
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/699e42de-25a9-3ec9-a43f-d9e1a6a13335.roa
File: 699e42de-25a9-3ec9-a43f-d9e1a6a13335.roa (raw, json)
Hash identifier: 7yfCKEWK7O1BNeDQghqydAYL3hrw6R1netGb/sJLeIc=
Subject key identifier: 46:FD:3F:B2:04:9F:0E:70:8A:B3:2A:96:8C:66:C7:39:B3:2D:03:E5
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584F02421E965E5BE9FAFE371C80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/699e42de-25a9-3ec9-a43f-d9e1a6a13335.roa
Signing time: Sun 30 Aug 2026 13:00:11 +0000
ROA not before: Sun 30 Aug 2026 13:00:11 +0000
ROA not after: Sat 28 Nov 2026 14:00:11 +0000
asID: 14618
IP address blocks: 130.137.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:02:42:1e:96:5e:5b:e9:fa:fe:37:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Aug 30 13:00:11 2026 GMT
Not After : Nov 28 14:00:11 2026 GMT
Subject: CN=336f8d90-1e9b-4dc9-a17e-48fa03db7321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:b5:84:b9:4c:7c:5c:81:1a:15:c5:d4:2e:
9c:0d:88:a8:7d:dc:17:e9:cb:3e:0e:5f:8e:b9:df:
35:c7:19:01:81:b5:34:33:14:97:22:96:fb:fc:e5:
88:2e:7e:3f:57:14:69:fe:5f:db:64:56:3a:4e:39:
f6:eb:56:e4:43:12:82:1f:88:ed:49:87:94:f3:cf:
b6:94:35:09:68:01:8c:df:c0:1b:e8:9f:04:01:5e:
26:87:61:14:fe:3d:13:fc:a3:bf:7d:56:95:0b:a1:
80:82:6f:1f:9e:84:17:48:0d:13:29:09:70:56:9b:
8d:f5:32:21:94:89:6e:ec:7f:89:74:bf:fe:ed:60:
fd:69:04:09:a6:ac:33:bd:b9:f3:5d:a0:c2:d5:4f:
51:fb:fe:a7:ce:47:4a:69:54:47:2b:a2:b5:ec:ac:
d7:f8:65:d6:a5:fe:23:1a:2c:3c:4c:43:47:88:f9:
04:63:23:29:c9:a7:55:38:00:23:f1:67:37:c0:32:
18:43:89:3d:15:ec:21:06:6b:8c:57:28:3f:bc:29:
a5:5b:62:b0:49:e9:60:2b:9e:75:61:63:46:4c:e5:
0f:85:58:98:6c:d3:95:05:f5:ec:f8:ac:6b:28:55:
dc:35:ef:77:fd:de:80:df:d4:5d:c6:3d:00:84:1d:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FD:3F:B2:04:9F:0E:70:8A:B3:2A:96:8C:66:C7:39:B3:2D:03:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/699e42de-25a9-3ec9-a43f-d9e1a6a13335.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:4c:7e:e3:fb:df:83:cf:6b:ee:78:35:e9:94:34:dd:87:04:
47:a6:67:22:d5:2a:bf:b3:88:c9:a6:96:00:0f:07:83:3a:04:
b8:83:06:77:a3:3b:5b:b1:59:c5:bd:0a:bb:ed:5b:b0:d1:cb:
8e:fd:05:d6:08:6f:0d:c5:d9:f3:20:30:26:4a:a4:92:04:47:
8a:d6:4c:f5:dd:75:4e:4e:61:42:bf:50:34:b3:99:5a:b1:f7:
82:37:13:d4:fd:36:ae:93:af:5c:de:a1:43:2f:6f:31:6d:7f:
cc:1e:13:c2:2b:6f:8a:56:8b:c0:be:b2:99:b6:0c:83:c0:0f:
a4:55:0a:c3:98:93:51:6c:da:fe:44:52:10:42:dc:a3:7a:4f:
cc:2b:97:56:20:5d:c5:46:31:d3:e4:cd:48:b3:cc:d1:34:9a:
7e:1f:71:79:6f:c1:12:92:08:7d:45:cd:66:fa:df:52:1b:d2:
53:8d:20:c7:45:f7:c7:4b:a9:aa:55:86:51:9b:0a:28:f1:25:
1e:ab:e7:fc:77:b4:20:dc:db:64:b5:f6:a1:c2:0c:2d:2b:06:
d9:20:d9:01:b2:94:de:9b:80:52:4b:a7:bd:44:83:38:79:e8:
49:23:3e:e8:db:a3:32:b3:f5:ff:f7:c2:88:08:d6:ab:37:9e:
0d:7e:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:59:05 2026 by rpki-client