
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa
File: b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa (raw, json)
Hash identifier: g/9fhyARcAqH3KbM8tkhrKSZmUwDpoByFMaIjsZOfv0=
Subject key identifier: 90:0B:83:02:C5:0B:78:90:15:88:16:7C:07:72:9F:0B:14:D0:A9:EF
Certificate issuer: /CN=15164b64-0a30-43c7-b7d1-dda370c303f8
Certificate serial: 010D0C9F4328584E97B507BB9093569BFDAF3580
Authority key identifier: 60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa
Signing time: Thu 23 Jul 2026 09:00:11 +0000
ROA not before: Thu 23 Jul 2026 09:00:11 +0000
ROA not after: Wed 21 Oct 2026 09:00:11 +0000
asID: 11135
IP address blocks: 199.102.136.0/21 maxlen: 24
2607:d9c0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:97:b5:07:bb:90:93:56:9b:fd:af:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15164b64-0a30-43c7-b7d1-dda370c303f8
Validity
Not Before: Jul 23 09:00:11 2026 GMT
Not After : Oct 21 09:00:11 2026 GMT
Subject: CN=ea6bcddd-07ff-450c-83ab-35d2595eaf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7a:7c:39:2d:4f:0e:bd:d6:e1:b3:40:7b:84:
d0:59:9a:d5:ad:83:60:ac:79:dd:e3:35:8b:b7:9e:
d6:75:18:3d:56:55:83:2f:3e:43:c9:ec:5c:88:07:
80:6c:a6:51:0f:d4:6d:5a:33:22:0d:59:78:11:f4:
f3:5c:86:08:fb:3c:94:9d:7d:eb:23:0b:a0:cd:25:
b8:9a:d0:9b:35:d8:29:38:63:ae:1d:d8:79:36:61:
ac:e7:52:02:ad:28:c0:9f:3e:5f:48:c7:ca:03:e8:
1d:bc:78:1d:1a:c8:6e:fc:28:97:0d:86:2e:9d:71:
70:aa:a5:fe:0c:70:e5:4a:31:a5:b8:a0:b0:9d:f5:
b3:eb:9c:78:22:3a:f8:76:7e:fe:4d:88:37:2e:be:
26:0d:8c:3c:74:77:98:6a:22:65:92:86:57:bb:98:
c4:c2:6b:7f:54:d5:9d:c9:6e:5b:1a:1b:7f:bb:8e:
5e:60:cb:df:68:74:89:b5:9d:44:a7:74:d5:50:98:
a8:74:60:e1:fb:57:6d:79:6a:95:96:a1:40:c5:92:
d3:2f:fc:cf:4c:00:33:69:22:12:6a:be:d2:5b:2f:
e3:03:74:fb:fc:b9:dd:4b:bd:ec:81:38:46:ba:ec:
93:61:26:ee:f8:dc:0f:88:62:50:17:42:47:29:66:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0B:83:02:C5:0B:78:90:15:88:16:7C:07:72:9F:0B:14:D0:A9:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.crl
X509v3 Authority Key Identifier:
keyid:60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer
sbgp-ipAddrBlock: critical
IPv4:
199.102.136.0/21
IPv6:
2607:d9c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:f4:03:f8:30:36:a1:5c:01:d5:0c:54:e6:5c:b2:90:ef:fc:
4c:f7:99:07:6e:ee:ae:53:aa:c4:e7:f3:cb:16:eb:91:4c:e0:
dc:d9:b3:06:dc:06:09:ce:92:a4:5e:3f:e6:7c:84:c9:ed:ac:
df:4a:30:55:40:d8:03:d0:35:24:ce:d0:c0:c8:e2:23:c1:27:
0f:53:2d:31:81:8b:05:72:2d:05:b7:70:fe:4e:0d:f1:24:a0:
3f:bf:92:75:36:de:ef:fe:ea:b3:91:2c:0a:20:aa:40:1a:0b:
2b:15:3e:3a:80:20:31:04:5a:fa:5c:54:a1:2d:06:34:f9:e2:
ad:f6:07:db:3f:a7:7c:72:56:2c:5c:c8:1a:bc:50:a2:20:4e:
aa:57:05:32:21:43:03:77:16:71:07:4d:99:ca:d3:0f:b1:f4:
9b:e6:a4:fe:34:0d:b3:82:95:b0:2e:08:70:3c:dc:f4:0b:33:
30:9a:eb:56:89:05:69:80:e2:27:a4:d0:19:fb:05:f7:47:f9:
f9:01:b3:10:4e:cb:4e:58:5b:e1:76:0f:60:ec:ec:1a:29:ee:
8d:b0:d1:67:73:58:3b:50:c1:59:f7:33:2a:96:0b:89:5e:3e:
64:16:ff:c5:73:ea:cf:83:22:a5:39:75:86:08:a6:cf:9c:92:
ac:5c:2b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:27:56 2026 by rpki-client