
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c/0b0f27d1-373b-34a4-9666-3100c3ae9a49.roa
File: 0b0f27d1-373b-34a4-9666-3100c3ae9a49.roa (raw, json)
Hash identifier: OYSm6G9RVyThD18V7fP7psrRN/bzbmSRjLDkble9wtU=
Subject key identifier: 28:97:54:D5:D8:19:10:34:D9:5D:07:75:81:10:D5:17:9B:88:08:E4
Certificate issuer: /CN=a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c
Certificate serial: 010D0C9F4328584F268D0F7A713FF4511DB08260
Authority key identifier: 99:48:8E:CC:76:D6:F8:A2:0B:5E:89:62:6E:58:0E:4F:4B:D3:94:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c/0b0f27d1-373b-34a4-9666-3100c3ae9a49.roa
Signing time: Sat 12 Sep 2026 13:00:13 +0000
ROA not before: Sat 12 Sep 2026 13:00:13 +0000
ROA not after: Fri 11 Dec 2026 14:00:13 +0000
asID: 399138
IP address blocks: 169.128.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:26:8d:0f:7a:71:3f:f4:51:1d:b0:82:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c
Validity
Not Before: Sep 12 13:00:13 2026 GMT
Not After : Dec 11 14:00:13 2026 GMT
Subject: CN=73e5b88e-afb5-4952-b077-30d29e087c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:f9:03:de:6a:db:27:c0:43:a2:c2:22:72:
02:e3:1b:e7:ad:f1:44:98:9a:99:82:4a:a7:b8:4a:
0a:b4:04:1c:ae:33:99:10:63:ed:ea:a8:45:d2:0c:
5b:e1:2d:da:b9:99:19:67:72:26:cb:9c:c8:25:71:
ec:d1:d3:48:df:8f:94:03:b5:57:7e:47:ee:75:66:
52:31:e5:f5:c1:f5:14:e5:63:15:80:c7:2e:24:d6:
1e:41:34:38:3f:8f:13:d9:fb:21:81:7e:60:e8:7d:
50:85:bc:57:68:bf:8e:30:25:15:23:52:c3:58:f5:
95:2c:c2:09:e6:fa:e4:bc:11:9e:09:67:7a:9f:84:
7d:15:89:c0:ec:e6:1c:73:d3:30:50:3b:56:14:93:
23:f9:c9:01:f6:3e:ff:f8:fe:7a:06:27:64:6d:cb:
34:10:af:1c:27:6c:df:c5:65:31:ef:74:cd:d8:14:
12:4d:e0:92:6e:de:55:df:47:27:43:e4:04:8c:80:
68:00:9b:77:5a:db:79:8c:fb:04:65:22:48:1b:03:
f4:e9:84:e0:83:3d:a0:2b:b5:91:58:4c:58:17:38:
8c:e1:d8:38:eb:ca:12:6d:13:57:52:40:1e:15:6c:
c8:58:39:8e:78:af:bc:f1:93:6b:e8:98:27:52:28:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:97:54:D5:D8:19:10:34:D9:5D:07:75:81:10:D5:17:9B:88:08:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c/0b0f27d1-373b-34a4-9666-3100c3ae9a49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c.crl
X509v3 Authority Key Identifier:
keyid:99:48:8E:CC:76:D6:F8:A2:0B:5E:89:62:6E:58:0E:4F:4B:D3:94:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c.cer
sbgp-ipAddrBlock: critical
IPv4:
169.128.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:b6:b3:34:6b:03:55:40:00:70:ac:4f:af:7a:51:6c:07:10:
5f:75:77:1c:3b:77:c9:9c:06:10:f4:c8:c2:4f:1f:15:6a:22:
c0:50:cc:ac:e5:c6:4e:f8:85:0f:e7:80:3f:a4:5e:ac:a3:eb:
be:f5:dc:95:f7:e1:57:af:91:08:c4:79:dc:41:de:10:77:4d:
3d:2d:2b:ee:b6:31:4a:09:12:7e:6d:02:6e:f4:ad:07:a0:d3:
d4:55:e8:43:50:95:93:e7:44:36:24:38:85:d9:ef:ee:f8:e5:
3b:3e:31:f9:bf:c0:dd:17:bb:18:c4:af:ac:36:89:5e:6d:3d:
16:ff:39:ab:2c:f5:50:e0:d1:ed:48:f3:91:88:17:67:a2:82:
26:cb:6f:5d:08:2c:be:9f:43:02:5c:af:cf:a8:d5:23:b8:b5:
d0:9d:f3:5a:9e:97:df:a7:e9:6e:e2:2b:62:1b:f0:0c:76:91:
9b:5c:65:3b:dc:4d:80:50:31:74:8f:fe:6b:af:c9:e6:c3:76:
62:f2:92:7e:af:f8:d9:92:0d:b2:a6:97:13:3b:3e:b0:78:7d:
e4:de:db:8c:b4:c8:b4:f6:18:56:2a:21:b3:ae:45:73:3f:da:
45:1f:b1:45:b2:b9:eb:47:1c:53:2f:64:ef:32:99:1e:80:b4:
14:2f:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:55:42 2026 by rpki-client