
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/c71a15d2-e000-33ce-85be-6790968c961e.roa
File: c71a15d2-e000-33ce-85be-6790968c961e.roa (raw, json)
Hash identifier: mnngjnnzJFKVjaq4OoDoXCyPJZeaqTu7osjU2zHfgM8=
Subject key identifier: 9D:BC:74:82:9C:BA:C6:38:AF:A8:F4:27:26:5B:44:F2:AF:05:0B:66
Certificate issuer: /CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
Certificate serial: 010D0C9F4328584F51D2A66EFFB574468FF43B00
Authority key identifier: E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/c71a15d2-e000-33ce-85be-6790968c961e.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 397709
IP address blocks: 198.203.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:a6:6e:ff:b5:74:46:8f:f4:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=c08f7c58-824c-45d8-9f29-638a1ce06a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0c:3b:f3:4a:0c:ec:7d:1b:ca:18:f3:35:18:
47:c8:e5:80:a1:7f:a3:60:82:da:60:11:ff:2e:37:
0a:17:89:ef:40:d0:6a:f5:fb:23:d9:db:6e:ad:75:
8c:f7:bf:a2:77:bf:24:73:fd:28:9e:a3:6a:54:60:
d1:06:26:78:6b:b7:e6:26:5b:27:22:28:e6:81:3b:
7b:a0:50:41:72:b9:d4:0b:79:9d:2b:1c:99:db:7a:
0a:f6:d0:66:e3:e1:df:28:2a:27:f5:78:84:af:ff:
1a:f5:41:c5:f0:09:15:62:eb:7f:95:77:2d:63:96:
e9:66:78:5c:e7:c0:03:a2:fe:d7:97:67:5a:68:2f:
8d:6c:b2:c0:f0:55:d5:53:c8:16:68:d4:10:f3:7b:
4e:41:0f:2c:b2:f2:7b:92:9c:dd:d5:8f:0b:1f:76:
2d:12:a1:9c:39:d4:64:9e:1e:ec:82:07:d8:0c:6f:
43:53:f5:6e:cf:a0:4f:11:fc:c9:e7:7c:de:fe:40:
e3:12:0a:bd:b2:6c:05:b0:47:72:bc:f7:7e:7e:32:
63:22:78:6f:da:28:45:5d:ab:a4:14:7d:83:58:bc:
2e:5c:03:9b:bb:fc:ae:b4:5e:84:58:69:58:94:52:
69:a2:39:15:05:7f:9e:38:15:51:e4:03:75:20:67:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BC:74:82:9C:BA:C6:38:AF:A8:F4:27:26:5B:44:F2:AF:05:0B:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/c71a15d2-e000-33ce-85be-6790968c961e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl
X509v3 Authority Key Identifier:
keyid:E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
sbgp-ipAddrBlock: critical
IPv4:
198.203.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:0a:92:9b:2a:0a:3f:d3:5e:37:a3:69:a8:2c:b7:2a:e0:db:
77:30:72:95:dd:ce:11:0b:a8:0e:78:19:9b:10:e7:d7:63:66:
42:07:86:3a:42:f8:30:ed:67:73:53:ed:d7:a0:58:c1:51:63:
a7:f9:57:ff:55:66:82:d9:f6:03:58:11:59:0e:8b:69:05:a1:
b7:f5:98:f0:83:bd:f6:c8:75:b3:bc:a4:b9:36:90:dd:5f:16:
b2:8e:f4:32:16:e5:20:8c:5b:2e:5f:b3:b5:c4:a9:42:62:63:
0d:7d:ff:bc:9a:79:2a:da:8c:50:df:d3:52:1c:4c:77:a7:51:
d8:77:0a:cd:35:98:dc:8f:3b:5c:b0:84:b4:2f:58:0d:6b:9c:
35:36:92:79:b4:e4:4d:70:d3:c9:fa:f8:0c:f4:fe:82:fb:bb:
4c:e3:0c:b4:8a:93:a5:bd:a2:5b:d3:8d:95:30:87:55:0f:4b:
9d:79:48:e7:53:cf:b2:45:c9:45:8f:26:bb:5b:e3:a0:a5:2b:
c1:eb:ef:d1:33:45:0f:42:3f:eb:d5:ac:c5:5b:40:41:08:87:
62:49:46:6c:58:67:6f:1f:be:4e:65:89:bf:98:8b:f8:dd:a4:
92:ec:44:8d:8d:5f:87:a2:9b:14:d0:9e:ce:23:5e:89:cd:93:
f2:2e:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:06:28 2026 by rpki-client