
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d2e1e774-2ccf-3205-9b81-7802d296718c.roa
File: d2e1e774-2ccf-3205-9b81-7802d296718c.roa (raw, json)
Hash identifier: CZSAOm633FR9Id6CqhpzZPERJQJhg0A0o4ay+QriOtc=
Subject key identifier: 95:4A:66:75:77:05:85:BD:22:79:45:61:84:D7:9D:B2:72:C2:9C:D0
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584D7F9A7F128CD4B2E4AAD5D9BE
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d2e1e774-2ccf-3205-9b81-7802d296718c.roa
Signing time: Tue 14 Apr 2026 01:00:24 +0000
ROA not before: Tue 14 Apr 2026 01:00:24 +0000
ROA not after: Mon 13 Jul 2026 01:00:24 +0000
asID: 8987
IP address blocks: 130.137.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:9a:7f:12:8c:d4:b2:e4:aa:d5:d9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Apr 14 01:00:24 2026 GMT
Not After : Jul 13 01:00:24 2026 GMT
Subject: CN=2b53fe67-3d2d-47e2-b872-bd6723f19636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:9d:7e:fe:b6:78:c8:8d:fb:20:75:f3:bd:
15:98:b7:71:91:ab:6f:9a:80:f2:3c:eb:7e:b4:21:
22:1b:6e:ac:43:18:3e:cc:aa:99:7c:70:c1:0c:f7:
77:8e:90:c5:fc:f0:fc:15:e7:fb:6d:be:29:ef:41:
e2:47:cd:ba:3e:9e:21:2e:d6:cc:d9:7c:c4:63:f9:
36:db:de:94:1c:f6:23:46:c5:a1:e7:bc:f0:c6:44:
d4:ca:21:10:73:2e:49:66:52:da:3f:94:67:8b:d4:
b6:2a:24:0f:3a:51:68:73:0d:64:82:84:7b:0d:53:
9b:9d:e9:b4:72:6d:d4:03:e0:67:c0:22:df:b9:97:
02:c4:ba:c4:ca:fc:eb:92:41:ae:4e:a4:2c:bc:d5:
99:c2:f4:62:fa:85:09:1c:38:a2:e4:58:36:59:25:
00:f9:10:25:2a:b8:85:9d:00:10:32:0b:2f:ea:87:
b9:dd:cf:6e:d8:47:6a:b9:b4:2a:51:49:f7:55:cf:
9f:33:fe:bc:6a:dc:6e:28:a9:3b:00:76:88:bc:50:
97:81:83:6c:d6:57:ef:e1:89:53:44:33:43:7a:4a:
bf:d0:3e:30:5f:85:53:07:51:87:27:11:1a:b3:94:
c0:5b:49:ed:55:5d:5d:f1:20:fb:1b:1b:dc:9a:ed:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:66:75:77:05:85:BD:22:79:45:61:84:D7:9D:B2:72:C2:9C:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d2e1e774-2ccf-3205-9b81-7802d296718c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:97:60:4a:17:8b:5e:fa:23:54:4e:76:93:f9:fc:5d:5f:1c:
2e:06:ed:86:f3:c1:ad:70:3c:db:9e:30:ef:68:10:b6:12:8b:
41:71:a0:7e:42:34:2f:11:20:05:6a:05:93:ff:fe:eb:e1:4f:
bd:bd:1f:8f:d7:59:57:2a:c8:e8:2e:f1:3f:42:81:62:e3:a6:
c4:7f:a3:bd:cf:ad:8a:84:d6:f6:9c:1f:88:6c:2e:17:69:55:
53:33:bb:76:f5:e1:77:e4:20:51:24:3f:9d:c4:61:cd:ce:55:
a6:a5:e8:28:41:4f:ac:bb:2a:cb:be:d2:84:5e:4e:d0:16:4b:
bd:60:d6:2d:64:d8:9a:99:d0:c5:71:5b:49:47:88:17:d0:a3:
ab:0e:ac:04:ac:a5:23:0a:e2:cd:04:ad:38:71:f3:b7:c3:d2:
42:1f:67:fc:b9:07:6a:02:0a:80:7c:67:95:53:c8:31:b7:4d:
1d:42:15:3f:15:5a:97:54:e4:ad:55:c1:f3:ee:a2:53:bc:73:
cc:a7:2c:90:c6:56:9f:40:4b:87:b6:a6:3e:22:54:6a:52:e3:
19:9d:30:b2:0e:be:9d:ca:d3:be:03:52:d3:72:ae:3e:6e:29:
0d:74:ac:35:f7:a3:8e:ee:a6:62:af:53:58:ff:06:0f:73:a0:
8c:e7:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:10:12 2026 by rpki-client