
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa
File: a401becd-3ae1-3b96-8178-8f59dad578c9.roa (raw, json)
Hash identifier: TJdGmUXCKhOm59g+b4AGLYRQqeFzok/CWCl6XGDY/8s=
Subject key identifier: 12:42:B7:FC:0A:E7:5F:9F:9A:2E:54:71:4F:97:9E:10:8A:6A:DE:BB
Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial: 010D0C9F4328584F2ABD11BE8F5C6F13F0FE12A0
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa
Signing time: Mon 14 Sep 2026 01:00:12 +0000
ROA not before: Mon 14 Sep 2026 01:00:12 +0000
ROA not after: Sun 13 Dec 2026 02:00:12 +0000
asID: 803
IP address blocks: 216.197.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:bd:11:be:8f:5c:6f:13:f0:fe:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Validity
Not Before: Sep 14 01:00:12 2026 GMT
Not After : Dec 13 02:00:12 2026 GMT
Subject: CN=0be1bdaf-041b-4b20-b7ff-c964605e0d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:f9:1f:4c:69:cc:3e:30:72:3f:3d:7a:fa:
45:f5:ec:0d:5e:3b:35:c7:a4:d2:49:c0:27:7b:6f:
b9:dc:2d:85:49:8e:01:59:8b:a4:36:c0:17:6b:69:
a5:b9:2f:7b:5e:9d:e4:ca:2b:d6:2c:49:0e:90:54:
37:50:24:3b:b9:fc:15:6f:30:03:d2:ab:79:83:4d:
fc:99:73:28:25:d2:f1:57:03:ff:94:18:be:4f:57:
8f:87:96:83:2e:9e:50:a1:ae:2b:ca:37:24:79:ff:
63:69:be:c0:34:d7:93:a3:ca:09:77:31:85:71:fb:
81:22:49:b0:39:88:26:b2:03:49:35:a2:f0:96:61:
27:6f:76:bc:5f:a8:aa:f5:45:cd:4e:e3:cc:64:e8:
d8:f9:78:4a:a8:6c:a4:6f:2b:18:80:a3:37:fd:5d:
c2:77:9b:94:b5:4c:f1:b4:48:3b:4d:05:1a:f9:7d:
29:a8:5a:38:e6:1f:25:6f:e2:59:95:b7:d3:a5:ae:
33:30:6b:90:99:23:43:03:c0:6e:4c:d1:cd:0e:f9:
ce:ba:9d:18:4f:a4:3c:2b:20:ca:a2:4c:92:03:e1:
df:b8:00:38:b0:2c:8d:61:a9:62:4d:9b:02:ff:98:
50:21:75:f7:c4:67:19:61:44:aa:88:18:8c:2f:04:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:B7:FC:0A:E7:5F:9F:9A:2E:54:71:4F:97:9E:10:8A:6A:DE:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
X509v3 Authority Key Identifier:
keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.197.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:ed:70:31:43:ab:cb:0b:2f:c2:7d:35:63:e9:e6:6b:5c:5a:
12:6e:57:41:67:d0:8a:67:41:ff:4c:9f:fa:43:fa:f1:99:de:
b8:06:eb:eb:14:b1:99:06:26:6f:5e:d2:3e:a1:df:34:30:e9:
b2:55:1d:e8:82:d2:57:58:a2:cf:b9:6c:aa:33:3f:63:c4:53:
b8:b9:05:d5:57:68:c2:80:de:61:a3:28:c6:d9:0f:f5:27:41:
8e:97:c3:99:67:fa:d7:d8:53:59:c2:df:df:e0:48:65:16:97:
fc:7b:fa:26:27:fb:b5:38:78:e8:dd:4b:58:93:dc:73:be:2b:
b9:a2:10:15:b2:97:dd:c0:e2:5e:e0:37:4f:59:bd:49:d9:b1:
ab:ce:ff:a8:d1:94:0a:f1:56:a7:df:99:c1:df:ae:32:d9:e2:
56:62:24:49:13:47:06:2f:9d:57:8d:5e:79:c5:33:42:d9:4a:
b1:63:ce:7f:fc:7c:e1:0c:d1:96:86:5d:de:2e:33:d6:33:91:
24:61:25:af:bf:8f:ea:fc:90:23:26:16:95:04:6d:5d:fc:84:
74:95:a0:59:d5:f1:11:e6:25:2d:d8:de:ff:54:91:8a:82:0b:
66:d3:23:8b:e9:fd:9e:4b:b8:6e:39:ca:08:cb:0b:1f:3c:d5:
a1:00:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:42:28 2026 by rpki-client