
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/193a1e6c-bcd1-3017-8bd4-9101cdc1d7e9.roa
File: 193a1e6c-bcd1-3017-8bd4-9101cdc1d7e9.roa (raw, json)
Hash identifier: oBYpVMI+sQvh2G+DOhcbwv1IYsiHH7LPAWvZsRqx2Bk=
Subject key identifier: 5D:4B:DA:76:63:FD:63:46:33:ED:D3:03:6E:55:88:89:1E:6D:11:87
Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial: 010D0C9F4328584D492A7CB4A2148ED558B55E00
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/193a1e6c-bcd1-3017-8bd4-9101cdc1d7e9.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 398465
IP address blocks: 209.250.8.0/23 maxlen: 23
209.250.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:7c:b4:a2:14:8e:d5:58:b5:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=3e8fdaee-e4ba-453a-8aca-eee12bcd9c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:39:1a:2a:2c:7a:28:89:44:e3:b1:fa:d1:d8:
40:8d:91:04:86:b1:36:6a:47:53:07:ce:61:4e:c2:
34:66:d7:01:c6:a6:07:74:72:ca:e9:1b:00:6d:5d:
84:49:76:7b:9e:25:0f:c6:52:ac:15:89:95:53:ce:
fb:06:e4:51:3d:46:b2:51:da:e5:db:b2:80:e6:2b:
ea:14:49:0e:cb:94:2b:48:02:04:6e:26:96:f4:9a:
ac:88:79:ed:d3:7a:cf:dd:e9:32:ae:96:b4:bb:9e:
fb:06:40:67:4a:bd:ac:3b:8f:1f:ab:27:77:29:df:
3f:f0:1a:2d:fd:1d:b8:79:81:ed:2c:16:f1:1b:87:
11:b0:e8:27:94:0b:91:c4:c5:92:08:93:4a:2c:7a:
35:0c:bc:74:8a:95:b2:c4:25:84:0e:78:af:27:b7:
6e:5f:c1:1c:36:b6:2a:8d:cc:ac:d1:5b:d3:86:df:
5c:c2:eb:ca:6a:cd:6a:82:99:e5:e3:90:ed:81:be:
40:79:d4:ad:28:f0:09:13:ed:42:59:d2:32:30:e3:
0f:c9:b9:ff:c5:a2:ec:f3:a1:f5:cf:b3:f5:ed:60:
dd:ae:3f:16:e9:a6:25:a2:91:72:37:54:fe:75:de:
41:40:2e:d8:f2:bd:02:e1:05:87:a7:43:7b:ac:58:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4B:DA:76:63:FD:63:46:33:ED:D3:03:6E:55:88:89:1E:6D:11:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/193a1e6c-bcd1-3017-8bd4-9101cdc1d7e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
X509v3 Authority Key Identifier:
keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.250.8.0/23
209.250.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:61:fb:c7:28:fc:95:15:b7:9a:7e:6f:b2:6c:68:25:d7:2f:
20:20:ff:d4:5b:ef:e5:41:b0:6e:f6:96:02:7b:da:95:56:00:
9f:f9:fe:1a:98:66:fa:d1:db:47:ef:fb:83:21:5f:dd:92:cf:
c2:17:13:71:67:8d:db:3f:4b:f9:f0:95:f2:ae:ca:92:a1:1f:
96:af:81:ab:36:a1:07:a2:28:bc:5b:63:00:85:12:b9:57:b6:
ed:53:2a:47:e7:fd:b6:00:24:d1:72:11:f3:83:57:c9:21:34:
6c:dd:44:94:aa:07:66:d5:e6:b0:ce:11:0b:08:ff:d8:fb:06:
71:df:55:f7:e0:92:f8:3d:81:d1:f3:a6:19:38:07:db:10:95:
aa:11:00:57:85:ea:29:2d:3e:2d:eb:5f:49:12:05:8b:2b:ee:
d8:6c:db:12:a5:c3:5a:c3:59:a4:a5:63:95:65:31:d6:44:20:
b5:11:fe:ee:e9:8c:d3:57:a3:cf:0f:6f:33:8a:08:1b:f2:63:
7d:7b:23:6b:2b:99:28:9c:6a:60:09:d3:3e:9c:e9:6a:8b:03:
48:16:aa:94:c1:c6:11:70:2a:fd:e1:68:54:0e:be:51:63:d9:
32:e2:29:b1:b9:a3:b5:2b:37:2d:b8:ab:e2:65:7b:be:2e:1a:
05:b4:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:12 2026 by rpki-client