
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/6cf38ad1-70e5-3941-ad3e-d9ac79bb3b71.roa
File: 6cf38ad1-70e5-3941-ad3e-d9ac79bb3b71.roa (raw, json)
Hash identifier: NFMWq7sPEeK8xLO6RhzgPpEg66HmyRkX/h5kmr6J0sg=
Subject key identifier: CD:D0:FB:D2:A9:17:E3:38:50:D5:A4:0B:46:3A:8C:1C:64:36:05:6C
Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial: 010D0C9F4328584D4D5A6E49837C8BD6E480B060
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/6cf38ad1-70e5-3941-ad3e-d9ac79bb3b71.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 2734
IP address blocks: 192.34.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:6e:49:83:7c:8b:d6:e4:80:b0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=90b8068f-ec5f-47f8-a34e-0022022ab09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cb:73:da:62:b7:63:0c:67:86:b3:15:6a:04:
9c:f8:c4:eb:b7:42:6c:80:bb:c8:b9:aa:2e:2f:d5:
17:20:eb:9e:85:67:6c:2d:f5:ae:b2:b6:fa:c7:b1:
b1:34:74:44:4b:20:43:98:25:f2:db:99:49:94:c1:
5e:9c:fd:1b:39:37:2a:99:4b:d0:26:03:01:04:f5:
a8:ee:ea:0b:cd:9f:97:fc:89:eb:17:17:32:60:b4:
76:1a:0c:08:ad:44:c2:80:32:9f:a7:66:d3:fa:87:
f2:d3:e8:fc:39:c2:22:d7:ee:33:a1:b4:ac:06:78:
82:83:05:02:d1:42:3f:6b:01:4f:23:c9:36:49:a7:
3b:a6:5d:36:5c:de:07:9a:5e:7e:a0:9b:22:e5:01:
88:12:2a:d5:5d:2e:1e:12:79:b0:34:9d:c6:82:e9:
78:36:44:98:6a:c0:15:b9:bb:c7:15:4a:9c:b8:95:
d4:54:44:6c:29:00:34:a2:cc:53:a1:f9:99:75:7e:
fc:4c:96:4a:29:30:21:23:19:62:ec:e3:7f:f6:c6:
f0:73:8a:09:2d:a3:48:ca:bf:a1:d1:43:34:bd:cc:
ef:19:6d:0c:a5:6e:c8:60:9e:aa:44:64:ba:3f:4f:
9c:7d:bd:11:f9:ee:c8:03:ef:98:7b:9c:6a:81:e5:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D0:FB:D2:A9:17:E3:38:50:D5:A4:0B:46:3A:8C:1C:64:36:05:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/6cf38ad1-70e5-3941-ad3e-d9ac79bb3b71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
X509v3 Authority Key Identifier:
keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:95:c8:27:38:76:e5:e7:23:eb:47:36:cc:ef:b6:06:5d:98:
67:a9:44:d5:29:13:ec:80:6f:9d:9b:52:b0:2c:7d:bc:2f:3e:
10:47:c5:9c:2e:bd:93:2b:96:ab:40:d3:ac:c6:51:e8:46:eb:
5e:54:61:00:10:6f:f9:c4:fd:44:90:13:d1:df:8a:07:4b:af:
40:66:69:87:c6:5e:21:40:67:1c:41:64:51:12:c9:a1:7f:81:
53:4c:15:27:db:cc:3a:3a:0c:d3:64:9a:e1:b1:c8:07:12:b5:
ef:10:0f:41:7c:c6:70:0f:14:3e:03:9a:40:a0:9a:92:21:ed:
3e:51:51:4a:96:28:91:55:37:a4:94:c9:65:3d:fa:78:13:6e:
79:26:2c:77:91:63:66:ee:81:ea:d6:d4:4a:1f:23:39:6f:54:
32:10:89:fa:a4:10:db:4c:40:22:d2:bf:92:30:4c:57:01:df:
5e:76:76:be:6f:fa:b6:ae:2f:37:7b:95:31:8f:75:82:2c:15:
8a:7e:e9:f7:a2:53:a0:ef:52:d5:d6:cd:c8:d2:37:68:24:ce:
f9:ff:7a:71:c8:d8:aa:08:85:d6:2c:13:f6:4b:e5:68:ff:85:
48:5b:65:c0:f4:ab:db:2f:8c:23:f5:87:70:af:aa:7d:c6:5c:
47:28:12:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:52 2026 by rpki-client