
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/facf20b1-99b3-3779-b7ae-f90dda37a0c5.roa
File: facf20b1-99b3-3779-b7ae-f90dda37a0c5.roa (raw, json)
Hash identifier: Lo99qxoSBHqYhsC5WF8scX+fYB0mSmcdNCnNjIWU31w=
Subject key identifier: BA:38:A3:AB:31:08:E9:B7:2C:99:D2:4E:B2:67:89:D7:B0:0A:7B:16
Certificate issuer: /CN=0c715b1a-49b0-44da-9244-0e8dcbb67b6b
Certificate serial: 010D0C9F4328584F0D6CDCB1E5A3C65C722D3180
Authority key identifier: B8:26:9D:E3:23:A8:2A:C5:D8:61:48:3B:E4:60:C0:6C:D1:26:C5:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/facf20b1-99b3-3779-b7ae-f90dda37a0c5.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 16509
IP address blocks: 207.167.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:dc:b1:e5:a3:c6:5c:72:2d:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c715b1a-49b0-44da-9244-0e8dcbb67b6b
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=2f3824d1-5a91-440e-ad50-dfe94234fde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:35:6c:ff:2e:eb:47:f0:11:11:82:82:7c:
f2:fd:ca:9a:73:76:07:d8:6e:8b:d2:b4:b6:d6:d2:
6d:e6:24:2e:50:fa:bd:ad:d2:7b:6f:6d:c7:17:c0:
ff:18:87:38:65:93:d3:98:35:0c:a9:a3:88:d9:8a:
71:2a:69:64:18:91:f5:7a:3a:bf:61:78:46:b0:a5:
ad:7a:65:1d:2e:4d:76:96:27:ef:dd:06:d1:2a:0a:
37:97:4e:29:62:23:ee:c9:ee:5d:65:e3:0f:36:2a:
93:c5:5b:7b:b7:1b:b6:a4:ca:24:90:45:eb:4e:8d:
32:d7:85:c5:b3:5b:e1:15:ff:39:ed:26:c6:0e:f8:
c6:5d:f7:dd:c6:7e:bb:52:ac:71:10:bb:97:73:dc:
b7:b2:50:95:82:d6:38:6c:3c:00:ec:59:16:c6:06:
a3:ae:31:25:ff:2c:55:8d:77:75:e3:df:39:7d:cf:
97:45:73:08:5b:55:a2:8f:22:9d:63:5a:31:35:e2:
e0:ba:99:bf:69:4f:43:3c:0e:06:6a:ab:b6:d6:d6:
31:1a:5a:f8:70:70:0a:85:31:89:f2:20:b7:a1:f0:
73:17:6e:04:99:b4:f1:bb:f1:93:d5:01:e2:91:5b:
18:5d:37:66:ac:11:b0:3e:4e:09:cc:c5:f4:ba:03:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:38:A3:AB:31:08:E9:B7:2C:99:D2:4E:B2:67:89:D7:B0:0A:7B:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/facf20b1-99b3-3779-b7ae-f90dda37a0c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.crl
X509v3 Authority Key Identifier:
keyid:B8:26:9D:E3:23:A8:2A:C5:D8:61:48:3B:E4:60:C0:6C:D1:26:C5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.cer
sbgp-ipAddrBlock: critical
IPv4:
207.167.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:03:e7:7d:8f:b2:eb:e7:c4:ac:5d:c9:f2:f4:88:f3:77:86:
fc:e3:14:af:7d:f0:52:60:85:9b:d7:2d:a4:69:00:df:2b:a2:
6a:04:ce:ef:ae:c6:b1:9c:a0:17:34:31:b8:f2:77:8a:11:e2:
5a:33:56:f0:61:66:3c:f7:a8:62:b4:4b:ee:d0:33:83:68:5d:
72:83:39:60:2d:cc:fe:66:07:86:f8:10:7d:75:cf:d6:8f:b1:
cf:e3:b3:ef:1e:db:8e:12:9d:04:67:b4:18:92:b8:9a:ea:e3:
21:9d:b0:e3:29:12:33:6e:20:08:5e:65:10:fc:1c:10:88:2e:
0f:7c:34:fe:f1:36:9d:0e:1f:a1:ae:7a:2b:ee:67:7b:b4:c7:
d6:78:60:ca:f5:13:0d:16:d6:76:fd:a4:5b:81:7c:05:2a:d2:
bc:5c:44:d1:f1:ce:a0:93:3a:93:5a:c2:a1:e0:2c:b2:1e:07:
fe:82:86:33:9a:9c:d7:a1:a8:cd:e5:6a:07:83:a1:a0:68:3a:
c9:8a:70:d5:2c:55:5e:92:fc:53:f8:17:d1:90:4f:0e:37:b6:
83:43:49:5e:94:9b:33:15:0d:cc:63:65:a7:1a:c0:c5:ab:93:
e5:d4:18:ed:db:d0:ea:16:98:b5:22:cb:f5:5a:89:d4:2c:c5:
62:ed:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:17:55 2026 by rpki-client