
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa
File: 898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa (raw, json)
Hash identifier: KHmIPE9pnc+M6TmWzEy78iDqIuQ67c6bYIwLtDjuq7U=
Subject key identifier: 15:A8:07:B4:A2:AE:6A:97:7C:9E:37:C8:A2:74:4D:69:62:04:C7:9E
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584F1B6245B9ED9ECE2ABB2CFE00
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa
Signing time: Tue 08 Sep 2026 13:00:12 +0000
ROA not before: Tue 08 Sep 2026 13:00:12 +0000
ROA not after: Mon 07 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 130.35.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1b:62:45:b9:ed:9e:ce:2a:bb:2c:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Sep 8 13:00:12 2026 GMT
Not After : Dec 7 14:00:12 2026 GMT
Subject: CN=da197f59-68ae-492c-a6a0-272ab4c1b7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:90:cc:72:29:45:5e:f4:1a:5a:f8:38:b0:22:
50:c9:4e:01:9b:c3:eb:ea:3d:16:a0:23:69:75:bb:
18:c9:f3:1d:e6:1a:52:65:60:64:bb:af:6f:7a:bc:
f5:18:55:55:ec:90:c3:c6:ce:0a:c7:e1:ab:b0:3d:
47:73:12:c5:70:5d:13:19:da:19:38:d7:ed:1a:d9:
f1:bc:53:73:1c:ff:2e:62:f0:27:f2:55:0f:2f:6c:
f2:61:38:0d:ec:2e:82:66:2b:8d:dc:78:a9:00:09:
7a:b8:2e:ac:b0:5c:43:ac:7c:62:5b:0e:ba:31:57:
3b:0f:8d:59:9d:14:4b:9a:42:31:36:0e:35:20:4f:
5a:83:28:f3:9b:ae:43:e2:b3:6f:36:7b:ff:82:61:
72:9f:9b:54:47:d6:ae:2f:27:60:d3:c9:b4:41:9e:
1b:be:64:ce:d7:dc:74:9b:84:94:7c:f8:04:78:30:
2e:09:96:21:a6:85:fa:3f:84:c6:4b:b1:95:55:cb:
cf:7c:26:23:e8:fe:f7:57:13:c0:fa:9e:94:95:c9:
06:7e:d5:fb:95:8a:93:b8:01:a7:41:72:1b:fa:ae:
ed:50:4a:7c:16:09:ea:5e:b2:27:22:f8:3f:14:66:
9a:14:2a:ec:d6:20:4f:1b:9f:c5:c8:f8:e1:b9:ec:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A8:07:B4:A2:AE:6A:97:7C:9E:37:C8:A2:74:4D:69:62:04:C7:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
130.35.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:e8:08:57:6c:ef:cf:61:68:3c:b7:0a:32:fb:41:87:fb:a3:
6c:06:b9:9a:99:a2:c3:4b:8b:04:ab:7a:40:f7:f2:5f:c2:01:
a5:e5:4d:06:8a:04:73:9b:18:d4:a5:75:ce:75:82:1b:79:41:
e4:b9:83:83:a8:6c:91:01:08:b5:08:c5:9f:55:4b:b5:eb:14:
7f:e1:dd:7d:6f:39:97:fa:1d:50:57:93:43:31:54:09:02:8f:
48:d8:81:e6:98:f0:a5:a6:1a:d2:4e:4c:03:95:1b:c9:cb:72:
7f:af:09:b5:b5:a6:15:67:dc:24:f7:4b:29:32:f6:a8:79:86:
c0:75:20:13:6f:e1:1d:f6:49:f4:96:71:00:d4:e0:72:16:e0:
4f:db:ed:7e:42:14:4e:d0:8b:06:78:9d:f8:4d:9a:0c:d8:0b:
90:82:4d:11:83:d2:88:cd:cc:4c:52:35:d5:3c:af:0e:f5:e6:
4b:a2:99:80:a4:a0:fc:6f:7c:73:84:0f:b1:01:1d:c3:a5:eb:
35:0f:46:bc:3c:af:f3:d4:41:16:c4:81:1d:cc:fe:a3:9a:fb:
77:02:07:0f:89:a9:90:15:fd:b8:0e:5d:be:85:ce:92:05:07:
ca:1e:97:1e:77:4d:bb:5a:48:c3:5e:78:5b:d0:04:51:c5:b0:
a7:15:7e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:37:11 2026 by rpki-client