
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e8070f34-a2e8-3513-a05c-1e47606c997e.roa
File: e8070f34-a2e8-3513-a05c-1e47606c997e.roa (raw, json)
Hash identifier: 1v+IB0rcKm2e5pEikw6xh8ciUfLS200EIsSwcZn2q+E=
Subject key identifier: 5D:6E:41:56:67:46:94:6F:34:A7:89:39:09:00:9A:33:E5:E1:75:61
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584D93254214B2C2439E64D1A080
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e8070f34-a2e8-3513-a05c-1e47606c997e.roa
Signing time: Tue 21 Apr 2026 01:00:24 +0000
ROA not before: Tue 21 Apr 2026 01:00:24 +0000
ROA not after: Mon 20 Jul 2026 01:00:24 +0000
asID: 8987
IP address blocks: 130.137.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:93:25:42:14:b2:c2:43:9e:64:d1:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Apr 21 01:00:24 2026 GMT
Not After : Jul 20 01:00:24 2026 GMT
Subject: CN=2a97c8e2-c60f-45dc-94b0-5801595c37bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:38:de:76:21:99:2a:14:dd:c2:a0:6a:80:
e0:ce:39:5b:d6:3b:75:90:0b:6e:64:18:7b:b8:99:
35:8e:c5:a2:cc:bc:4e:ef:30:14:66:e2:87:e9:db:
7e:f2:96:6f:8e:cc:a5:60:a0:c5:3b:ce:b9:bf:ff:
bd:22:ef:83:0e:d0:3c:88:76:e5:58:64:a5:a4:73:
48:60:12:7e:07:1b:79:ff:29:51:b8:02:c8:30:2a:
44:c9:bc:9e:e5:b1:50:79:cc:44:92:6f:e0:4e:9e:
cb:c8:7b:01:2d:fe:be:51:19:3f:71:b9:44:e1:66:
69:08:60:7f:1d:62:23:e0:5f:fe:84:29:a1:54:6e:
28:78:be:a8:77:eb:4a:24:29:1b:61:21:08:95:dd:
1c:d9:bf:40:69:e4:69:c4:10:15:07:96:2e:2b:66:
b5:40:be:fd:a8:06:4e:ed:b5:15:32:95:a1:95:2a:
a3:89:d2:28:bb:b8:94:ca:59:c4:76:ae:c7:9d:7f:
e7:eb:e3:82:f1:a2:aa:4e:14:9d:69:94:3d:8d:bf:
93:db:c7:ba:70:33:69:f7:05:11:85:d6:d7:3c:46:
23:b1:55:75:cd:6c:8a:95:e9:67:fd:fb:f3:b8:59:
06:d5:04:db:fd:6f:b9:56:31:bb:62:93:5b:1c:78:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6E:41:56:67:46:94:6F:34:A7:89:39:09:00:9A:33:E5:E1:75:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e8070f34-a2e8-3513-a05c-1e47606c997e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:44:c6:13:22:83:cf:fb:a7:87:e3:80:74:58:75:95:e9:c7:
b7:c5:be:1f:75:b9:69:86:cc:97:c3:46:0d:ca:13:fe:ce:11:
58:3f:36:e1:26:1f:cf:a3:b4:6a:f2:94:f6:cb:f5:4b:da:c2:
98:02:57:a2:ad:d1:78:4c:bc:dc:0a:7a:de:be:ad:96:4d:85:
22:09:5c:ce:41:6d:7b:dd:2a:6a:87:36:9f:17:91:f3:a0:11:
a2:d9:b2:f9:91:ad:a4:38:1f:9a:96:51:7f:c2:67:e6:68:8f:
08:7a:e8:19:e7:e9:12:1a:da:1a:c4:e9:fb:23:30:3a:a3:b7:
ac:6d:45:50:c2:64:19:8f:3b:0b:6f:39:3f:73:fb:77:64:c3:
c8:fd:8c:be:ce:ed:f5:7f:43:9b:e5:dc:50:04:36:63:75:9e:
9b:85:a7:78:36:c5:e3:74:67:83:50:18:e0:1b:97:6e:b1:78:
ba:bc:f9:bd:03:8f:b9:d0:56:21:bb:d3:7f:39:4b:92:34:87:
74:a3:73:8e:a9:47:86:1b:59:d9:4b:c3:5c:c3:5f:29:22:cb:
c6:84:53:dc:55:17:5c:d0:c9:c9:bc:19:95:7a:a9:1c:7d:69:
7d:eb:39:51:5c:7b:5b:b1:60:ac:de:06:25:99:31:35:25:c5:
5e:18:3d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:33:37 2026 by rpki-client