
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/5c986a3d-7c18-3d31-9220-cddcf9b335e9.roa
File: 5c986a3d-7c18-3d31-9220-cddcf9b335e9.roa (raw, json)
Hash identifier: I/S6WeNEVRUEf7DsDRzyTRpj6data01pm9qyZo+e3P8=
Subject key identifier: AD:06:AE:6A:3F:F4:BE:DF:D2:1F:BC:72:83:86:38:E9:C5:3A:CB:4B
Certificate issuer: /CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb
Certificate serial: 010D0C9F4328584D2644A263708E5646200BEF80
Authority key identifier: 14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/5c986a3d-7c18-3d31-9220-cddcf9b335e9.roa
Signing time: Fri 13 Mar 2026 01:00:31 +0000
ROA not before: Fri 13 Mar 2026 01:00:31 +0000
ROA not after: Thu 11 Jun 2026 01:00:31 +0000
asID: 16509
IP address blocks: 159.119.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:26:44:a2:63:70:8e:56:46:20:0b:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb
Validity
Not Before: Mar 13 01:00:31 2026 GMT
Not After : Jun 11 01:00:31 2026 GMT
Subject: CN=8f9b6eb2-d1c3-4e58-9a52-c50db4846545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:bc:34:c2:e9:64:b1:39:45:0a:51:1f:00:
42:80:89:89:3a:95:74:25:7e:bc:1d:e1:e2:93:e1:
41:87:5b:48:ed:ea:e9:4b:d2:0a:92:e1:86:13:43:
06:6f:04:70:ec:34:0e:e6:60:a4:53:99:f9:0d:7c:
60:ac:3c:94:8e:46:2d:7f:f8:b2:4f:c7:3c:10:fb:
44:d2:17:96:a1:10:fb:6b:a1:3b:7c:4b:95:23:cd:
3b:13:3b:bb:29:26:68:1c:bb:47:c2:d1:95:72:2b:
3b:6f:49:e7:72:66:c2:41:4c:c8:ce:4a:07:26:da:
7f:8e:8d:c0:d9:c5:c6:50:1e:89:3f:d2:2d:6b:54:
07:a8:bb:04:d2:60:3a:56:76:d0:3a:63:60:c5:6f:
de:08:98:1c:95:75:9c:e4:bd:a8:9d:ea:d6:f3:ad:
d7:a2:b3:b0:8a:14:1e:ba:a0:3c:1e:16:28:fb:e7:
d9:5e:a6:1a:ee:92:eb:cf:fc:3b:8a:ce:81:1b:f6:
99:6e:6e:0d:af:c6:bb:e2:0d:ca:75:f1:60:9a:1e:
75:23:ee:a8:3a:46:b9:a5:01:d5:38:4a:dc:45:69:
18:59:c6:97:e0:f3:3e:6f:c0:6d:de:f5:42:46:18:
d2:4c:b2:14:1c:16:f2:70:81:01:f3:f2:93:5b:3f:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:06:AE:6A:3F:F4:BE:DF:D2:1F:BC:72:83:86:38:E9:C5:3A:CB:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/5c986a3d-7c18-3d31-9220-cddcf9b335e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl
X509v3 Authority Key Identifier:
keyid:14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer
sbgp-ipAddrBlock: critical
IPv4:
159.119.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:c9:6c:d5:da:7b:49:ad:e8:48:83:99:05:5a:1c:15:69:d5:
ec:e5:76:17:a9:7d:d7:10:bf:43:e6:a3:27:df:ae:c0:74:6d:
54:eb:43:03:16:e1:e6:1c:5f:0a:f3:42:72:70:62:ed:77:69:
47:30:5b:d6:74:42:ea:18:0c:99:b1:7a:a7:b7:cd:ad:8b:d7:
48:a5:ad:69:0c:56:79:7e:3e:31:75:d1:f2:3e:b8:af:4e:9f:
45:be:76:58:7c:8b:a6:42:a5:5d:eb:b0:09:d4:36:fd:a7:7a:
21:6f:c8:a7:2b:3b:79:93:b8:79:28:ff:4e:43:64:44:c2:64:
5e:ed:4e:8e:dd:d7:7c:43:ea:49:eb:c1:1e:1a:59:bc:34:f4:
2a:16:79:a9:50:f2:8b:80:d4:c6:33:cf:21:e7:c8:63:df:ea:
c4:b0:9c:be:52:1c:a0:1c:e9:b0:a5:91:6b:c7:a1:23:be:4a:
2b:5c:33:0c:21:8a:3a:36:03:8b:84:1a:1b:d0:28:fb:51:85:
fe:8a:2c:40:6d:ed:d5:38:67:a5:ae:f3:cc:18:f3:62:61:8a:
cc:60:95:cc:a0:6f:5b:22:af:de:88:5f:e2:00:cd:d5:0b:e7:
63:32:91:d4:a0:32:07:9d:f7:25:e8:30:30:a5:2c:4d:e9:4c:
ef:cb:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:30 2026 by rpki-client