
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9a163eac-bf01-3e34-87be-8eaea402a1aa.roa
File: 9a163eac-bf01-3e34-87be-8eaea402a1aa.roa (raw, json)
Hash identifier: bIzNJTcpD8maupFnzIFZDLV7/pb9WuP+RhEvn807SPw=
Subject key identifier: 45:00:F5:46:4B:82:66:64:90:54:05:DC:0D:67:31:EC:81:90:B9:D2
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584F02421EA2D6DC70D02432FE80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9a163eac-bf01-3e34-87be-8eaea402a1aa.roa
Signing time: Sun 30 Aug 2026 13:00:11 +0000
ROA not before: Sun 30 Aug 2026 13:00:11 +0000
ROA not after: Sat 28 Nov 2026 14:00:11 +0000
asID: 16509
IP address blocks: 130.137.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:02:42:1e:a2:d6:dc:70:d0:24:32:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Aug 30 13:00:11 2026 GMT
Not After : Nov 28 14:00:11 2026 GMT
Subject: CN=132a6b3a-4c5f-4aae-8b21-cd5e210fb35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d8:14:a5:a5:8a:9c:77:a0:94:a5:8d:40:81:
85:77:f5:03:8a:86:6f:75:d7:dd:6d:1e:af:51:cd:
95:6a:38:f2:2d:fa:dc:06:21:32:c3:1c:c4:aa:3c:
18:a3:0b:bf:ad:f2:6d:19:7b:e5:37:3b:21:2f:b3:
05:ac:01:0b:2d:7a:0b:63:df:5b:40:a7:ac:61:95:
9e:62:e6:68:73:b8:39:a2:26:83:22:39:31:44:1e:
73:5d:2f:ff:51:27:d4:b8:35:7b:8b:76:f0:d4:0e:
65:a2:ab:87:34:04:dd:cc:65:36:fe:11:d6:f2:d1:
6e:20:3c:08:f8:06:86:f0:34:40:74:cf:95:40:85:
9a:03:5b:33:81:af:9c:2c:8f:6e:0f:7e:d9:d9:80:
9e:1f:74:ba:0b:15:68:b7:35:d1:bf:0e:b9:a5:b8:
32:62:0f:0d:ea:5d:8c:5c:b8:76:b8:50:83:f3:ee:
fc:59:c0:07:2b:64:8e:6b:08:17:cf:07:f0:eb:0b:
70:81:a6:5a:9c:32:2b:37:19:30:cf:69:28:47:da:
1c:1f:cd:70:ab:74:db:c1:b4:57:3f:0e:69:fe:1e:
d2:03:59:c6:71:df:25:47:35:c2:86:ed:91:e4:aa:
10:07:9b:2b:6d:38:73:0f:8b:10:98:5b:ed:2c:e9:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:00:F5:46:4B:82:66:64:90:54:05:DC:0D:67:31:EC:81:90:B9:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9a163eac-bf01-3e34-87be-8eaea402a1aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:40:b1:58:76:d1:68:11:83:d9:f7:76:07:ec:ae:b4:4d:48:
01:47:87:2f:63:96:26:06:45:68:f6:4c:30:bd:1e:8b:9e:b6:
2b:ae:b2:67:50:fd:3a:5c:70:e8:ab:3c:3d:ba:d7:68:cb:50:
b5:f1:e8:b0:a0:4c:85:67:44:98:47:e3:67:86:c0:4e:d9:28:
ce:9b:41:84:f7:19:36:bd:cc:d2:c9:11:ca:27:2f:e1:42:36:
e9:e7:92:41:8a:1f:33:36:c0:07:6c:25:b7:ea:fc:bf:53:92:
35:8e:c8:f4:28:e5:30:b5:73:58:de:65:c1:17:31:48:39:41:
2d:33:f0:0e:ef:97:d8:51:56:ae:b0:78:d8:b2:c1:cf:4c:5c:
1d:9c:b4:25:e1:2a:28:f4:c1:51:36:dd:40:99:04:a7:68:c4:
3c:88:f9:6c:a1:7a:dc:23:bd:fd:6b:8b:74:c2:a4:72:df:bf:
35:4b:72:45:74:f0:61:44:4c:ae:63:45:d7:2f:68:28:73:a4:
44:10:bb:2f:fd:c4:e0:f0:53:29:8a:f5:68:f6:b7:37:b8:c0:
8e:e7:c9:81:2d:07:7b:a0:6a:be:89:6b:96:c5:59:84:b7:e4:
8d:ab:49:9a:90:cb:e0:64:66:e1:d4:5d:60:79:28:6c:4d:f1:
a4:44:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:06:20 2026 by rpki-client