
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa
File: 4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa (raw, json)
Hash identifier: NdF1SfKl5g1KsNAj3sTdFnGPqKRduKUS4gD+B26fPPs=
Subject key identifier: 35:E5:6B:6B:98:1D:49:81:89:F8:70:FD:75:F1:36:4D:3B:D1:60:97
Certificate issuer: /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Certificate serial: 010D0C9F4328584F497405F201AC3551AE20E4C0
Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 394840
IP address blocks: 199.34.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:05:f2:01:ac:35:51:ae:20:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=318357da-e313-490d-b873-341e24d919e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6b:67:6d:0d:7c:97:1c:d5:98:4b:e9:15:2b:
09:ab:e1:79:db:fc:56:f9:79:c2:45:70:8e:3d:a9:
93:4f:da:50:aa:4b:f8:cb:54:9a:05:b5:2d:1c:b3:
58:97:52:0c:64:e0:1f:1b:96:17:46:0b:f9:c5:c8:
71:3a:8d:67:1e:2c:21:a5:f1:9f:2b:bd:53:49:ae:
9b:b5:95:39:87:d1:ff:f5:c8:72:83:aa:3e:b2:20:
09:04:7f:9a:7c:c3:72:29:07:ec:23:36:d4:3f:88:
04:83:27:c2:c7:c2:7b:a7:f8:38:29:d7:27:3e:7c:
ea:e8:a2:a4:7c:26:74:eb:1a:57:96:5f:0a:b7:fd:
db:65:b9:34:37:59:4f:8a:31:e7:c8:c7:4d:0a:f2:
dc:7e:e4:86:ab:1c:c0:1a:1c:b3:34:4d:9e:3c:ff:
72:45:ed:50:67:b6:94:d5:e3:db:62:40:a4:90:81:
e1:37:33:8e:48:f5:43:1a:5f:6b:60:d6:0f:9f:c8:
dc:c2:aa:8c:7e:9a:2c:1c:71:8e:c9:bc:ca:4c:d3:
33:e5:7e:63:3f:cd:3a:23:a5:53:68:65:89:08:6b:
f8:b7:74:67:92:52:ad:ee:66:c2:9a:ce:78:10:f2:
5b:f0:c6:65:c6:5b:1e:10:26:63:b6:ad:e7:c5:09:
62:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E5:6B:6B:98:1D:49:81:89:F8:70:FD:75:F1:36:4D:3B:D1:60:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl
X509v3 Authority Key Identifier:
keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
sbgp-ipAddrBlock: critical
IPv4:
199.34.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:dd:b5:a0:de:5e:59:3f:09:24:b5:eb:1c:31:30:ec:d7:6d:
1d:f3:30:28:24:b9:b9:aa:10:f4:9d:ce:56:ac:70:bc:ce:06:
b3:f8:f8:67:41:6f:a8:a8:3b:a5:f7:ab:02:3b:c5:e6:99:f5:
10:3c:43:db:1e:4e:57:c0:1d:90:41:b1:8b:82:87:b0:ab:80:
83:01:8c:c7:f7:93:42:04:8d:6c:99:52:ad:33:db:3d:9e:c1:
a6:fa:15:16:5d:65:9b:09:5e:1e:03:37:ec:20:02:af:f5:a2:
7b:62:ce:ed:47:f3:41:9b:1d:bb:f3:b3:21:26:5d:a7:9d:a3:
46:cc:a9:72:09:df:86:a7:fd:98:33:62:db:10:a6:dd:4b:45:
bd:4e:03:84:72:ad:ff:7c:52:c8:41:6e:b5:99:a5:bf:19:b1:
15:4e:ec:50:b1:8d:52:97:4f:55:9f:08:bb:54:ac:d4:c7:ff:
3c:2b:05:3e:db:52:af:42:39:e6:7f:3f:97:d1:34:80:a3:3e:
03:e3:5f:b6:c0:8c:4d:e4:4e:09:d2:45:82:38:a8:4a:f2:77:
34:1b:22:d3:4b:82:34:9d:91:87:25:70:ba:84:62:f3:5f:d8:
6a:a3:ba:98:d0:73:f7:41:65:c2:7c:1d:92:41:29:62:6f:6b:
36:ef:de:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:36:32 2026 by rpki-client