
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa
File: 541632ed-4124-362f-8edd-c6a63bea2883.roa (raw, json)
Hash identifier: nJRKUoIajPyV6pnIjN7q8PjqSuv1tVVg11ud1dEdxNw=
Subject key identifier: B4:47:E0:BE:7A:9D:18:90:87:89:5B:A0:50:75:2D:87:79:13:FC:17
Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial: 010D0C9F4328584F4973DA1949A898B2CD636700
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 46841
IP address blocks: 209.222.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:da:19:49:a8:98:b2:cd:63:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=0ce202bb-ccb4-4c40-b622-0e2c416f89cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:3a:fe:67:94:5b:c6:9f:3f:12:bc:72:e6:
c3:5b:f0:e1:ab:66:1e:b0:c5:e9:d0:e7:47:c9:f0:
a9:27:f4:fe:4d:a7:7d:bd:b8:87:9d:67:db:16:05:
b9:1b:bd:96:dc:e8:25:20:0b:67:af:d2:1c:01:86:
58:14:99:08:b7:70:ca:5e:0a:5b:2c:01:da:aa:14:
ba:d2:e1:3d:af:ec:41:3a:ce:e5:87:4e:c6:6a:24:
84:bb:38:62:20:f7:94:2f:c6:74:c4:be:59:fe:f1:
07:f3:8b:2a:d0:65:2b:af:b1:02:ea:68:1b:5b:32:
4b:c7:12:a3:fb:38:9b:1d:92:3b:b4:72:9c:51:10:
55:10:20:26:f3:6e:d6:9d:33:53:83:27:d3:f5:03:
d0:1d:8c:75:7c:bd:80:b7:68:82:d1:1c:71:33:36:
3e:51:e8:62:bb:a6:b5:28:72:fe:e7:1c:63:f2:9a:
b4:49:9b:e8:a1:d2:e0:38:2f:77:6d:0a:1f:a5:f5:
cf:cb:61:13:df:d7:7d:97:03:3b:a0:5d:6d:e5:1d:
b8:cf:a1:cc:ed:be:ad:0e:fc:50:72:b3:f7:ab:da:
59:ef:0b:3f:b5:a9:9b:47:90:5f:a9:89:57:17:d8:
42:e5:fd:55:77:ca:05:0a:af:4d:86:b4:2b:d7:c5:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:47:E0:BE:7A:9D:18:90:87:89:5B:A0:50:75:2D:87:79:13:FC:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
X509v3 Authority Key Identifier:
keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
sbgp-ipAddrBlock: critical
IPv4:
209.222.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:96:70:c4:d4:89:1c:c9:a6:58:01:03:9d:70:5d:ab:c5:a5:
5e:b8:cb:44:6a:da:f0:06:c1:2c:f5:75:cf:c8:17:73:d3:72:
da:69:e0:9e:e2:ad:2f:17:9c:9f:36:86:85:e1:33:0c:01:26:
9a:29:f6:bb:a7:8b:78:16:d8:dc:ca:53:62:ac:27:c9:6c:5a:
a9:e2:4b:88:16:3a:3a:ea:7c:f9:49:93:fc:d7:06:e5:7d:8b:
be:49:14:fc:9c:00:a1:f3:36:d6:9b:b2:18:2d:83:cb:33:4f:
db:e5:69:3d:59:f2:9a:48:a0:a7:ce:0a:54:e0:b5:a8:b9:b8:
b1:94:14:a1:a4:ba:b3:82:98:13:39:84:21:5a:2f:b1:e5:da:
96:71:90:b7:00:cc:88:be:bd:86:e9:8a:a1:76:d7:dd:cf:4b:
ad:2f:84:cc:f1:3d:9f:53:5f:d9:ef:cc:db:ff:4e:6c:63:e8:
ff:4b:50:d0:ed:c7:06:2e:2c:51:77:a8:85:92:12:2f:66:84:
a0:f1:27:a9:17:ca:ce:20:cc:f2:82:37:b2:bb:66:d2:63:22:
71:29:98:1f:c7:f8:eb:d1:c2:39:25:04:aa:c3:b9:b3:c8:ad:
6e:61:a5:0d:e9:c6:e3:d2:20:51:60:2d:3d:f5:ad:2e:9e:4b:
84:06:03:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:20:46 2026 by rpki-client