
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/7b7faf13-f658-30cc-87b1-0ad107cfb6d6.roa
File: 7b7faf13-f658-30cc-87b1-0ad107cfb6d6.roa (raw, json)
Hash identifier: ol9XNYZLL4LGX+HTTUPvigjlVPYH8S9qzB51y39X8Lc=
Subject key identifier: 5D:AA:5E:8C:73:F1:7B:4A:F8:75:1A:62:96:24:9E:CF:82:8B:A8:25
Certificate issuer: /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial: 010D0C9F4328584F3B7D24E1D8FD7C2063384800
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/7b7faf13-f658-30cc-87b1-0ad107cfb6d6.roa
Signing time: Sun 20 Sep 2026 01:00:11 +0000
ROA not before: Sun 20 Sep 2026 01:00:11 +0000
ROA not after: Sat 19 Dec 2026 02:00:11 +0000
asID: 398391
IP address blocks: 64.227.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3b:7d:24:e1:d8:fd:7c:20:63:38:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Validity
Not Before: Sep 20 01:00:11 2026 GMT
Not After : Dec 19 02:00:11 2026 GMT
Subject: CN=a57bc495-1eef-4fc3-8489-1fe262efc0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:31:3d:b2:c4:fb:fd:cb:9e:95:0a:a0:7b:b2:
8c:ad:2d:47:37:00:3b:5d:06:55:d2:33:b0:50:f9:
88:2e:b1:44:56:41:a3:15:f3:c3:c1:21:e2:9b:0b:
b1:d0:88:96:51:d0:b7:26:6a:09:93:ad:cc:63:a4:
a3:14:74:e4:ad:8e:b2:88:24:4e:8f:cf:38:4e:21:
6d:45:c6:0d:96:fd:bf:24:70:10:e6:39:15:a6:6c:
4e:6f:13:5f:7a:c8:48:9c:30:db:ff:12:3a:c7:5c:
33:ea:3e:8f:96:44:c5:23:67:f2:26:a7:67:bf:4f:
9f:a1:9c:c7:7a:e2:77:27:9a:ca:56:c2:d4:ee:7d:
1d:56:c5:75:14:c9:a9:52:ac:4b:6d:49:22:60:fb:
37:09:6d:8f:d4:7d:65:bc:37:1c:2e:e3:84:af:82:
42:3a:e9:44:1b:98:f5:39:3f:82:3a:12:95:1a:57:
13:ab:39:1b:d4:d8:78:b5:86:33:64:3f:e6:d8:54:
d3:dd:bb:c2:39:27:37:a1:4d:44:b5:5d:7a:15:46:
fd:03:60:57:32:d7:91:1f:f6:09:42:1b:4a:f5:6c:
5f:e8:1a:bc:47:0b:1c:f6:0c:57:a5:23:bd:50:ab:
1b:87:22:b7:67:12:41:dc:2a:41:d1:0c:a1:7c:da:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AA:5E:8C:73:F1:7B:4A:F8:75:1A:62:96:24:9E:CF:82:8B:A8:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/7b7faf13-f658-30cc-87b1-0ad107cfb6d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
X509v3 Authority Key Identifier:
keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
sbgp-ipAddrBlock: critical
IPv4:
64.227.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:a5:e0:43:a4:fb:98:94:4a:1c:8d:11:28:53:e9:7e:9a:b1:
d5:47:78:f1:07:90:53:cb:a3:af:cb:19:c1:4b:d4:9e:98:2e:
55:b3:3e:bc:40:32:79:80:0e:de:4b:8c:01:89:14:89:79:fb:
5e:11:2e:c3:b3:b5:6e:86:23:71:ea:6a:00:2d:22:d6:bc:e6:
d9:5c:d5:81:75:c8:a7:fb:af:43:de:07:2b:e1:0f:4f:40:cc:
2b:4a:9c:e4:5a:53:c1:06:53:38:9f:d5:5f:2a:36:a0:03:8e:
1d:8a:f4:0c:4c:24:21:10:32:bd:df:17:76:4a:14:79:48:a7:
aa:9b:e8:08:46:09:cb:76:23:1e:82:7b:cd:32:1d:ef:c2:26:
f9:78:54:f6:9a:f8:4e:c4:2b:f9:17:44:28:26:dc:66:39:94:
87:1e:7c:da:3c:af:38:c3:8e:d8:a9:29:0e:32:e1:a6:1b:16:
e2:5a:8a:cb:c4:7e:d4:eb:ce:72:39:d8:91:93:cd:ee:88:c7:
9b:77:9b:dd:38:c3:f2:49:bd:7d:4b:6f:a1:4c:8a:58:d6:85:
89:d6:fc:0b:8b:94:0d:b1:b8:f7:51:8c:c7:b0:e4:cf:19:c7:
cb:91:08:6b:63:93:a6:5a:70:f9:2d:d5:1f:7c:38:ab:b5:94:
a6:e1:02:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:13:14 2026 by rpki-client