
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a/2c3407f7-1bd3-3b07-8377-7dafbf616420.roa
File: 2c3407f7-1bd3-3b07-8377-7dafbf616420.roa (raw, json)
Hash identifier: /lHX/eiBr2tlJJU2tFgXpqwb8rNJEt894XXNr3k6Rx4=
Subject key identifier: C2:65:E6:F8:82:BD:08:D4:CB:5B:33:4F:84:DF:F5:80:3A:B9:E3:98
Certificate issuer: /CN=f60a8a51-92fd-467a-adef-b4528e0a6a7a
Certificate serial: 010D0C9F4328584D932566768319F4D1031F6800
Authority key identifier: 8E:45:6F:25:D7:2A:58:81:82:DF:E9:DB:49:35:31:D4:18:20:63:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a/2c3407f7-1bd3-3b07-8377-7dafbf616420.roa
Signing time: Tue 21 Apr 2026 01:00:24 +0000
ROA not before: Tue 21 Apr 2026 01:00:24 +0000
ROA not after: Mon 20 Jul 2026 01:00:24 +0000
asID: 15830
IP address blocks: 199.91.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a/f60a8a51-92fd-467a-adef-b4528e0a6a7a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a/f60a8a51-92fd-467a-adef-b4528e0a6a7a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:93:25:66:76:83:19:f4:d1:03:1f:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60a8a51-92fd-467a-adef-b4528e0a6a7a
Validity
Not Before: Apr 21 01:00:24 2026 GMT
Not After : Jul 20 01:00:24 2026 GMT
Subject: CN=d14713c3-31d1-4c57-8e5a-fd2ce21edeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:04:2e:4d:6e:52:07:00:df:dd:5d:a4:89:d0:
91:0b:1a:15:49:3f:d7:44:37:9f:77:3d:e7:3a:37:
40:2c:eb:fc:72:1a:d6:eb:00:6e:7a:5e:4b:da:23:
90:a2:d8:32:0f:1f:bf:d7:53:d4:cd:43:f5:e1:1d:
5c:97:e9:dd:e9:51:d6:ac:3d:91:cd:5a:5f:08:80:
31:41:a1:61:99:29:5b:5a:85:32:c1:59:de:b5:79:
49:c1:d4:94:e8:9d:81:1d:4b:26:2d:41:98:32:48:
21:36:eb:95:42:eb:a6:91:04:1e:51:7a:4e:2b:d3:
22:e1:b0:67:fc:6a:02:84:27:6f:12:39:71:b1:1b:
74:d3:61:37:39:aa:e4:67:aa:3c:a8:bc:fb:5f:6a:
4a:71:78:a5:06:a8:68:92:d6:da:fe:68:df:3d:6b:
3d:7e:3f:04:a3:60:f9:36:dc:bc:f7:f3:49:61:66:
d1:0e:99:15:59:d1:75:dd:48:50:0d:d0:46:9a:4b:
9e:95:fc:fe:69:6b:e0:7a:d8:9a:dc:af:fc:5d:57:
05:f9:3c:ea:ca:5e:c1:ec:0d:b9:2a:38:ad:a1:09:
b0:29:03:c9:46:fa:0b:2c:62:c3:36:0b:07:40:38:
d0:45:e7:2e:14:46:11:6c:d9:5a:85:a3:39:7b:28:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:65:E6:F8:82:BD:08:D4:CB:5B:33:4F:84:DF:F5:80:3A:B9:E3:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a/2c3407f7-1bd3-3b07-8377-7dafbf616420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a/f60a8a51-92fd-467a-adef-b4528e0a6a7a.crl
X509v3 Authority Key Identifier:
keyid:8E:45:6F:25:D7:2A:58:81:82:DF:E9:DB:49:35:31:D4:18:20:63:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:16:78:e7:30:9f:7e:e9:b7:e9:05:53:7e:cb:b5:cf:e4:77:
5d:93:d7:f4:94:77:66:9a:fe:6f:96:e7:9a:d9:4e:80:a7:0b:
8f:7b:a9:11:2c:39:ad:b0:c2:4f:d5:aa:3b:2b:0f:4c:23:4a:
3a:57:ff:84:8b:a5:bd:62:3c:80:a4:fd:34:f3:a8:ec:f5:a2:
3a:86:49:25:73:0f:19:6e:68:bc:1b:80:09:cf:67:a5:96:10:
a8:43:ef:c4:4a:0f:16:fd:67:8c:22:c4:01:4c:c3:bf:5a:67:
b9:07:e7:69:21:c4:6e:e0:3c:4a:51:2e:dd:70:58:4f:12:37:
77:b8:21:73:4e:32:14:7e:ae:86:50:a2:d0:73:ea:72:54:29:
3a:4b:74:f8:f1:0f:bd:d4:c4:af:c7:48:01:ce:d0:f1:33:7a:
e0:bb:d0:35:60:35:5d:d9:26:de:ad:12:e8:f0:7b:6b:69:2e:
e1:12:64:8a:bb:98:9e:45:6c:2d:87:ce:62:f7:f0:b2:ed:09:
0d:7a:3f:e6:c9:9f:bd:64:ae:a1:b3:b6:a5:ba:be:af:a1:3e:
dc:56:ee:e9:59:09:4c:6c:60:39:c1:6e:65:f1:fe:62:9c:5b:
ca:ec:c9:d8:23:6e:88:37:1f:58:ff:4c:7b:45:b0:82:2d:ea:
77:a9:12:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:32 2026 by rpki-client