
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa
File: 5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa (raw, json)
Hash identifier: Il42QUbZcumsAyWBC3QVPGhTiL7uKAWvFGEjgiaGRNo=
Subject key identifier: F2:77:03:3B:49:87:64:2B:A2:8C:F5:F3:A9:54:22:AE:91:F0:2A:69
Certificate issuer: /CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
Certificate serial: 010D0C9F4328584F480D36E1F3DD9C44ECACD280
Authority key identifier: E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa
Signing time: Thu 24 Sep 2026 13:00:12 +0000
ROA not before: Thu 24 Sep 2026 13:00:12 +0000
ROA not after: Wed 23 Dec 2026 14:00:12 +0000
asID: 14333
IP address blocks: 199.168.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:48:0d:36:e1:f3:dd:9c:44:ec:ac:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
Validity
Not Before: Sep 24 13:00:12 2026 GMT
Not After : Dec 23 14:00:12 2026 GMT
Subject: CN=63467805-af56-4d9d-8a03-62fec4751fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ac:c3:77:98:23:ca:6f:46:97:99:40:0c:91:
c9:1b:92:8d:9f:38:2d:d5:d7:6d:bb:26:03:73:79:
d0:71:1d:75:fe:1f:da:3b:df:11:f4:6c:89:2c:bf:
ed:93:cc:51:5d:b8:6a:ec:a3:11:7a:19:d5:1f:65:
e6:20:f8:8b:0b:48:b8:fe:d6:34:31:24:50:2e:f4:
35:4d:c2:eb:e1:52:c2:44:ac:52:ce:2a:f5:72:fd:
6b:0e:af:88:a2:8a:a3:34:bf:b6:36:20:52:f6:27:
3f:e9:6c:98:20:94:de:0a:75:78:2d:15:6d:95:b7:
1e:bd:92:03:43:ba:ef:07:a0:86:5f:e9:c6:16:8c:
cc:f7:b2:29:56:1b:51:07:2b:91:04:3b:51:fc:50:
34:0d:d3:7c:13:e6:c0:b3:75:2b:4e:14:56:80:1b:
12:6d:f3:ed:08:8a:5b:0e:47:65:e4:b3:f0:c7:38:
cf:57:12:69:20:ab:93:8b:78:6d:05:82:6d:fe:f4:
bc:be:2e:c9:9a:85:3c:7b:c9:03:b3:f8:fe:10:8a:
26:2f:92:b9:1c:40:41:94:ab:9f:7f:8e:3e:3c:08:
69:e9:31:31:f7:52:f7:4f:8f:05:0c:d6:ea:64:62:
cf:e0:14:eb:3e:64:ed:43:4a:bd:16:74:37:8f:6e:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:77:03:3B:49:87:64:2B:A2:8C:F5:F3:A9:54:22:AE:91:F0:2A:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl
X509v3 Authority Key Identifier:
keyid:E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.168.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:20:bf:9f:5f:67:37:6f:a6:05:4f:c3:b3:fd:8f:6a:9a:89:
37:10:21:43:1d:5f:78:fa:11:a9:39:27:40:36:96:f1:c7:aa:
b3:c7:11:bc:17:a9:25:53:26:eb:b4:bc:c2:e4:47:83:96:28:
7b:14:97:e9:52:95:37:39:50:bc:cc:db:c3:bf:97:c9:e6:bd:
62:3f:a1:2e:67:14:e5:2f:02:65:ba:53:31:fc:04:c0:ec:fa:
de:88:96:1a:04:de:cd:14:4f:53:d6:3e:77:79:31:bc:8d:c1:
9d:fe:0c:79:7f:b7:fb:a5:ce:5b:6d:20:8e:1d:e2:77:d2:7f:
ac:06:d0:64:41:06:c8:e5:31:25:11:2b:85:bf:93:e5:64:cb:
7f:7a:c1:dd:97:2d:78:a5:1d:74:87:73:fb:7d:41:41:7e:6c:
eb:9d:0d:61:f1:fe:8b:35:62:58:e9:37:8a:ae:60:49:21:db:
d4:31:2b:df:8f:4a:cf:d0:2c:22:f3:10:9f:bc:32:a9:04:37:
d7:84:71:81:d1:63:de:03:a1:d6:79:e9:7c:18:37:65:61:2d:
6d:30:a1:c6:36:67:f3:59:aa:5e:be:6a:d9:b4:a0:03:b9:d7:
3a:86:19:07:a4:77:94:29:19:14:5d:6c:81:3c:48:5d:86:53:
60:11:fd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 03:33:09 2026 by rpki-client