
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa
File: 229e29fd-2ef9-3a98-a347-d8b492c6c819.roa (raw, json)
Hash identifier: hELT598LjsbdCy2i2HSftSeCtmtpmwluRTLQSWU+FmQ=
Subject key identifier: 35:B3:7B:30:34:39:15:89:A0:63:45:E6:E0:76:E3:80:C6:55:CC:CB
Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial: 010D0C9F4328584D492A603620C9AD5373FD0E00
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 2906
IP address blocks: 198.38.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:60:36:20:c9:ad:53:73:fd:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=6b5789d7-929f-4da5-914e-e0867486fa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:59:3d:b9:e3:e8:e1:d8:9e:8e:62:9e:b3:
53:e9:b9:db:48:fd:fc:fe:86:56:a6:56:77:de:38:
c1:f1:2c:27:a8:a3:1a:91:47:21:e9:e8:9a:09:54:
75:d9:61:2c:b9:38:32:90:a8:d7:71:d6:62:02:d0:
f8:4b:4f:08:f1:29:2c:17:b1:41:c1:c3:e3:6f:8b:
9f:78:e9:7c:3f:1d:e0:e2:98:3e:50:28:28:f8:b8:
71:41:63:fb:70:8b:a8:7a:c3:42:18:3a:fa:37:42:
44:51:c6:04:5f:94:aa:13:b9:f6:5c:0e:71:de:af:
94:63:3e:62:bd:53:02:d2:b6:44:af:f0:77:93:83:
c3:ca:ee:56:d1:51:b7:cd:00:58:da:c5:1f:ef:9b:
fc:e2:bd:19:c3:fd:30:c4:8d:87:f5:45:33:50:88:
1b:2d:8f:34:ea:70:d9:28:11:68:89:69:bf:8f:e3:
77:64:cb:03:35:27:ec:19:e1:d3:05:8b:56:4d:35:
86:86:9e:ed:4f:76:7e:8b:36:a0:b1:74:c5:5a:5a:
bc:e6:bc:c6:82:78:9e:52:28:63:53:90:34:dc:c5:
c1:55:8c:31:6d:51:d2:e0:aa:a2:ef:ca:07:81:90:
2b:fc:62:ff:55:ee:23:d2:2c:e0:93:fe:91:63:95:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B3:7B:30:34:39:15:89:A0:63:45:E6:E0:76:E3:80:C6:55:CC:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
X509v3 Authority Key Identifier:
keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
sbgp-ipAddrBlock: critical
IPv4:
198.38.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:ec:82:54:3b:f4:9b:2d:13:a6:02:ad:de:f5:db:08:ff:b4:
96:94:a4:70:56:35:ad:7c:db:81:7e:51:82:17:dc:d7:6d:a3:
d7:b1:95:6b:92:de:37:a6:df:0d:72:c1:3c:e6:45:14:94:66:
d5:cc:4e:e0:fe:40:79:fe:2f:36:7b:10:7a:de:65:5b:e6:b4:
ef:2a:2a:b6:cf:a7:2f:8c:36:7c:71:4c:4d:7e:7c:7d:57:ec:
5b:e4:db:d5:bd:04:8b:46:32:12:33:0e:fb:93:15:ee:da:f4:
c5:a7:cc:d5:96:9d:a0:3b:fa:91:02:a6:a1:74:c0:da:14:48:
fe:1f:3d:8a:e2:bd:36:ab:2c:d0:a3:3b:68:1f:bb:f2:96:7c:
bc:48:c3:b2:35:79:26:dc:4f:23:6f:fb:de:9f:b1:15:e7:6c:
e1:99:4a:ad:17:b2:aa:b9:61:d3:bb:9c:fe:19:9f:5f:9e:58:
bc:6e:e2:21:ae:b6:8f:25:56:90:eb:ab:32:a6:d6:0e:7a:4a:
e8:cf:12:dd:8e:a8:8d:fd:37:8d:52:b1:0a:9f:f6:d2:b3:31:
a7:61:3d:c9:01:9d:1d:8d:8e:a8:f4:d4:a2:74:25:ee:be:2e:
32:a9:25:81:08:2a:af:22:fb:8c:85:9c:04:73:73:fd:e6:de:
85:12:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:35 2026 by rpki-client