
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cad83b52-8daa-3b10-b0c0-60affecd3629.roa
File: cad83b52-8daa-3b10-b0c0-60affecd3629.roa (raw, json)
Hash identifier: J3fh37rg3Q+OWDnz8yshxVbF0uxKRFMFfnl5/hG/yCE=
Subject key identifier: 67:9B:3E:00:64:5C:4A:CE:79:39:CE:B5:0B:02:6E:78:90:F9:99:27
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F4328584F49765E05842425E662147F00
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cad83b52-8daa-3b10-b0c0-60affecd3629.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 13445
IP address blocks: 144.196.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:5e:05:84:24:25:e6:62:14:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=96142959-9ece-4ef1-9fca-3dd960044c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:45:d0:60:57:e8:07:5b:29:19:d8:f7:f3:
10:93:b3:67:2d:9e:d7:25:34:f2:7f:c0:23:7e:f5:
90:0b:d0:85:a2:b2:9d:cb:98:39:1e:c4:a7:0e:6f:
64:56:02:5a:e8:16:8d:0a:31:8d:3c:74:de:6e:aa:
ac:05:fd:96:e8:c2:9b:63:28:22:02:c3:05:0b:ce:
69:6c:13:be:79:09:02:72:11:2a:cb:95:b9:1e:b4:
2b:b4:ea:48:82:e2:b7:63:b7:f7:d6:36:21:41:ae:
74:ad:b5:ac:90:55:fe:39:bc:da:28:19:0e:db:54:
19:e9:85:45:54:ca:1b:0a:41:9f:23:f0:62:22:ec:
85:f2:2c:8f:23:3a:6a:6d:c0:3d:f0:bd:c4:93:c1:
93:20:8a:26:eb:ad:45:49:0b:f6:d7:4b:74:61:5c:
6d:7c:b9:97:05:8d:42:e9:10:bd:1c:94:42:e0:be:
7a:3d:56:f7:63:85:69:d7:90:4a:e1:82:e2:34:f1:
6c:5e:d8:e8:ef:de:c4:71:c9:3c:a1:b4:6c:31:34:
ce:51:d5:f9:65:59:4a:d5:c8:8f:3a:48:fb:5c:60:
47:6f:4f:43:5d:85:50:db:34:8f:52:c0:5f:40:23:
42:9d:09:6a:cf:1a:1a:13:62:28:ce:51:3e:6d:89:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9B:3E:00:64:5C:4A:CE:79:39:CE:B5:0B:02:6E:78:90:F9:99:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cad83b52-8daa-3b10-b0c0-60affecd3629.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv4:
144.196.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:d7:be:85:a2:4e:24:f3:e8:e2:ba:eb:56:75:88:3e:cd:63:
23:9a:c7:5a:5c:44:db:32:56:7d:b6:a5:3a:93:75:0e:38:91:
df:97:c0:23:52:09:aa:a1:c5:9b:4a:58:8b:38:74:a5:13:94:
f2:f0:0e:7b:4c:be:26:0d:87:0c:eb:ee:39:cc:0b:17:32:ac:
62:c1:29:b0:0a:4d:29:47:c1:34:3d:67:1c:a3:71:2b:cb:23:
0a:28:1d:46:42:89:a6:9c:37:4f:d4:74:b4:a6:3c:1f:f5:a8:
a8:c7:fd:d9:6d:82:51:cf:e8:b6:a0:14:16:79:c9:30:08:0b:
cc:80:3d:5a:84:cb:e8:00:0b:8e:e5:a9:ac:1c:25:87:b7:b3:
a6:b2:26:45:cd:c5:2e:2c:7e:8a:71:03:06:36:9d:0f:63:2c:
12:0e:28:e0:64:0e:d9:21:e9:af:cf:b1:f9:ec:27:0a:2a:99:
a8:73:73:2f:ed:d1:30:d0:ea:20:8b:48:6e:7a:5b:db:96:78:
9f:25:83:35:c5:05:64:fa:da:00:2f:f3:f8:65:8a:f7:93:0c:
9e:df:37:c5:b8:2d:58:35:23:62:04:4f:32:aa:6d:a7:0b:ed:
ed:08:52:66:66:85:7d:26:60:2e:7c:f8:7c:7a:87:ab:83:33:
e5:27:a3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:15:35 2026 by rpki-client