
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fff6d29-9074-3d04-ab3a-dc669e8a6da5.roa
File: 3fff6d29-9074-3d04-ab3a-dc669e8a6da5.roa (raw, json)
Hash identifier: Jb+BZq4q5vIgHBKUDEMa5NOy56ouj+lLoVDo2S7BNuI=
Subject key identifier: 12:A8:3B:16:D8:F1:BC:DE:A2:53:61:AB:4D:0D:CC:AD:F3:0D:E0:6C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584DADAADF2A4BFF0697058D5440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fff6d29-9074-3d04-ab3a-dc669e8a6da5.roa
Signing time: Thu 30 Apr 2026 13:00:31 +0000
ROA not before: Thu 30 Apr 2026 13:00:31 +0000
ROA not after: Wed 29 Jul 2026 13:00:31 +0000
asID: 0
IP address blocks: 199.16.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ad:aa:df:2a:4b:ff:06:97:05:8d:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 30 13:00:31 2026 GMT
Not After : Jul 29 13:00:31 2026 GMT
Subject: CN=92dbfe4b-cd7f-402b-bf66-3352d0330dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:17:d4:5c:88:30:2c:9f:5d:a7:c2:a8:6b:56:
00:a0:b1:92:72:84:a1:de:c0:ee:73:d2:39:4e:6b:
b4:00:7c:69:7d:ee:ba:b3:98:00:0b:a3:f2:19:8c:
81:76:fd:83:eb:89:73:08:cd:a2:21:78:f5:7d:8e:
0b:46:8c:d7:02:99:40:ce:79:aa:c5:b7:78:84:2e:
8d:8b:ff:58:39:cf:5c:7d:06:60:b0:b5:f8:e4:0e:
8c:93:53:0b:1d:ab:0c:c7:b0:13:90:fc:99:30:5b:
a0:8b:1e:4f:31:9b:01:2d:36:e1:c3:88:9b:a6:cd:
52:fa:22:c5:6a:ab:b3:74:a3:87:15:1e:58:2e:6f:
d5:66:0a:d4:a7:5d:bb:e3:02:97:56:f4:38:01:b8:
fe:06:cb:36:39:0a:b4:9e:34:cf:09:83:ac:c2:c6:
47:7a:d4:14:d3:d8:dd:68:cc:9e:3a:e4:f5:0a:4e:
f0:1c:e4:0c:bb:75:9b:f0:19:4d:c8:7f:c6:8b:c5:
f6:90:98:7e:e7:77:cb:91:0f:c2:ca:21:5c:e3:8e:
b7:7a:df:77:6f:1d:e9:60:3f:10:23:b6:4f:d2:5b:
f2:b9:01:6f:7e:17:0c:9c:62:61:d0:0d:97:06:53:
df:0b:89:bc:99:b0:a7:03:02:43:c9:d8:5e:f1:76:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A8:3B:16:D8:F1:BC:DE:A2:53:61:AB:4D:0D:CC:AD:F3:0D:E0:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fff6d29-9074-3d04-ab3a-dc669e8a6da5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.16.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:fb:75:e7:fc:c2:e7:54:de:07:3e:1c:51:34:28:c2:8c:b2:
dc:de:7b:97:80:c3:1f:a7:5b:7d:cb:ce:94:72:87:53:40:5d:
65:ac:f9:f5:1e:67:5d:12:82:6d:3c:3b:d8:33:cc:95:16:f9:
7a:1d:c2:5a:14:36:38:43:21:a5:05:4c:d9:25:f9:39:a8:f2:
81:43:cb:74:e2:89:4e:8f:d4:03:9a:2a:65:9e:a7:ba:bd:d0:
03:71:b2:6b:e2:59:36:1d:37:8b:26:65:1c:68:b9:02:fc:da:
e8:8c:0d:5e:d9:6d:bf:65:26:1c:e5:4c:6c:a4:2a:b0:c0:cd:
c1:ad:50:e7:d2:35:ff:a1:ed:da:ac:bf:d4:98:1e:1c:f4:66:
e8:a1:fc:25:b7:51:79:3f:6e:1f:8b:c5:14:b5:b4:18:98:93:
01:f8:1d:77:2e:1f:bc:a1:8c:97:76:68:ef:0c:6f:05:bd:38:
8e:2a:00:07:9f:0c:c4:0e:28:ec:b5:fe:f4:6d:8b:e4:8b:c5:
1f:68:89:ec:0b:2f:ff:6f:0a:d8:b1:7b:ff:cb:a5:9e:c5:20:
c2:96:e6:b7:2f:84:85:a9:cd:eb:3d:05:b3:e2:75:dd:ec:13:
87:95:03:3d:68:61:26:54:71:5e:24:d0:eb:01:39:23:97:1b:
b4:bf:19:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:09:23 2026 by rpki-client