
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/9f8ef9be-15b7-3961-a979-22278b9141cc.roa
File: 9f8ef9be-15b7-3961-a979-22278b9141cc.roa (raw, json)
Hash identifier: HK29sMZF7v7fzajzFiFIO6/99vRQSe2wa0hs+nTckCA=
Subject key identifier: FD:0D:C9:0A:E0:23:C0:99:AE:62:83:41:4E:8F:91:41:AB:BD:7D:E7
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F4328584F49770989920490B6B39DFE80
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/9f8ef9be-15b7-3961-a979-22278b9141cc.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 2559
IP address blocks: 198.241.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:77:09:89:92:04:90:b6:b3:9d:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=887af7fe-49f6-4460-ab1c-dbc2062351e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:51:79:d4:23:13:c7:0c:1b:17:43:88:88:
e6:83:e5:7f:3f:4b:b9:7c:07:cf:61:ba:1f:68:7c:
a9:36:58:cc:57:fd:df:c7:00:ea:75:37:33:56:53:
1c:aa:f1:37:3c:63:08:1a:55:24:30:2f:86:63:1f:
41:ca:13:53:01:83:d9:99:a2:0d:a3:38:d3:2f:bb:
86:2a:95:2c:2f:a6:56:ef:7a:c8:f3:af:c3:c7:1c:
cb:48:d3:cb:88:0d:60:3c:ba:59:b4:f4:4c:96:38:
ca:dc:60:0d:5f:e0:e3:e2:4d:8f:8c:d4:35:e5:23:
ca:ab:c1:08:99:85:81:83:03:c2:84:72:ce:d2:38:
81:90:4f:a7:72:30:cb:d5:15:39:fd:9f:4f:8c:6f:
38:13:ca:f1:1e:16:22:4b:1b:de:fa:2d:ff:a8:5b:
0b:35:b7:9f:40:a9:e4:98:56:0c:4d:7c:f6:cb:48:
0b:8d:e5:4c:52:23:54:f4:a4:4b:66:b2:13:37:f5:
88:60:b9:bc:6d:45:1f:78:ea:d9:8d:c0:51:53:84:
df:be:50:74:d8:d5:b1:bd:e1:e4:45:d5:f4:6d:8b:
e6:26:2d:27:0a:7f:64:d3:ef:bd:63:61:10:a1:38:
90:83:c7:a2:d8:21:a0:df:6e:ea:29:45:a5:3a:79:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0D:C9:0A:E0:23:C0:99:AE:62:83:41:4E:8F:91:41:AB:BD:7D:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/9f8ef9be-15b7-3961-a979-22278b9141cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:f0:51:31:f4:fa:db:f5:c9:40:12:29:96:dd:3e:a6:44:3e:
1f:ce:33:a7:43:ba:36:38:7d:ab:c1:81:01:82:2a:90:b8:02:
a5:fd:61:27:9c:f2:2e:09:c2:ae:4a:a6:d9:14:53:fe:cc:14:
20:14:a9:54:a8:59:97:e1:9e:15:d7:48:05:4b:8e:b2:a3:6a:
4b:e6:5e:f8:dd:b5:1f:51:a2:62:b0:8e:3c:93:95:b3:49:cb:
de:55:18:d2:31:aa:af:92:08:40:a4:31:11:ba:11:f4:fe:50:
94:48:a5:63:cc:13:21:3e:8e:e1:c5:3d:be:81:4c:99:be:e3:
8e:d4:d8:6a:73:da:11:5d:07:95:ac:4d:ef:f9:64:c8:30:70:
40:ac:f3:71:f7:30:46:d8:d9:b6:db:c3:97:5d:6e:cb:dc:24:
fa:63:a6:e8:3c:7d:91:9a:db:5a:e5:4a:58:01:34:a1:bd:d0:
8e:70:18:d3:e1:4d:81:75:ec:08:2f:01:2f:6d:97:c6:35:76:
87:3c:4f:17:83:68:04:76:79:1f:7c:32:54:65:fa:c0:bf:36:
ef:76:a4:d2:77:7c:83:16:15:78:c1:57:52:92:b8:b0:c0:a4:
dc:4c:04:ac:67:c8:ff:68:18:c2:5b:4a:6a:67:f8:b9:59:e3:
b3:c5:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 20:50:37 2026 by rpki-client