
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/1905bf21-ee68-3188-bef3-4a4a821e314f.roa
File: 1905bf21-ee68-3188-bef3-4a4a821e314f.roa (raw, json)
Hash identifier: 5wjKeV6CLlN93+/jb/Xbl1xc9B1qBYbqdlejC/68pL4=
Subject key identifier: F4:CA:44:B9:58:1C:3B:80:6C:0D:71:48:E4:1B:CF:EB:0B:A7:99:7F
Certificate issuer: /CN=f7f8499b-2456-4be8-bad9-ced434198fa0
Certificate serial: 010D0C9F4328584F4976A3E28EB2AC9473FF2100
Authority key identifier: 35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/1905bf21-ee68-3188-bef3-4a4a821e314f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7896
IP address blocks: 137.48.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:a3:e2:8e:b2:ac:94:73:ff:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f8499b-2456-4be8-bad9-ced434198fa0
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=833cf97e-f536-4f4b-8c11-a16ceb95fe00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:84:6f:31:5f:27:10:64:50:41:bf:18:01:
ac:f9:f2:d6:8d:f0:38:6a:71:68:35:ee:66:07:ac:
e2:55:e3:6d:62:7e:cd:5a:89:7e:83:67:f1:32:9b:
af:1a:7d:d9:15:b8:ef:e0:d8:dc:22:0e:37:65:e9:
9b:bc:5d:0f:2a:f9:f9:05:b5:bd:08:e3:28:23:35:
0e:e6:2c:3f:02:f8:2c:f8:36:9c:64:7e:ec:aa:84:
c6:8e:3b:77:28:fe:17:84:0d:e8:88:2e:b8:41:0d:
a9:66:ab:37:5f:ed:5d:c2:92:ad:ca:16:80:a9:1d:
be:22:21:f8:0a:c7:a5:a2:da:81:0a:87:a9:65:cd:
19:0b:ae:e6:81:95:57:96:7e:57:fe:45:a8:86:c6:
e8:a1:2c:aa:96:12:34:4d:0b:f2:09:08:6c:8a:9d:
cd:ef:30:ce:32:b9:13:e8:15:c6:91:fb:0b:2a:a6:
e2:a1:c6:28:e6:85:fd:ac:2a:fa:3d:5e:85:3c:11:
39:9e:40:91:90:21:9f:d5:29:0c:4b:cb:da:de:d9:
f7:96:a2:77:7d:c4:98:23:12:b6:36:61:03:94:67:
17:8a:ae:2d:59:18:72:24:a1:2e:92:66:b2:4f:6d:
8b:73:4c:5f:62:10:20:ff:6b:94:94:5d:4e:cd:b3:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CA:44:B9:58:1C:3B:80:6C:0D:71:48:E4:1B:CF:EB:0B:A7:99:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/1905bf21-ee68-3188-bef3-4a4a821e314f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl
X509v3 Authority Key Identifier:
keyid:35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
sbgp-ipAddrBlock: critical
IPv4:
137.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:2a:6e:7c:41:c3:7c:b5:67:88:23:91:a3:c5:3f:38:85:ee:
a2:ce:de:2d:c2:ee:9f:5a:04:20:a9:73:a4:e2:7f:71:51:75:
ba:a7:1c:93:65:7a:b6:32:3c:ad:62:7a:f3:ed:63:49:6e:ec:
83:9a:55:2c:3a:63:f7:a7:4e:05:af:25:a5:69:67:b8:6b:a2:
16:6a:f0:e5:ca:72:a0:c2:29:ac:3e:08:34:c6:28:bc:a9:fd:
60:68:0f:4c:73:42:bc:00:8b:39:76:0d:a0:ff:0c:4c:e2:1e:
aa:98:8b:83:41:56:3f:b0:45:91:bb:00:96:3d:40:8a:93:25:
6f:8d:52:65:55:09:0c:8b:5c:38:76:8e:17:6f:34:bc:0a:1a:
d8:2d:6f:7a:10:5f:49:da:be:00:24:26:a7:f6:16:f3:d6:0a:
e1:06:3d:85:8b:08:69:30:3b:c9:cd:24:d6:62:9d:d7:71:04:
6c:f4:42:a7:67:da:24:9d:bb:74:ff:d1:1d:ce:52:10:a6:0e:
f0:3e:cd:07:66:da:58:36:fc:bf:db:07:5d:06:5f:44:6e:96:
97:5d:1f:11:63:c1:e2:2c:09:3d:77:8f:96:40:d3:1e:0f:2c:
3c:d6:62:53:6e:68:2f:34:4b:55:ce:85:5f:5d:cc:83:33:9a:
d5:e4:a8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:10:10 2026 by rpki-client