
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7cab1e39-ff84-32ef-8041-e923827f6bbd.roa
File: 7cab1e39-ff84-32ef-8041-e923827f6bbd.roa (raw, json)
Hash identifier: /teskWTvcAnvegEsdnDCgNuhdAFPkFIE0ThGTv4nAC8=
Subject key identifier: 4F:2A:0D:56:80:47:41:BC:F4:7E:E9:02:FE:D9:BD:25:A4:1D:0F:DA
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584F093CE5D1BAE8E83479059200
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7cab1e39-ff84-32ef-8041-e923827f6bbd.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 152.69.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:e5:d1:ba:e8:e8:34:79:05:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=94a2003f-eace-4b5c-8a51-6609e74547cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:59:22:07:fa:8e:f1:59:4f:33:08:b0:14:
6f:5a:45:cb:71:2d:e7:0f:f1:9b:63:46:01:44:59:
bd:b9:c8:be:7a:e4:eb:dc:62:86:43:4c:ed:aa:1b:
8e:35:44:2f:8d:fb:a2:d5:2e:d6:6c:f0:5e:16:61:
b1:88:7a:68:8f:ea:78:ab:b4:d3:21:5b:c4:f7:f7:
78:44:0d:0d:42:25:45:18:26:45:62:a5:ca:47:6b:
16:94:6c:d2:ee:19:ff:df:21:51:a2:78:8a:40:39:
da:29:f8:c0:1a:6b:77:3c:f3:76:48:ef:cf:7e:36:
8c:3d:73:05:5c:ca:8d:90:ec:c2:0d:74:1e:92:28:
42:42:a0:e7:71:91:18:9b:e6:15:7f:57:65:f9:c0:
d0:54:ef:78:e7:f1:cb:43:5e:e8:69:f0:cf:54:d8:
38:c0:8b:05:b5:92:ae:da:36:fe:ad:8c:2a:ee:94:
88:3e:c5:5c:b0:33:d3:3d:53:7e:03:37:11:c2:5e:
d9:d3:39:ea:60:5c:4b:44:a1:bb:ec:93:45:52:ed:
1a:ec:a6:2a:13:fc:a4:5a:72:18:81:af:56:bd:ed:
29:68:36:05:af:be:30:cc:e5:61:4e:40:0c:a3:83:
1f:df:60:4c:5b:95:43:1b:94:91:ef:ad:77:4f:00:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2A:0D:56:80:47:41:BC:F4:7E:E9:02:FE:D9:BD:25:A4:1D:0F:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7cab1e39-ff84-32ef-8041-e923827f6bbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
152.69.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:42:05:ee:ed:29:0a:ac:85:7d:ea:f0:05:93:ec:6c:5c:02:
fd:f4:71:dd:d1:41:06:3c:b3:e4:2e:c5:33:dd:d8:c3:96:53:
e4:d1:20:cc:15:a7:0c:37:a3:53:6e:99:3a:ac:4e:36:9c:a2:
f1:f5:7d:05:9b:c9:3d:62:47:92:61:e3:f6:d3:ea:c1:26:d9:
0d:02:53:dc:3f:2d:e1:6a:76:53:cc:b7:2a:a1:4f:8e:cf:da:
dc:56:78:5a:3c:10:d4:1d:1c:d6:7b:69:ea:de:3f:2a:b2:60:
18:79:59:66:0a:7c:eb:63:91:3f:99:70:f8:1a:9c:70:49:49:
bd:02:e3:ce:bc:6f:03:e8:1f:fe:cd:c9:91:5f:ca:e8:39:27:
9b:5b:e4:21:b8:72:8b:35:9e:ff:d9:60:57:9c:88:8d:6b:c7:
bd:43:a3:58:a8:8f:c2:e3:cb:28:76:86:b1:7a:49:f8:6a:1e:
cf:99:90:98:5e:16:12:cc:8d:70:2f:80:5c:41:68:86:8a:96:
a2:af:38:aa:87:0d:ae:12:86:78:d3:9a:45:8d:46:81:2b:a3:
4e:54:2f:5e:68:1c:94:12:1f:65:ee:7a:39:5b:68:60:c7:48:
8b:0f:19:ed:53:f8:1a:40:77:91:64:67:28:22:f4:c6:be:ef:
ad:43:8e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:18:46 2026 by rpki-client