
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f4bc5acc-bc6e-310a-aa4d-263b66ee12ae.roa
File: f4bc5acc-bc6e-310a-aa4d-263b66ee12ae.roa (raw, json)
Hash identifier: hx53ksk3VntnDHBW16hEhoBRvEsk1VcmQEL8sZYbocM=
Subject key identifier: D9:0F:A7:CD:3A:74:38:26:DD:F4:B5:DA:EC:06:96:8F:B8:FE:CB:D5
Certificate issuer: /CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
Certificate serial: 010D0C9F4328584F46A7F3002E813DAD55AEC3B8
Authority key identifier: DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f4bc5acc-bc6e-310a-aa4d-263b66ee12ae.roa
Signing time: Thu 24 Sep 2026 01:00:12 +0000
ROA not before: Thu 24 Sep 2026 01:00:12 +0000
ROA not after: Wed 23 Dec 2026 02:00:12 +0000
asID: 20259
IP address blocks: 199.5.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:46:a7:f3:00:2e:81:3d:ad:55:ae:c3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
Validity
Not Before: Sep 24 01:00:12 2026 GMT
Not After : Dec 23 02:00:12 2026 GMT
Subject: CN=fe6455c7-72f8-4958-bc82-9072be48dae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:48:79:da:77:82:ec:72:db:ae:71:aa:73:
74:28:ea:1e:6c:5e:c2:e1:96:b8:54:10:72:1d:71:
0a:35:b9:07:61:68:40:c5:95:68:34:3a:c9:34:88:
03:b7:94:53:42:dc:33:4d:2d:99:b9:85:fb:02:bf:
1f:47:6a:5d:01:1a:6d:dc:4c:ef:7a:27:8a:ef:c0:
7e:01:9c:43:5a:0b:22:01:85:a9:59:fa:2e:95:0e:
55:cd:27:a1:b7:08:79:ac:30:c2:35:9b:a0:65:8a:
e5:e5:8b:80:8a:82:36:bd:14:5b:a6:2b:92:ff:67:
9c:08:1b:d3:01:d8:30:88:75:6c:6d:68:46:09:bb:
8e:c1:18:94:60:2a:5f:b3:fe:06:15:d8:5b:34:87:
39:ec:67:e1:5c:d8:88:ea:8e:01:de:bb:f0:ad:11:
83:55:ae:62:ec:e6:66:d7:9d:84:fa:6b:0f:f9:1b:
b7:cd:b3:bb:16:5e:c6:9d:27:94:8a:a0:c2:ba:4a:
83:57:cf:c7:d3:40:a8:6c:92:e6:c5:25:be:48:33:
32:eb:3e:9a:03:aa:6f:40:9a:69:03:2c:5e:a5:26:
fb:ef:3a:9b:5e:3e:8b:44:e4:ba:27:43:7e:98:05:
c1:1d:c5:71:e0:88:40:cf:ee:0d:6e:52:70:2b:fb:
6e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0F:A7:CD:3A:74:38:26:DD:F4:B5:DA:EC:06:96:8F:B8:FE:CB:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f4bc5acc-bc6e-310a-aa4d-263b66ee12ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl
X509v3 Authority Key Identifier:
keyid:DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
sbgp-ipAddrBlock: critical
IPv4:
199.5.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:ec:bd:22:16:e4:a0:f0:2e:e6:8b:d4:8f:23:c3:06:b1:db:
d1:cf:ef:5a:0e:0c:96:1f:c0:a5:02:ee:42:50:bf:6a:02:6e:
79:e6:ee:20:dd:78:c6:a7:77:97:5f:86:4f:18:0a:61:93:b1:
51:3d:c0:23:9f:d1:8f:4f:98:c5:d6:77:b8:45:cb:d8:9b:99:
62:ee:72:37:9f:c7:a0:72:f0:17:2d:cf:1c:a9:40:c7:ff:e1:
78:43:1b:56:e2:0d:62:ab:14:ec:35:19:86:92:dc:0d:0d:55:
54:7d:b6:45:62:90:b1:29:f7:98:bd:3b:ba:53:5c:50:8f:c4:
00:0b:f9:14:24:46:03:30:f9:34:a5:78:f9:3a:e5:9b:b0:38:
e1:07:d3:2c:42:83:5a:75:0f:36:f3:a4:d4:cd:fa:9b:cc:5c:
38:f2:6a:a4:ba:45:e2:55:34:03:74:9c:40:6b:d3:1f:51:26:
31:38:f7:f8:13:68:49:2b:6a:bc:00:7b:f3:42:ce:79:83:ec:
88:66:6a:45:1d:b6:ed:08:00:01:40:d0:bd:e5:16:a1:50:b1:
aa:4f:b5:8d:01:3e:4c:72:8c:b4:94:c0:a8:fb:b8:a2:3a:15:
bd:cd:da:7c:d6:b8:19:87:66:ac:78:dc:d4:57:f3:c5:74:2b:
00:83:f8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:00:47 2026 by rpki-client