
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc2aa532-33c3-3951-89be-12330759cf39.roa
File: dc2aa532-33c3-3951-89be-12330759cf39.roa (raw, json)
Hash identifier: Pgg9mXUCdF651IN1Wl8fewRpqir+seVZ0TwQTR/He1w=
Subject key identifier: 7B:C1:07:B0:EB:E1:9B:F0:A2:2A:30:C7:AF:45:FE:9B:EF:5E:EB:4C
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584CB28727EFDC0C4DA91DB919A0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc2aa532-33c3-3951-89be-12330759cf39.roa
Signing time: Fri 30 Jan 2026 14:00:40 +0000
ROA not before: Fri 30 Jan 2026 14:00:40 +0000
ROA not after: Thu 30 Apr 2026 13:00:40 +0000
asID: 8987
IP address blocks: 130.137.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b2:87:27:ef:dc:0c:4d:a9:1d:b9:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Jan 30 14:00:40 2026 GMT
Not After : Apr 30 13:00:40 2026 GMT
Subject: CN=84206f51-6539-45bc-9b4c-1f3bf2f56979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:00:c5:ac:cf:6c:15:0d:f0:53:6d:bb:fb:2b:
cd:da:2b:9a:48:ba:16:94:72:43:4c:86:20:6b:1f:
e9:47:56:ee:55:34:d4:f2:a3:17:81:20:5c:9c:7f:
e2:b4:47:48:a0:7e:60:80:9a:2e:3a:c0:f6:72:b4:
72:aa:68:5a:af:1e:42:a3:dd:87:e0:48:77:59:03:
17:52:95:fd:86:a8:39:94:09:ff:1a:29:e4:07:c4:
04:3f:30:ab:0d:fc:49:e2:a8:c0:59:00:cb:e9:4e:
15:2d:b8:cb:a0:30:07:41:fa:d7:10:42:0b:ef:59:
8f:3d:a1:b2:9a:20:dd:05:cd:a4:b9:ee:68:47:22:
9b:60:37:b5:37:2c:df:1e:4f:25:ae:a9:04:f6:89:
bf:bf:cc:91:c3:8f:d5:03:b4:0a:17:ea:cd:e2:44:
f3:77:79:1c:a1:d2:f6:5b:a1:71:ee:80:e9:56:90:
a3:64:88:8d:6f:2b:9f:9e:46:58:2d:14:5b:44:fb:
33:ad:b4:bf:6f:0c:e6:34:bc:c2:91:8d:52:b6:e1:
e9:98:0f:12:fe:44:61:65:eb:a8:43:e1:27:e1:da:
16:a9:28:8b:4b:3b:44:e6:f1:f8:2f:bd:f4:57:66:
d1:28:5c:73:1a:78:a7:a9:96:10:11:11:45:d2:c6:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C1:07:B0:EB:E1:9B:F0:A2:2A:30:C7:AF:45:FE:9B:EF:5E:EB:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc2aa532-33c3-3951-89be-12330759cf39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:cc:b9:a2:bc:9f:db:72:47:65:56:2b:af:5f:a6:71:3c:c1:
0c:ac:88:a4:24:a8:32:9a:92:04:f5:ed:a6:21:2c:81:e4:06:
10:ff:40:12:c2:d6:00:c3:30:16:40:67:e6:3e:7d:ef:0c:9f:
37:97:e9:1e:23:65:cc:59:ac:e5:1e:70:00:84:a3:95:27:7e:
a4:46:37:b0:46:34:37:2c:5f:c1:0e:a3:d1:33:37:d9:a3:37:
7b:9d:5b:1c:1b:5c:65:42:73:4c:3e:04:94:08:f5:27:64:4a:
f2:05:bd:aa:ab:47:47:85:18:4e:1b:60:73:b7:b9:96:e1:af:
28:28:39:36:a2:8d:fd:7c:39:08:09:d5:8f:30:05:3b:f3:ce:
47:02:84:db:76:39:53:81:8e:ab:34:0e:51:d5:dd:a4:68:1f:
fc:87:9c:41:74:51:66:2f:3b:33:73:25:ab:89:c8:15:ca:69:
d1:c2:23:93:9c:fa:6d:e1:78:d3:d9:fc:7d:91:67:3a:2b:83:
9d:b1:fa:7d:d7:14:7c:a4:7a:24:02:82:b9:3a:0c:50:d4:7e:
3e:f1:96:4a:da:6d:56:a1:25:f3:67:57:c6:c2:be:f8:c0:b0:
ea:dd:40:3c:b3:76:79:fd:b1:26:7f:73:f3:a2:e9:5a:ca:99:
53:c3:a2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:48 2026 by rpki-client