
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa
File: a0319291-6260-33b7-94e3-177209ea6dc7.roa (raw, json)
Hash identifier: KrtngxTMl5Qhxml8e6zQjaTlY5MVzamIgYC2w83CNSs=
Subject key identifier: 26:CE:F7:B1:1D:77:1B:49:38:FB:E4:30:94:83:1D:E9:FA:8B:36:64
Certificate issuer: /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
Certificate serial: 010D0C9F4328584F1897947439A7AF923FF61000
Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa
Signing time: Mon 07 Sep 2026 13:00:12 +0000
ROA not before: Mon 07 Sep 2026 13:00:12 +0000
ROA not after: Sun 06 Dec 2026 14:00:12 +0000
asID: 394449
IP address blocks: 199.68.53.0/24 maxlen: 24
2604:3dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:18:97:94:74:39:a7:af:92:3f:f6:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
Validity
Not Before: Sep 7 13:00:12 2026 GMT
Not After : Dec 6 14:00:12 2026 GMT
Subject: CN=2ab488f3-3638-456a-81ee-cfb547f990dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:24:68:5d:1a:25:56:aa:35:33:d1:45:72:
a3:26:b9:81:0b:14:03:d4:4e:f4:bd:ae:7c:a0:74:
70:14:e9:41:ce:40:95:7e:58:6c:e8:5a:7b:fb:77:
e8:2c:60:2b:27:ba:60:36:d7:e3:e1:cd:ae:7d:85:
42:a3:98:61:1c:56:a1:ba:9b:7a:61:ee:e5:20:9c:
46:06:c6:25:e4:db:32:b1:56:04:fb:b3:c4:8c:cb:
68:fc:06:48:42:c7:f8:b7:9c:cb:fe:63:9b:c3:dc:
07:c6:a3:76:d6:9f:fd:0e:ce:0d:57:6a:52:f0:54:
6e:06:b5:8f:3a:18:81:b9:cf:11:fd:d3:62:bc:60:
8f:b9:61:d4:74:1a:f9:51:a7:c9:a1:a6:eb:bb:7e:
8d:03:49:60:22:96:55:7d:8f:1c:0d:e3:49:fb:88:
e5:67:8b:45:c3:72:aa:11:99:3c:e3:d8:e2:33:e0:
e1:44:cd:79:02:07:49:71:a0:14:89:8b:c6:cf:7a:
21:67:57:90:45:2b:17:df:85:84:5a:92:20:d0:37:
cc:e0:31:e3:e7:8a:ea:ae:c4:25:0a:96:1f:08:ca:
e6:a0:2d:32:f9:c2:37:6e:cc:65:b8:59:58:cd:59:
66:54:2a:dc:73:d9:af:8a:e5:b1:19:38:d4:51:41:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CE:F7:B1:1D:77:1B:49:38:FB:E4:30:94:83:1D:E9:FA:8B:36:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl
X509v3 Authority Key Identifier:
keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
sbgp-ipAddrBlock: critical
IPv4:
199.68.53.0/24
IPv6:
2604:3dc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:bb:d7:ef:22:48:53:37:19:54:a9:4d:db:48:59:1b:49:ba:
5c:ee:f0:a2:79:28:36:98:01:c2:6f:64:99:78:34:ea:0c:26:
c0:46:2a:a0:b8:da:0a:74:a5:69:63:05:05:b6:80:64:e1:a3:
e9:f1:82:7b:47:05:1a:e4:4b:ab:00:12:67:f5:df:55:20:11:
63:d7:80:91:29:b9:3b:70:4b:4b:1c:ac:53:56:72:22:1e:8d:
f8:27:a2:da:12:3e:70:ae:d5:e0:37:55:b6:aa:6f:a9:bb:2f:
ce:23:5c:0f:93:8e:b8:d8:a8:e6:f7:11:35:b3:9c:2b:e9:ea:
8f:b6:b3:94:75:3a:e8:58:a3:46:1b:5f:d6:72:a2:74:e9:91:
7a:35:54:fb:ff:b2:34:51:a8:69:76:9b:c2:f0:e8:99:5d:a1:
a5:52:8b:74:2f:a9:cf:cc:f0:f6:b2:c4:38:c2:c5:07:5f:bc:
ee:11:a2:6f:d4:fd:5d:d9:02:e5:9d:d0:19:92:2c:c2:c6:de:
25:87:ba:ee:cc:91:20:ad:f6:5d:b8:b9:87:6b:b6:ce:a3:4b:
22:8b:d0:e5:eb:bd:21:84:96:5b:16:1a:c1:96:66:83:01:d7:
c5:b7:ac:1c:84:d4:d6:92:42:fc:bd:20:f4:b7:ea:cd:d4:0b:
93:6b:98:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:57:52 2026 by rpki-client