
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/467ed719-1e75-3bf3-8a1f-28a8bd210969.roa
File: 467ed719-1e75-3bf3-8a1f-28a8bd210969.roa (raw, json)
Hash identifier: 1SfD3WmMl35y+TcnhHaznI8rHGsNHWLmQEL3pls1k5E=
Subject key identifier: 20:9F:AE:A9:9B:66:D6:9F:39:24:81:B4:CA:71:6A:EB:5E:EB:20:C8
Certificate issuer: /CN=4b15b5cd-4c26-4ee5-85c9-521eeef73d1a
Certificate serial: 010D0C9F4328584F37EF29537AE8FE8DDA041500
Authority key identifier: E2:E4:E9:38:6D:35:64:52:30:47:98:FF:10:CD:3E:A0:D5:6E:C2:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/467ed719-1e75-3bf3-8a1f-28a8bd210969.roa
Signing time: Fri 18 Sep 2026 18:26:47 +0000
ROA not before: Fri 18 Sep 2026 18:26:47 +0000
ROA not after: Thu 17 Dec 2026 19:26:47 +0000
asID: 395685
IP address blocks: 192.190.160.0/22 maxlen: 24
192.190.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:37:ef:29:53:7a:e8:fe:8d:da:04:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b15b5cd-4c26-4ee5-85c9-521eeef73d1a
Validity
Not Before: Sep 18 18:26:47 2026 GMT
Not After : Dec 17 19:26:47 2026 GMT
Subject: CN=4bc9dba5-e0cf-4191-9914-6111375509a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:06:37:e5:57:37:cb:17:60:bd:a0:f3:fd:
19:13:93:be:25:84:8a:51:9f:b7:b6:94:07:86:25:
e8:2d:e7:1c:88:58:c4:2a:14:6c:60:cd:31:f1:8a:
59:b4:73:16:41:fa:a7:27:d1:52:2f:ef:7b:e1:49:
b1:c8:83:07:40:92:e1:c3:b5:9e:61:11:9d:bf:52:
9b:72:ac:92:c7:bf:16:37:71:0f:27:39:fe:cb:4b:
ac:45:0b:53:54:91:84:2c:e5:22:8d:b3:89:c4:2d:
64:75:c9:47:71:3b:22:23:4b:f0:d4:08:d4:de:19:
b0:db:c5:59:6f:e9:08:4c:00:58:ba:d6:13:31:e2:
e2:9c:90:82:67:5e:e7:fd:da:35:62:85:6c:d9:9f:
74:bd:6a:2e:e4:2b:95:df:cd:46:e8:c8:75:1f:86:
60:e0:9c:e2:2b:2c:0b:b6:af:b0:86:6b:75:45:10:
4c:af:19:f4:cc:fd:f2:b2:65:56:94:f2:40:77:d9:
3e:4f:20:a7:80:3a:3d:d2:29:b0:08:72:ae:72:b7:
a2:0f:d7:95:ab:c5:7d:70:19:4e:9a:10:3d:ea:b8:
96:50:a9:1e:67:f4:55:9e:89:f0:53:66:a3:6a:d2:
bc:47:22:df:d9:e4:be:f8:fe:93:99:0f:cf:3f:b1:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9F:AE:A9:9B:66:D6:9F:39:24:81:B4:CA:71:6A:EB:5E:EB:20:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/467ed719-1e75-3bf3-8a1f-28a8bd210969.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.crl
X509v3 Authority Key Identifier:
keyid:E2:E4:E9:38:6D:35:64:52:30:47:98:FF:10:CD:3E:A0:D5:6E:C2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.190.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:f3:5d:a7:e3:81:61:9a:8b:09:66:7a:f1:07:8a:09:a7:f4:
31:4b:12:f8:0f:1b:08:91:87:69:dd:16:c3:6e:b4:d1:3f:62:
80:10:a7:e2:e5:ce:f3:df:1c:cd:af:8d:e6:96:10:27:a8:ac:
a9:45:5b:10:04:fd:56:c6:51:5b:af:fb:76:20:26:04:ab:91:
35:6f:77:12:be:7e:a3:f3:bd:a2:7e:5c:db:3c:c8:f6:e7:79:
0a:6a:fb:2e:0c:5d:7a:f6:66:81:0c:a0:49:00:f3:d0:22:28:
84:ec:15:c4:8e:ae:24:83:1d:ca:2e:2e:76:ed:f3:3a:37:21:
1d:94:8e:78:e1:da:ed:78:3e:bb:9f:40:e7:b4:a4:25:bf:bd:
7a:79:ba:df:a7:53:0d:84:fe:5f:4c:fc:0f:be:4a:d1:5e:1c:
bb:42:c0:8d:a0:a0:5a:88:a9:b7:c9:01:18:7c:b0:15:53:c8:
0f:be:fc:99:b8:97:98:39:35:13:ed:01:84:53:39:15:95:18:
b2:09:ce:38:c3:9a:6d:71:f0:bf:82:15:1a:f8:37:8a:a2:21:
cb:69:c5:6a:aa:d1:bc:c9:13:cf:dc:64:36:ad:e5:10:15:4c:
7e:55:0e:8f:9f:32:6c:0d:b5:a0:2d:22:25:be:a0:f7:fe:f5:
b6:67:ce:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:45:44 2026 by rpki-client