
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f432be9d-4e43-38b6-962c-e71fb0b4fcc4.roa
File: f432be9d-4e43-38b6-962c-e71fb0b4fcc4.roa (raw, json)
Hash identifier: HsDdbJnya0m6JqodCwzX/3Ek9iLf4pAhpVnyKZLZEQo=
Subject key identifier: 24:63:70:04:83:B3:FD:1D:60:8E:4A:DE:89:5E:B7:41:10:78:69:2D
Certificate issuer: /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial: 010D0C9F4328584EED522078744872A922559880
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f432be9d-4e43-38b6-962c-e71fb0b4fcc4.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 16509
IP address blocks: 199.167.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:20:78:74:48:72:a9:22:55:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=a9a366dd-86e7-4431-94e9-0a2a088468cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:d4:7c:0c:c8:53:43:33:79:d9:d7:05:1b:
d4:b2:f4:9c:96:f7:3b:bf:e5:e9:b0:fd:73:15:72:
35:8d:0b:53:2f:bf:6a:37:66:93:7d:d6:7d:95:24:
35:01:df:c2:19:37:65:ce:54:54:d9:27:16:4d:79:
84:74:8e:c7:83:1a:c9:ec:9e:9c:a4:d3:27:0f:54:
f5:ce:d5:13:c6:e9:89:1b:67:6b:eb:3b:0f:90:18:
3d:d9:ea:3a:39:e3:18:6f:4d:6c:51:89:ac:5f:f3:
d7:2d:33:18:fa:d4:09:57:81:66:48:76:3e:35:60:
03:47:5a:6c:99:43:4e:4f:d6:d8:05:c8:9a:37:0f:
e7:1e:e8:78:bb:ea:89:a3:b7:55:6d:23:97:b6:9d:
eb:27:81:9d:07:3b:12:10:ab:91:be:ba:f7:c7:a3:
92:e6:bd:eb:e4:f5:f5:d5:07:6b:f3:0b:80:2c:96:
42:21:94:a4:9f:8c:05:1c:f5:09:04:10:a1:3f:7e:
dc:a8:8a:dd:37:d0:be:68:33:d8:d4:48:73:7a:4b:
43:27:b1:7f:e5:70:b5:de:ec:61:ce:e4:5f:09:30:
ed:9f:4f:28:d4:32:bf:9f:11:55:85:7a:0e:8f:b3:
6e:1a:18:9f:ed:43:0f:ad:94:fb:88:4e:9f:9e:2f:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:63:70:04:83:B3:FD:1D:60:8E:4A:DE:89:5E:B7:41:10:78:69:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f432be9d-4e43-38b6-962c-e71fb0b4fcc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
X509v3 Authority Key Identifier:
keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:73:db:52:bf:55:03:79:f7:e1:bb:e7:eb:72:11:78:fe:ed:
ff:63:70:6d:9d:59:6e:37:c1:93:7c:67:c9:4a:5a:3f:73:c4:
62:b1:5d:5c:be:92:71:b8:91:3c:92:31:82:54:d0:44:0a:36:
0e:3d:78:87:6f:eb:cb:cc:cd:bb:77:8b:98:6c:af:c9:52:9a:
56:a6:53:55:1c:e1:48:b1:9d:73:01:99:07:5e:b3:6c:ca:34:
64:c2:d1:41:3e:01:3b:c4:3e:12:35:c0:ee:f5:bf:e2:e2:7a:
cf:d2:d6:80:d4:cf:21:cf:1d:56:c2:74:16:39:28:ad:24:93:
93:34:56:c8:ae:31:22:91:44:ee:60:7c:3e:6c:3f:d1:a5:a6:
78:25:c8:9f:37:0e:f5:92:85:09:ec:88:72:b9:5d:69:0f:b2:
d5:18:2b:5b:97:eb:a1:ec:95:18:fe:fb:75:62:6b:3a:11:d9:
53:70:ba:59:4d:a5:94:7d:e1:36:32:02:c6:1f:a3:71:43:04:
ca:60:6e:39:49:e8:46:2b:12:52:04:ee:a3:1a:32:b1:12:52:
ac:64:66:38:59:61:37:a7:72:d3:34:3f:36:7d:c3:83:92:35:
c8:26:e1:f7:17:27:ff:af:34:e6:d5:64:cf:44:38:18:07:76:
84:99:32:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:54:30 2026 by rpki-client