
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46ff4253-749c-3521-9e76-2c56f87acaca.roa
File: 46ff4253-749c-3521-9e76-2c56f87acaca.roa (raw, json)
Hash identifier: Q9RVrgfT1C3itbwIZLzTDiKSYpd96tTqtmktPLz9OrU=
Subject key identifier: 84:56:C1:85:C3:4E:4E:5A:8A:F5:95:32:DF:26:81:89:7E:9A:32:D4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F15CCE237DC51EF0ACB087800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46ff4253-749c-3521-9e76-2c56f87acaca.roa
Signing time: Sun 06 Sep 2026 13:00:12 +0000
ROA not before: Sun 06 Sep 2026 13:00:12 +0000
ROA not after: Sat 05 Dec 2026 14:00:12 +0000
asID: 3855
IP address blocks: 199.172.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:15:cc:e2:37:dc:51:ef:0a:cb:08:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 6 13:00:12 2026 GMT
Not After : Dec 5 14:00:12 2026 GMT
Subject: CN=109f973f-55cd-495e-a95e-508816c07ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:61:6a:d5:57:b4:15:ad:c3:7f:66:2b:68:a4:
98:41:35:79:6a:bc:84:79:bb:1c:0a:06:57:75:66:
86:9c:ea:b4:96:d6:15:f5:4b:24:17:9b:8e:ad:0a:
3c:e2:9f:aa:67:d0:96:b2:c3:8c:82:09:c0:eb:17:
13:b8:72:c0:3b:cd:31:24:bf:51:2c:cf:5b:44:40:
c5:ba:3e:95:1e:91:d7:29:e4:2c:d9:ab:00:64:f5:
44:93:af:18:b9:9d:af:75:10:a0:5a:0e:51:a1:9a:
11:eb:52:53:aa:23:74:f6:bd:97:98:84:b8:10:b1:
66:4d:ad:29:55:1a:40:cc:eb:6a:40:3d:e2:bb:54:
bf:85:f4:55:30:0a:96:b9:db:c1:1f:72:4f:c1:a0:
8e:fd:a1:30:35:07:42:27:4c:da:8c:47:5f:70:84:
09:ed:99:bf:86:04:a0:48:05:fd:ff:e1:35:6f:45:
3e:83:b1:38:2b:13:1d:ea:06:86:e1:62:30:38:43:
33:86:b9:d3:4d:65:8b:db:39:d9:e3:92:fd:e3:92:
e0:8c:8b:05:dc:e5:0b:17:1b:74:2f:53:62:26:8e:
1f:0c:ac:fb:1c:35:e5:c5:27:be:2f:a2:3e:04:bb:
e2:75:ee:43:d1:19:89:59:e4:52:65:c9:09:f0:6d:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:56:C1:85:C3:4E:4E:5A:8A:F5:95:32:DF:26:81:89:7E:9A:32:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46ff4253-749c-3521-9e76-2c56f87acaca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.172.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:a4:29:5b:f7:dc:4f:c9:df:9b:6e:b7:45:e2:49:62:ae:53:
98:57:91:80:42:a7:fc:0d:71:2d:fa:c3:38:4f:74:10:2d:fe:
58:64:98:5c:46:a9:b1:0e:fe:1f:64:28:2e:cd:3e:f3:2f:3e:
b1:e8:ae:c4:0d:66:08:f5:97:14:41:16:ab:0a:70:24:c4:8a:
f8:71:0a:9a:2c:ea:60:ac:eb:d0:61:bd:70:ef:bb:44:7c:3f:
94:a3:08:2e:ff:9e:f5:40:61:d6:4c:1a:a5:f2:e6:1e:c3:8b:
38:31:44:01:39:8c:e7:db:7d:98:8a:ca:a4:01:b7:34:cd:8a:
c7:c9:53:f1:40:b1:4e:05:ca:90:65:59:48:55:5a:8a:de:36:
08:e2:84:38:03:84:18:47:b7:9d:57:5c:05:31:f7:f5:34:2c:
3e:f5:b1:5e:db:40:53:f6:21:ba:8b:c2:68:ba:a4:15:e1:bb:
c7:ee:63:69:2d:07:8a:35:98:ac:86:a7:19:f2:9b:4e:93:63:
fe:ea:4e:a0:bb:bb:88:b9:02:86:29:08:3a:1b:70:6b:9b:ac:
ff:d7:24:cf:18:f3:b4:d0:08:2d:91:95:a3:ee:44:2a:8f:c8:
66:dc:5d:40:ab:f7:e0:93:b5:ef:49:38:48:8a:ec:74:86:d4:
1f:32:97:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:00:47 2026 by rpki-client