
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa
File: 3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa (raw, json)
Hash identifier: aOzNSODPbD06kllMaxUDoc9MtH2pYo76lJdU3vYHkm0=
Subject key identifier: BE:C7:CA:17:94:9C:F0:19:B7:49:72:A7:E2:41:6B:A2:53:88:FD:AB
Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac
Certificate serial: 010D0C9F4328584F63F81EA1A2D1C10136D07C40
Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa
Signing time: Sun 04 Oct 2026 13:00:13 +0000
ROA not before: Sun 04 Oct 2026 13:00:13 +0000
ROA not after: Sat 02 Jan 2027 14:00:13 +0000
asID: 395077
IP address blocks: 199.34.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:63:f8:1e:a1:a2:d1:c1:01:36:d0:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac
Validity
Not Before: Oct 4 13:00:13 2026 GMT
Not After : Jan 2 14:00:13 2027 GMT
Subject: CN=f7e58155-a92d-4727-98c9-59d46f6f5d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3d:48:38:d3:cf:a9:da:ed:9c:01:9c:ed:57:
b7:aa:43:ad:a2:ff:18:28:cc:f1:d0:b2:4f:5a:8a:
c1:e0:6c:a0:b5:f3:37:54:a6:5d:6d:09:b0:70:ef:
7b:b3:eb:fa:03:f9:dc:14:88:db:d3:ea:d9:3f:c1:
7a:d7:08:dd:bc:42:54:55:fa:ea:92:ba:9c:4a:4f:
7f:ab:1b:d6:8c:30:ce:bd:2a:e3:6e:af:90:59:ab:
2c:d4:bb:51:44:3a:9e:79:af:8d:14:97:ba:31:7f:
02:3f:37:bf:57:bd:9b:7b:43:1e:3a:17:88:f2:f0:
bf:9f:02:17:b5:be:4e:c7:e6:07:6c:2b:6f:ae:d1:
6c:7c:02:84:26:31:aa:37:5e:3c:c5:5e:63:a1:98:
88:08:96:f1:22:b6:e2:95:a3:a5:39:33:3a:2f:19:
0c:ef:92:fb:13:39:9f:f1:71:75:33:56:03:99:f3:
1e:4c:41:c1:b2:88:93:83:89:d3:4a:08:65:9b:10:
72:00:00:cd:f8:62:57:54:b9:7f:ca:4b:11:db:89:
17:8f:37:ae:c3:36:6d:a9:43:e3:56:9d:f0:fd:37:
74:18:39:d0:7b:d4:90:d0:65:10:80:a2:b3:bd:2f:
62:20:92:bb:88:7d:ca:3d:5e:b5:a6:4b:9c:8b:b5:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:CA:17:94:9C:F0:19:B7:49:72:A7:E2:41:6B:A2:53:88:FD:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl
X509v3 Authority Key Identifier:
keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
sbgp-ipAddrBlock: critical
IPv4:
199.34.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:a8:de:9e:d1:c7:48:a6:cf:d2:ab:2a:a0:b6:f0:6c:00:ab:
0a:d0:37:97:52:b6:e4:1f:fb:26:c4:53:7e:a2:55:f4:86:20:
bd:b1:e6:e1:b2:2b:6d:e9:ed:3c:97:12:70:6e:19:bc:04:3f:
aa:33:17:8e:f6:8d:8a:63:02:1d:dd:27:c5:bf:9d:58:f9:e9:
57:5c:c1:3f:31:af:76:dc:29:56:e8:33:9a:e0:a5:d0:c3:77:
f1:76:b1:a4:5e:cc:9e:72:1e:99:c1:02:64:2d:65:2b:13:c4:
91:0f:dd:27:e2:47:77:34:f1:6c:b0:63:2e:89:bb:6e:73:08:
dd:d0:63:2e:ca:04:bb:8d:f9:90:03:b0:0e:d7:f4:0e:5e:7c:
01:9c:25:94:b9:1d:56:68:98:bb:7f:38:67:f2:47:be:16:cf:
e6:b6:a2:52:6c:01:28:4c:af:8c:eb:68:86:94:1f:aa:9f:a7:
3a:b9:93:e7:be:85:b4:51:fe:08:01:11:47:30:d5:64:6c:c1:
9f:19:14:17:43:01:f0:f0:13:64:11:42:ca:25:77:65:69:2a:
17:35:f1:7f:95:0c:63:e9:1b:3d:c1:c8:34:41:47:be:19:0a:
af:c0:df:68:a7:c3:b0:4a:3b:cd:dc:83:22:64:a8:fe:9a:e2:
07:1c:1a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:54:12 2026 by rpki-client