
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa
File: 2df51bd2-8f35-3784-a672-9288ad204a5e.roa (raw, json)
Hash identifier: pg9HvRBcvtZvvxY0xOAXQdBGxwzzJuafnVZ+zR+7VIw=
Subject key identifier: 7F:F8:A0:2C:5A:B0:89:B9:35:9A:3F:00:D1:C1:5D:D6:BF:3E:97:58
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584EFF776F4FDE8D7735B2AD8980
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa
Signing time: Sat 29 Aug 2026 13:00:12 +0000
ROA not before: Sat 29 Aug 2026 13:00:12 +0000
ROA not after: Fri 27 Nov 2026 14:00:12 +0000
asID: 14618
IP address blocks: 130.137.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ff:77:6f:4f:de:8d:77:35:b2:ad:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Aug 29 13:00:12 2026 GMT
Not After : Nov 27 14:00:12 2026 GMT
Subject: CN=3414ace5-fc13-495f-aa56-a49306a36584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:56:c2:d4:18:a6:5e:e2:e2:c8:24:15:7b:fb:
00:66:2c:10:3c:8c:b3:c2:a0:6f:7f:7f:ef:a7:94:
93:c9:ba:f6:e8:4f:b6:ba:dc:63:c3:4c:0c:e6:00:
02:c6:e3:10:9c:ff:f1:af:bf:b8:d8:77:48:d2:fe:
7a:59:4d:bb:49:cc:46:e8:71:17:0c:ed:8c:41:92:
56:46:ab:86:6d:7e:e4:d0:37:06:c8:11:17:df:ac:
70:be:a0:1d:84:30:e7:e6:fe:78:92:5a:5f:6f:bf:
eb:b0:f0:c6:86:aa:99:85:12:9f:29:eb:dc:dc:ef:
fa:f1:f4:77:d3:e1:46:78:cb:7f:de:ae:0d:c8:03:
92:b5:b4:ee:5b:dc:f1:63:f6:03:09:76:0f:ea:1b:
99:06:c0:55:cb:7f:82:98:73:e5:4d:6d:71:9e:2c:
2c:8e:5c:d1:c4:57:0a:10:f7:d7:0b:91:c1:36:21:
8b:cc:ab:85:ac:da:b2:3a:3b:f6:bf:17:2e:29:85:
b8:cd:83:57:4b:73:ad:05:d8:87:c4:31:7b:8c:15:
b5:03:41:fb:b2:00:13:7f:0b:93:9d:5d:17:98:10:
f5:26:39:8e:41:dc:db:b7:ff:be:3c:8e:9c:99:81:
ad:b7:7c:2e:28:08:b6:2d:b6:a9:dc:95:4a:5e:81:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:A0:2C:5A:B0:89:B9:35:9A:3F:00:D1:C1:5D:D6:BF:3E:97:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:a3:4a:62:6c:0d:c0:a6:e1:11:c6:50:e2:df:60:72:95:60:
d6:d8:ca:e8:84:aa:cd:64:fa:b5:2b:40:01:25:ff:2a:e9:70:
f7:8d:0f:9a:e3:77:41:1d:88:26:c8:9a:24:31:30:e9:44:0a:
7f:ab:a4:c0:8a:f4:39:f3:f6:2e:0f:1b:e5:60:76:a3:4f:2d:
be:95:cb:43:67:53:03:b0:28:ac:49:52:10:d2:1d:5a:e2:29:
f3:c4:da:7a:99:f0:56:89:28:13:d3:d3:9b:5a:fb:52:f6:58:
5d:25:bf:16:db:fb:31:cb:0b:a6:ff:4f:48:79:3f:d3:b9:01:
5d:ae:b7:29:03:c1:37:f8:18:b3:a5:0b:6b:70:a2:c5:7c:6a:
75:8f:a2:50:fd:d5:46:95:63:34:fb:85:c8:db:73:26:ba:dc:
8a:81:c5:95:c2:e7:83:67:12:52:ba:9f:82:c0:35:11:1a:cf:
2c:8d:89:6d:01:09:aa:18:34:13:10:54:72:70:a3:fc:aa:33:
87:fe:40:ef:40:4b:b4:c3:f4:15:64:ba:bb:8f:6b:52:f3:f5:
99:d6:fa:f8:8c:e0:d5:15:b0:2a:2c:1e:68:6e:64:d4:9e:ce:
9f:e9:26:29:a2:93:79:45:07:f4:28:17:ae:3a:1a:88:37:5c:
45:fd:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:14:01 2026 by rpki-client