
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa
File: 10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa (raw, json)
Hash identifier: ODmw07tbZRBHVBmAAwpYIi2X3VeJFckjWCuWIa87hyI=
Subject key identifier: 63:A4:BA:BB:F5:60:3E:12:A2:49:D7:E7:72:96:F7:37:49:32:3E:46
Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial: 010D0C9F4328584F49767FD88251837281E3C540
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 125
IP address blocks: 199.64.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:7f:d8:82:51:83:72:81:e3:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=048b4936-87a0-42fd-86f9-b6f16ef3baed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c4:b8:16:58:66:e2:13:ea:81:74:5e:46:75:
6b:c7:a4:15:3d:6e:d3:50:f2:c4:78:2b:4f:31:04:
0a:1d:b2:e5:10:6d:8d:c8:54:89:d7:68:3a:f5:19:
22:3c:56:2a:ae:a6:6b:5d:be:a5:a0:e1:d9:2c:9c:
c2:15:76:11:d7:b5:99:e7:a9:0e:6f:ab:7b:e3:53:
75:27:b2:57:2d:28:32:2d:eb:32:ea:35:5f:c4:99:
0d:72:19:c9:57:10:72:fe:ac:01:c3:c9:cc:9a:9c:
d6:a8:3b:54:89:af:97:cc:d8:71:da:be:8c:eb:82:
4d:48:94:48:2f:4a:82:ef:b2:cc:46:6c:4b:6a:e0:
c7:f8:7b:a1:f4:b6:3e:79:5e:35:c8:9d:2d:22:43:
76:18:40:d3:b6:64:60:67:24:9b:f6:20:dd:86:9b:
8e:ac:bd:59:5e:a4:ef:61:de:ab:a4:fb:fb:65:a8:
9e:98:81:b7:04:f9:01:fb:96:0a:a1:06:d0:97:8d:
8a:a2:ff:3a:cf:42:42:3e:dd:26:05:30:75:f6:f8:
77:f1:b9:9b:75:0d:6b:19:d3:1b:69:2e:77:53:6d:
24:bc:d8:0e:01:2e:e2:1e:59:26:24:78:5f:1e:d8:
c8:0c:1a:5a:0d:e7:7b:9a:02:79:46:a7:00:38:39:
db:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A4:BA:BB:F5:60:3E:12:A2:49:D7:E7:72:96:F7:37:49:32:3E:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
X509v3 Authority Key Identifier:
keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.64.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:e8:47:54:f5:17:26:ce:d2:79:80:6e:3f:33:92:d9:4e:04:
2f:2c:84:54:4c:cd:d0:7c:e5:4c:67:a8:24:5a:3d:25:6f:91:
d9:b1:0d:f3:df:70:8b:f9:b5:42:e6:c4:85:6c:12:54:de:29:
29:75:3f:6d:cc:75:fd:36:28:9a:07:69:49:90:c5:cf:28:ba:
bc:75:81:a5:21:e7:2b:88:68:8a:42:1c:f5:0f:b5:54:df:c0:
15:b1:eb:ef:3a:24:0c:1e:37:ed:15:78:3d:fb:13:ef:3f:32:
0c:54:72:d5:11:85:52:6d:06:92:fc:af:70:47:af:fa:08:52:
c8:32:d1:6d:fd:26:4a:cf:3f:a5:ea:3b:16:ed:1d:eb:79:d5:
14:81:90:bd:57:a5:e1:b3:ac:84:51:4f:87:02:25:aa:64:54:
df:76:a0:c3:80:11:61:af:36:07:ff:cd:1a:e7:25:1a:6b:ba:
60:53:c2:f7:34:89:9c:56:2b:1f:11:86:b8:64:96:e2:b5:90:
b1:dd:e9:bc:8b:4b:1a:a9:f1:28:df:80:53:08:b8:60:77:2c:
2f:ed:4d:1c:e7:93:c0:54:c4:0b:30:4c:dc:a9:85:48:d8:bd:
fd:72:b5:4c:f4:f5:3b:ac:6a:a9:b1:a6:68:0b:61:89:e0:5c:
5f:90:5d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:32:29 2026 by rpki-client