
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9b5c1ca8-e48e-3b72-b932-bf613f601785.roa
File: 9b5c1ca8-e48e-3b72-b932-bf613f601785.roa (raw, json)
Hash identifier: nvHqNJniwBxHWjXntbIZglHQ3Zwjgg+hfQPGmW6ses0=
Subject key identifier: C3:76:B4:6F:B1:B4:37:AD:75:61:79:C4:DF:2A:31:69:D9:30:D3:91
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F4328584E6C6F6A249322C8FD978D9F00
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9b5c1ca8-e48e-3b72-b932-bf613f601785.roa
Signing time: Tue 07 Jul 2026 21:00:13 +0000
ROA not before: Tue 07 Jul 2026 21:00:13 +0000
ROA not after: Mon 05 Oct 2026 21:00:13 +0000
asID: 3136
IP address blocks: 198.150.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6c:6f:6a:24:93:22:c8:fd:97:8d:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Jul 7 21:00:13 2026 GMT
Not After : Oct 5 21:00:13 2026 GMT
Subject: CN=199a70fe-d563-4aa9-bd28-3d7c53201c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:8b:a0:75:ca:b5:fe:62:b9:21:0b:25:f7:
e4:00:a6:87:ed:37:58:70:de:d0:0b:fd:5a:d3:30:
ea:94:da:4d:fe:6f:fd:ae:d0:65:09:3e:5b:96:4d:
a6:47:c1:0b:34:b1:31:64:ac:d1:1f:36:44:bc:f8:
6b:36:7f:3f:0d:10:e6:a5:95:14:aa:3f:bc:58:22:
12:42:9c:89:f1:78:d1:87:4c:1f:4b:2d:10:98:35:
c8:19:19:ca:9c:6a:01:0d:6c:7d:57:68:a5:5b:d6:
4f:8a:b7:fc:4b:53:44:a0:80:15:9d:60:cf:7c:64:
28:fb:88:51:46:4f:b6:dc:f4:b0:85:a1:b6:24:1b:
fb:1d:2d:90:a7:7e:ad:4d:d9:4a:ea:d9:c8:76:a9:
e5:3b:7c:96:d4:fe:4d:5f:43:20:e1:47:02:03:45:
2e:5b:a7:1e:6f:90:b0:96:62:fc:69:b5:90:43:6e:
69:91:26:da:cb:a7:8d:fd:6a:8f:d1:2a:9e:ef:00:
18:3a:d1:84:1a:b2:ab:6c:32:59:b6:a7:0a:02:f7:
87:58:fd:6a:dd:d4:0b:df:a9:80:12:5b:46:c8:dc:
2e:8a:01:bb:10:83:a4:b0:78:2e:0d:37:d2:d5:e1:
84:c1:fb:5b:bf:8c:73:86:89:15:5c:e6:bc:68:2a:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:76:B4:6F:B1:B4:37:AD:75:61:79:C4:DF:2A:31:69:D9:30:D3:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9b5c1ca8-e48e-3b72-b932-bf613f601785.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
198.150.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:44:66:0e:60:ed:89:72:3f:8a:19:26:8a:4e:5b:77:ee:25:
1d:3e:0d:16:ba:9d:ea:e4:e6:b9:4b:e2:21:df:44:be:fc:cf:
18:4f:df:43:4d:00:cf:4c:5b:ae:10:6d:57:77:a1:63:13:44:
13:84:9e:e2:b4:06:96:2e:e9:2c:75:ed:ac:a7:57:48:6b:e0:
49:73:9d:62:3e:37:b4:28:56:31:d5:a2:3c:8a:cf:15:15:bb:
86:95:a2:9d:c6:7e:a8:32:71:80:f1:8b:5e:51:f5:5a:60:71:
5d:7b:a1:bf:c1:7d:67:fb:47:ad:87:91:69:0c:20:76:46:c6:
08:c1:95:c7:06:a7:67:95:be:4b:07:a2:b5:60:28:c4:47:9c:
52:0a:57:ab:fa:c9:c9:7c:63:bc:be:c7:c0:bf:90:cc:2b:1e:
b1:ee:70:16:5f:2c:4c:ed:6a:6e:81:7a:e0:b1:cb:17:64:4b:
74:f6:1e:ca:86:3a:bb:15:41:6a:5e:7d:88:45:8d:e2:49:4d:
e2:37:b9:7e:23:0c:ed:07:bc:8b:9a:e4:70:2d:a8:af:37:0e:
28:fc:c1:09:9d:37:1e:d6:bf:7f:e7:10:aa:e4:15:fc:a4:be:
05:4c:4b:36:8b:38:b9:5a:8c:44:86:33:16:4f:de:94:c9:86:
33:14:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:10:39 2026 by rpki-client