
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a385dc39-92c7-3189-978c-00ed1170a358.roa
File: a385dc39-92c7-3189-978c-00ed1170a358.roa (raw, json)
Hash identifier: kJhbc89HikQMZsB0PY7nm45rJE1u7OtWryMJylDMb9g=
Subject key identifier: 6E:15:F8:A3:7E:06:A8:A2:24:46:54:DF:9A:A1:26:8A:93:FA:49:31
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D9FB58D6AB6DAF034EF5EAF00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a385dc39-92c7-3189-978c-00ed1170a358.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 31898
IP address blocks: 192.9.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:8d:6a:b6:da:f0:34:ef:5e:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=b8782f15-c391-4027-af67-683fa139a119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c7:44:dc:c5:75:d3:82:3d:cf:80:5d:3d:1d:
d3:35:04:5c:1d:11:57:17:b4:74:0d:fc:71:d1:79:
db:7e:c9:59:5a:5a:0e:78:42:ad:6a:a4:65:d6:86:
53:2c:77:44:17:fb:46:fd:a4:7f:03:7a:a6:8f:fe:
6d:ec:77:a6:3c:67:f4:da:a1:b0:a0:58:96:d6:94:
37:6f:8a:11:42:f4:48:5f:c4:b2:7e:cd:e4:7d:20:
52:c5:41:2c:6c:14:87:a4:26:24:57:7b:d6:4f:30:
ca:c4:b5:1d:a9:e6:cb:17:c1:6c:9a:78:e1:53:5b:
34:54:cd:d3:83:22:5f:56:11:62:32:9c:24:04:1c:
1c:49:de:0b:8c:ec:7b:44:a4:d8:1e:b6:ce:03:78:
d7:38:4e:5f:88:c8:e2:ba:95:2e:3f:c5:8a:7e:de:
e1:38:f2:d1:67:7e:2e:e2:8f:6e:3b:9b:dd:13:4f:
4a:0e:41:58:92:4d:f0:1a:bf:8a:d6:c8:ec:fb:98:
06:fe:14:18:d3:b2:99:3d:2e:c9:5f:f0:d7:b0:81:
cc:2b:c4:7b:02:11:26:3c:cb:76:b4:e6:de:0d:8d:
0f:3a:5e:ea:54:65:52:d1:49:42:17:be:41:92:84:
fc:36:d0:cf:38:45:87:bf:a1:a3:61:dc:92:65:d1:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:15:F8:A3:7E:06:A8:A2:24:46:54:DF:9A:A1:26:8A:93:FA:49:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a385dc39-92c7-3189-978c-00ed1170a358.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.9.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:b0:68:e6:af:38:ae:35:77:28:f1:71:da:63:4e:0d:64:ad:
c6:71:e2:11:ee:c6:b9:7c:6b:a6:0b:f6:ba:fb:2c:93:4a:bb:
bf:02:83:a2:ee:35:31:dc:2b:f0:a0:5c:33:50:c4:8e:ac:1c:
9f:39:27:89:bd:34:e5:6a:74:5c:90:e4:0d:5d:ca:07:9d:dd:
71:7b:ce:b4:c4:18:d1:61:41:81:c7:42:a6:c3:97:e8:d9:36:
65:1a:63:86:58:91:40:43:d7:16:2a:07:e2:88:ff:f9:de:86:
c0:2f:32:0b:c3:5c:9a:82:09:5f:3e:8a:40:ec:21:07:ca:ad:
ca:3b:3b:46:2e:a1:6d:4b:ab:f5:d1:bc:a7:28:e7:5c:65:6e:
a6:9e:9d:04:d7:8d:c9:68:41:79:7d:1d:fb:e5:ab:6f:97:13:
85:c5:c1:f7:2e:f7:95:c2:ca:44:57:6b:af:46:0c:f7:fe:f5:
d6:87:eb:49:5f:ec:38:a7:c8:1e:39:6e:26:14:4b:d3:74:09:
00:6b:89:24:11:9c:15:30:84:00:6d:68:75:5d:2a:65:e9:54:
2c:d4:62:5c:c2:98:19:d1:55:4b:e9:b2:d0:92:af:d0:8a:b9:
3a:cf:d8:88:01:61:67:8e:fa:78:d7:c2:5c:bf:fe:7e:f6:ca:
c0:9b:06:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:26:59 2026 by rpki-client