
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d591d5ac-fd73-3905-b4c2-b5506be181fc.roa
File: d591d5ac-fd73-3905-b4c2-b5506be181fc.roa (raw, json)
Hash identifier: 8X6soup+4TGNt/cfND4fxX6dvlbJtN3zRItkKOjf/oQ=
Subject key identifier: 7B:04:A8:DD:0D:F3:2B:3C:3F:6A:4D:11:23:FD:4D:C9:AB:7D:20:F6
Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial: 010D0C9F4328584D0C52120FAB29FF1EB2191AC0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d591d5ac-fd73-3905-b4c2-b5506be181fc.roa
Signing time: Tue 03 Mar 2026 17:56:38 +0000
ROA not before: Tue 03 Mar 2026 17:56:38 +0000
ROA not after: Mon 01 Jun 2026 16:56:38 +0000
asID: 31898
IP address blocks: 192.163.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0c:52:12:0f:ab:29:ff:1e:b2:19:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Validity
Not Before: Mar 3 17:56:38 2026 GMT
Not After : Jun 1 16:56:38 2026 GMT
Subject: CN=495d3d4f-3ff9-48a5-af47-e56e4ab09723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:e3:c1:0d:09:2e:63:69:ce:bb:26:a1:c0:
36:4f:41:a4:39:ef:0e:3c:df:ed:39:3b:be:52:6d:
a0:ec:d1:da:db:3e:b3:f9:d3:a7:48:6a:d2:ab:52:
fd:c4:53:6b:fd:94:b6:08:ee:42:3c:97:e8:31:5c:
bf:bd:ff:80:1e:23:c0:ee:59:4b:74:c7:ad:e4:0e:
0d:c5:38:be:ab:37:c9:c5:9b:da:40:c2:95:fc:19:
03:c3:11:d6:5c:d2:a7:10:a2:ca:f4:54:e0:b1:36:
ca:8d:b5:13:39:a9:7b:88:c9:c6:1b:6b:2b:1f:3c:
f6:5a:ff:ae:29:f7:bf:5a:3a:2a:26:06:a3:f1:5f:
50:f2:c1:15:0a:88:00:f9:fd:d6:ae:77:f0:2c:39:
58:90:66:c5:3d:9f:81:e7:15:84:8a:c8:97:3c:92:
db:d9:67:f6:47:19:7d:bb:d4:00:6c:4a:eb:12:32:
ae:ba:ae:ee:47:67:70:08:bf:07:cf:31:8f:71:a9:
ef:15:45:66:c4:e6:0d:cd:3c:80:8f:53:7a:2a:86:
f3:33:ec:ab:d8:2c:66:7f:e4:ed:ae:b8:ad:c2:3c:
ac:44:9f:e8:d9:6b:8c:0f:e8:f5:c0:60:6c:5d:b0:
5a:70:78:41:38:09:73:bd:b7:37:0c:68:0e:b3:33:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:04:A8:DD:0D:F3:2B:3C:3F:6A:4D:11:23:FD:4D:C9:AB:7D:20:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d591d5ac-fd73-3905-b4c2-b5506be181fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
X509v3 Authority Key Identifier:
keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.163.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:c1:67:32:ae:a4:a1:b0:90:3e:5a:dc:a7:a6:6e:c9:4f:0e:
7a:eb:06:20:6c:e9:69:f0:01:c0:1b:f5:07:1f:1c:37:fd:d9:
48:be:ad:3e:d9:66:1c:63:5f:e5:b4:33:c7:6a:e9:39:82:c0:
90:21:3d:58:fd:07:c9:90:9e:2d:f5:0a:1b:51:2d:f7:cd:1f:
47:ce:17:00:a8:62:16:66:a0:f3:b4:89:49:0e:6c:a8:0b:6d:
65:fa:0c:37:dc:dc:60:e2:56:fe:ea:38:08:e1:b7:7f:75:e7:
bb:e4:38:d5:d7:b0:47:29:89:7c:54:01:20:2c:79:a6:14:38:
81:16:7b:58:61:00:c9:ed:16:aa:67:d9:9d:10:12:44:a3:62:
8d:07:6b:d7:f6:c1:14:c2:20:16:3c:c2:e5:e5:31:2e:e8:ae:
22:60:0c:cd:14:86:d3:de:ef:8e:dc:16:b7:b1:13:b1:9e:87:
5d:58:a9:08:69:f3:41:73:1a:65:ae:57:8c:8e:14:4a:da:26:
c8:df:fb:87:6a:4e:97:3f:13:dc:6f:8c:be:85:6b:3c:90:c1:
88:ed:b9:8a:f4:08:5c:31:15:df:4c:82:84:16:06:da:03:6a:
9c:2e:71:ca:41:c2:4e:8d:74:64:08:64:eb:fd:f1:e2:76:1b:
34:a4:f3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:04 2026 by rpki-client