:90:04:06:
be:29:ca:0f:d0:55:d2:a4:3e:79:69:0a:58:b9:cb:7f:b2:97:
14:b8:a8:90:57:97:5a:7b:c2:24:e1:0c:6c:e5:c7:64:db:1b:
89:8d:aa:3e:88:2c:92:9d:7a:04:7f:47:36:72:8c:07:a3:a4:
55:85:55:d7:d7:d9:0f:ff:2b:6a:c2:8d:21:28:fe:28:b4:86:
73:af:2a:53:ba:0e:54:b6:e6:b0:f1:af:72:4a:29:7a:35:da:
7f:72:cb:a7:56:18:20:0e:79:a9:d3:fd:86:ce:f0:2a:1a:ba:
b5:3a:99:e7:d9:f9:7e:73:4e:30:ce:d5:64:8b:17:e1:d8:e4:
07:ec:b6:f0:2b:30:7b:d3:4c:85:3f:a8:30:94:95:a4:7f:25:
52:37:07:47:44:31:09:02:01:55:72:0e:75:82:29:24:61:4f:
ee:43:c7:43:8e:2d:36:f9:d1:d2:ad:d8:9d:6f:f2:16:d4:11:
ed:27:98:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:46 2026 by rpki-client