
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa
File: 3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa (raw, json)
Hash identifier: LgOyUv6N54TPk9eE2P5sdHm7WIdZQpkPU3CiZQR6YOM=
Subject key identifier: 6A:EB:FA:4B:6C:D9:B5:67:B0:E1:60:47:8B:9A:AF:A8:7B:15:04:E0
Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3
Certificate serial: 010D0C9F4328584DBBA03EAFC9BF01E02D495A00
Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa
Signing time: Tue 05 May 2026 13:00:31 +0000
ROA not before: Tue 05 May 2026 13:00:31 +0000
ROA not after: Mon 03 Aug 2026 13:00:31 +0000
asID: 394353
IP address blocks: 199.9.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bb:a0:3e:af:c9:bf:01:e0:2d:49:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3
Validity
Not Before: May 5 13:00:31 2026 GMT
Not After : Aug 3 13:00:31 2026 GMT
Subject: CN=3068a090-0b97-479a-9066-d134481b565e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:ca:22:f9:fd:cd:86:ae:88:c3:99:e2:58:
78:ae:60:be:8a:4d:81:45:26:66:6d:ab:ef:54:9a:
a9:bf:4b:a7:2d:a6:9f:21:f8:49:92:aa:4a:cb:9e:
02:29:ec:05:29:0d:cb:94:41:17:45:41:94:74:b5:
c3:6d:83:e5:5d:2e:e0:6f:f3:a6:ab:80:6a:c4:c1:
12:ed:6a:30:fa:24:f3:df:62:26:cd:83:5f:ec:55:
f6:25:73:7a:d6:95:96:7a:58:fe:54:db:ef:6b:b9:
5b:27:da:76:3e:03:58:ec:ef:0c:e7:a3:35:0a:6d:
f5:7c:0f:93:73:a9:d5:b6:ba:59:24:76:66:3a:f6:
a4:49:2e:3c:f4:9f:d1:23:b5:27:15:43:16:26:9a:
ab:b1:7f:7a:af:d6:37:af:d5:5f:a4:25:5e:ff:b7:
6f:05:8f:8c:61:87:a8:3c:85:79:c4:0b:a9:13:41:
52:14:d9:3d:80:04:fc:24:e4:55:82:d7:85:7c:60:
fb:8b:20:be:8e:31:1b:34:97:c3:a6:d1:4f:28:9e:
69:55:d8:23:d2:1b:7b:3a:67:9c:c1:0d:b3:91:50:
ba:a7:62:ea:79:90:76:ed:d8:1d:1e:d3:4f:c2:6b:
b9:11:8d:ab:dd:fc:0b:0f:0a:79:c0:65:2b:3a:b3:
16:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EB:FA:4B:6C:D9:B5:67:B0:E1:60:47:8B:9A:AF:A8:7B:15:04:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl
X509v3 Authority Key Identifier:
keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.9.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:92:7a:3a:86:20:56:10:ed:bf:4d:ee:af:f1:7f:ce:ac:f6:
55:53:20:76:7f:ec:cd:95:2d:ee:0c:70:45:48:42:fd:4b:1e:
7e:02:2d:5d:6d:6c:1d:48:8f:2a:41:87:f9:ad:b0:ff:6b:f8:
c5:8c:29:c6:21:e1:61:96:52:19:d0:01:9d:37:3e:ac:05:23:
c6:17:6c:9d:42:20:70:28:28:0b:63:5d:b3:35:a0:4a:9a:58:
3c:f6:11:05:6b:de:46:b3:49:56:23:07:57:6e:99:d9:35:dc:
78:ad:29:9e:59:b9:b3:e3:03:ff:87:b1:2f:2b:32:dc:77:74:
c5:96:c9:1b:01:d7:7c:43:0c:cb:e7:81:02:f0:dd:24:13:bf:
0d:4e:65:74:af:cf:7f:e4:76:5d:14:0c:32:b5:73:d5:75:b9:
18:7f:ce:4a:bf:e6:3e:1c:b9:74:7e:44:d7:d7:ee:66:90:8d:
33:85:8f:a2:ed:0f:9b:20:8b:d8:64:7d:15:62:c5:41:74:9f:
dd:94:df:84:5b:bd:3c:86:e5:da:7d:ed:6c:38:28:59:f6:bd:
63:69:8a:ca:c9:6c:1c:aa:6d:44:e7:ff:4d:b4:52:78:71:c7:
5f:4e:61:83:6f:b4:a0:dc:86:f6:3e:89:79:39:41:19:08:37:
a4:c4:50:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:22:03 2026 by rpki-client