
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b982f62d-850a-32dd-bcdb-cdf67abce6a8.roa
File: b982f62d-850a-32dd-bcdb-cdf67abce6a8.roa (raw, json)
Hash identifier: aYaRjiTs7NRejfNL9H25U6PDj++xOV267axOUMyfqYc=
Subject key identifier: 63:B2:7D:31:17:FC:D1:6A:33:AE:4A:37:76:CC:39:2D:BA:52:65:3C
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F4974203271D21CEDEAF68FC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b982f62d-850a-32dd-bcdb-cdf67abce6a8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 0
IP address blocks: 154.59.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:20:32:71:d2:1c:ed:ea:f6:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=97cad125-58f7-47fa-9abe-3504d81a80b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4b:5c:10:7b:86:b3:27:8d:36:76:d2:df:4c:
85:f0:98:d2:bf:86:55:e8:f6:35:03:85:32:8f:6a:
88:62:98:b9:9b:82:53:cc:4e:a4:51:be:09:21:a4:
72:55:51:24:f9:c7:51:59:9d:4c:5c:ee:e9:b5:dd:
e3:5f:73:ca:d8:3c:7c:6c:af:6d:c3:79:3e:9b:af:
bf:fa:68:af:a5:c9:a5:05:32:1e:c9:08:73:62:6c:
06:d0:74:59:91:10:78:44:21:5b:91:3f:3f:df:ad:
27:ac:e0:02:fb:71:d5:c3:06:a1:de:2f:28:50:0d:
dd:98:3e:5e:ef:22:33:4c:cd:22:2c:ad:59:56:22:
0d:7b:b2:28:c4:97:3d:5a:9b:47:84:46:c5:c8:aa:
6c:14:c1:74:4b:6a:0d:29:12:3b:f4:75:48:b0:89:
4f:1a:7e:98:0e:86:b6:64:e0:76:57:cf:5e:cf:7a:
8d:ba:ab:d6:45:ad:a4:20:fe:57:9a:9f:70:64:17:
ae:b9:48:ae:54:91:77:b8:8f:2e:ea:e0:87:b3:38:
de:7b:bf:ae:1f:a7:c3:a4:ac:97:6f:d8:89:02:7e:
af:52:8e:3d:03:52:e0:4e:5c:9e:42:30:60:f3:b8:
fe:e4:ad:02:63:a3:17:41:6b:91:1d:a8:c7:aa:f8:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B2:7D:31:17:FC:D1:6A:33:AE:4A:37:76:CC:39:2D:BA:52:65:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b982f62d-850a-32dd-bcdb-cdf67abce6a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
154.59.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:21:af:1a:36:39:0f:ca:c1:62:29:a4:55:55:b5:ec:73:28:
64:52:d7:2f:80:8c:12:33:e7:42:04:76:2d:0e:f0:46:ad:e8:
b3:57:56:6c:31:da:67:7b:92:b1:51:ac:3b:7f:51:6c:25:a6:
57:10:e1:b2:51:f8:d2:5c:38:6c:2b:a5:b1:c3:9f:a6:11:31:
89:6d:04:a0:fb:03:0a:2c:a3:15:40:3f:e6:4a:25:5d:02:8c:
64:30:aa:06:5f:f3:f4:ff:89:42:a1:88:a8:28:94:f6:d4:ed:
9e:9e:f1:bd:a4:2c:60:3e:42:81:d9:b8:3b:60:99:28:f0:51:
e5:17:cf:36:b4:4c:ed:42:ed:ae:87:3b:e9:a9:d4:66:82:62:
0d:20:82:94:29:1b:f5:db:81:66:45:93:d1:0f:64:ef:15:f5:
f9:32:c3:e3:48:7c:bb:a7:0d:51:13:8b:b5:2d:32:98:6e:17:
d0:2d:ef:50:d3:cb:32:58:dc:72:d6:00:8d:c7:5c:56:87:d9:
e5:98:3a:bd:01:76:1f:29:47:a8:db:86:4a:23:a4:07:6b:7f:
7f:91:80:7f:6d:33:74:78:f7:1c:a8:60:9f:7f:14:d1:4c:b8:
64:a9:ad:b0:60:20:77:b0:3d:07:75:11:45:58:d6:f2:80:dc:
b4:a2:e8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:52:48 2026 by rpki-client