
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa
File: f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa (raw, json)
Hash identifier: usF5VDktOC5KV8WDUR9275Ee7jTOs5iRougQYGS45UU=
Subject key identifier: D3:F3:BF:2E:DA:19:34:BF:2E:D4:0B:97:FB:94:1A:FD:4C:81:8D:94
Certificate issuer: /CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5
Certificate serial: 010D0C9F4328584E858F88BE633C0C28A3D39580
Authority key identifier: C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa
Signing time: Thu 16 Jul 2026 21:00:12 +0000
ROA not before: Thu 16 Jul 2026 21:00:12 +0000
ROA not after: Wed 14 Oct 2026 21:00:12 +0000
asID: 401578
IP address blocks: 142.248.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:85:8f:88:be:63:3c:0c:28:a3:d3:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5
Validity
Not Before: Jul 16 21:00:12 2026 GMT
Not After : Oct 14 21:00:12 2026 GMT
Subject: CN=01564521-cb20-4127-aa44-563f02d96a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:d8:5d:51:d9:9c:39:fd:0a:a9:78:b3:0f:
05:32:dc:3d:93:a5:39:d5:6d:b8:25:6f:29:c8:9e:
5b:66:cd:39:47:ad:7f:b7:e2:db:fe:29:28:6b:0b:
08:d2:15:2e:70:de:a6:67:50:09:e4:4a:09:cd:0f:
69:36:ee:e9:d8:0b:37:82:61:30:68:7f:a9:70:6a:
25:3e:6b:c2:27:40:a2:eb:67:c5:64:d6:2b:fc:d9:
2e:ed:d1:02:2e:21:5d:3a:6b:07:63:a3:db:ab:5b:
88:3c:8a:8e:a3:49:16:25:bc:44:d7:0a:66:f6:86:
d5:dd:b7:12:2d:1c:82:d7:bc:a3:05:29:ac:ba:7b:
6d:55:24:c0:74:97:fc:09:3a:f2:99:0f:ba:32:6a:
bf:ba:34:76:01:b0:74:d4:52:7c:7a:66:d1:d8:27:
b2:85:7e:4d:8b:53:c6:84:ee:6d:f7:e6:a9:41:c2:
3b:2e:9f:06:2b:d7:3f:7a:23:8c:af:06:cf:d6:2c:
44:9c:6a:e2:e3:92:3a:a4:63:72:43:5e:bb:de:54:
4d:1a:39:35:34:02:6e:45:89:ab:fc:65:43:f0:00:
9a:99:0f:3c:d9:b5:09:22:ff:5c:53:5d:cb:76:fe:
1d:60:e9:64:1c:4b:44:c0:75:76:fa:0e:54:74:6f:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:BF:2E:DA:19:34:BF:2E:D4:0B:97:FB:94:1A:FD:4C:81:8D:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl
X509v3 Authority Key Identifier:
keyid:C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
sbgp-ipAddrBlock: critical
IPv4:
142.248.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:0d:4e:61:80:ef:ec:50:ec:75:72:dc:36:85:7c:ab:fa:af:
ad:79:e7:4c:6c:05:25:f6:9b:0d:f1:d3:dc:22:6f:72:b9:90:
4f:74:5d:ec:ab:88:d8:ad:d5:ab:1a:e4:1c:14:28:27:a7:fd:
bf:e1:a4:18:90:d3:d7:f0:05:35:1b:3c:3f:1a:d8:a4:bc:b2:
2b:bd:47:3e:bc:c5:b6:2b:78:75:12:28:85:b5:71:fa:78:f5:
96:73:32:e5:cf:43:91:51:d0:2e:d9:bf:d7:31:6c:2b:74:b3:
75:e9:cc:5c:d7:81:e7:5a:1d:f4:cb:5a:d0:94:dd:72:52:ec:
4b:2b:50:e6:05:f1:5f:f4:b0:d6:1c:37:9f:61:84:ab:ac:ae:
eb:ae:d6:12:9b:21:81:f3:48:1e:1c:05:46:7f:08:6e:a3:82:
8a:2a:29:58:03:af:e7:2f:88:5c:33:15:9d:a8:c0:10:ad:c3:
7b:70:7a:96:75:3a:bf:f8:5a:e0:99:93:33:b0:90:63:01:43:
c3:b9:28:6e:56:b1:a1:54:75:41:0f:b2:be:13:d9:99:f0:b5:
b0:91:6d:60:18:2a:c3:34:1a:5d:81:c8:37:e8:8d:df:b3:2f:
ab:f2:aa:13:a1:05:0e:39:ff:ba:93:f1:50:46:11:a5:0c:67:
18:85:21:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:14:12 2026 by rpki-client