
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa
File: 875cadce-0a07-3252-b823-2dab07525f7b.roa (raw, json)
Hash identifier: zbNUrpDJshjAY0GguGCmjd+J4Lyf+VuivHMAVr5+xoA=
Subject key identifier: 2E:54:31:5E:D0:BF:FA:41:50:DC:EA:B7:15:4C:AE:AB:EC:DA:E6:DB
Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial: 010D0C9F4328584F4975E12B478569DAAFA35000
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 16509
IP address blocks: 192.157.36.0/23 maxlen: 24
2602:f7db::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:e1:2b:47:85:69:da:af:a3:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1cef1da8-c75b-46d5-8147-8f4612424cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6d:b3:82:e3:f5:4d:f1:d4:2c:46:01:35:3b:
6f:36:52:fd:fe:4d:a8:c1:d1:f6:d8:af:85:3e:e2:
92:0a:b4:06:5c:38:23:55:a4:2a:37:12:c5:37:f6:
5e:92:43:f6:d2:6d:55:34:e6:d7:43:82:f0:2e:33:
f6:cb:d8:33:47:cc:df:68:98:94:b4:c4:30:c5:b9:
b4:14:1d:83:1d:90:53:0c:bc:13:1d:a2:ae:18:4a:
8a:62:e0:c1:70:e0:87:27:59:60:62:97:75:ad:76:
35:e5:60:13:ca:c1:7c:df:00:3e:ed:a2:0e:c3:47:
69:02:90:e6:c7:05:6c:d8:a4:3c:31:90:c2:69:88:
cb:15:51:3b:ba:ac:fe:ea:aa:25:a3:9e:9c:67:60:
c1:51:e9:0d:e4:f1:54:20:12:52:30:7f:be:5e:b3:
57:36:87:bc:22:86:4d:d7:87:16:ea:ed:67:b6:0e:
31:00:a9:bb:d1:d6:62:38:12:e0:08:8d:29:f5:33:
07:9e:80:30:56:6e:ef:ba:6d:10:2f:67:ce:17:26:
9e:7a:74:1f:fc:6b:f2:1a:da:69:6b:cb:b4:20:70:
6d:0a:d4:3a:99:7b:ad:df:95:a1:ec:81:97:1f:db:
23:32:d5:1e:a0:50:dd:24:88:a5:1c:a2:30:71:0a:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:54:31:5E:D0:BF:FA:41:50:DC:EA:B7:15:4C:AE:AB:EC:DA:E6:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
X509v3 Authority Key Identifier:
keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
sbgp-ipAddrBlock: critical
IPv4:
192.157.36.0/23
IPv6:
2602:f7db::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:1f:a3:54:0e:ed:9c:e8:e4:de:20:03:8f:5c:ee:59:0f:83:
c7:99:94:06:f5:67:aa:dc:82:8f:35:d7:a8:d4:65:12:87:0b:
df:5f:9b:00:79:ac:7d:3c:9e:a1:e8:c3:e6:9a:5f:98:4b:be:
c6:8e:cf:26:dd:8c:6e:1b:28:2d:76:ae:5d:20:23:58:4b:42:
f4:19:7e:ea:4f:6d:09:86:48:38:f7:09:c4:71:8b:b7:14:f8:
ce:5d:6d:e5:e7:43:1a:e7:70:12:05:00:67:20:b8:3b:0b:ff:
15:94:31:42:27:94:e4:17:2f:e8:b4:8f:3f:c4:79:10:13:13:
2b:23:58:36:8a:0a:86:56:bc:d1:31:46:60:17:56:7d:5a:05:
1e:81:32:fe:20:fc:3e:aa:ad:33:07:78:43:8f:c5:00:4b:77:
ef:bd:22:4b:98:85:a2:f3:51:ba:0c:5d:5a:e5:8f:a7:65:bd:
8e:56:95:89:03:92:b5:12:76:d9:e3:62:c1:7e:df:da:f0:2e:
2d:d8:ab:0f:f7:34:46:d0:c4:d8:12:17:98:98:b1:30:81:e8:
fa:a9:ab:89:4c:32:6f:e2:33:87:08:b3:85:7a:a1:32:4d:79:
1f:bd:e6:ab:89:06:82:3b:93:80:e3:9a:ad:f6:80:4f:fe:e9:
86:9f:23:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:59:42 2026 by rpki-client