
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/faa9a69c-d5ce-3d37-829a-95c1d2b23f16.roa
File: faa9a69c-d5ce-3d37-829a-95c1d2b23f16.roa (raw, json)
Hash identifier: lNHZPU4dVAj/cCbv6eeQu93PO2Z7QGS8+Z1tMQbp78s=
Subject key identifier: 86:1D:BB:42:6A:56:1B:1A:F8:EB:F7:73:DE:D2:F4:E9:5A:D3:65:9D
Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial: 010D0C9F4328584C6B56906AC1A22A9D89418B00
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/faa9a69c-d5ce-3d37-829a-95c1d2b23f16.roa
Signing time: Mon 05 Jan 2026 02:00:31 +0000
ROA not before: Mon 05 Jan 2026 02:00:31 +0000
ROA not after: Sun 05 Apr 2026 01:00:31 +0000
asID: 30383
IP address blocks: 198.208.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:6b:56:90:6a:c1:a2:2a:9d:89:41:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Validity
Not Before: Jan 5 02:00:31 2026 GMT
Not After : Apr 5 01:00:31 2026 GMT
Subject: CN=424acc50-8c2f-40ee-a0b2-d57d56d4b865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:57:e1:ad:87:2c:74:94:fa:de:46:02:27:
df:e8:d4:03:00:d7:eb:f0:39:15:8c:42:da:a6:cf:
56:a9:51:21:ac:29:c8:b8:42:6f:74:17:a8:07:4a:
d6:be:4b:6b:4f:56:ec:25:e4:b0:9f:a8:ed:3f:3b:
dd:d3:ae:b6:8c:af:67:4f:2b:22:67:7b:46:02:3a:
70:58:02:26:bd:b2:ca:92:4d:05:43:82:b1:79:e2:
a6:05:17:fd:df:38:f0:fe:44:16:83:b8:f9:7b:03:
71:2d:51:77:24:52:6d:55:9b:ef:74:d3:89:7f:60:
da:c0:0f:f8:33:24:39:db:0d:7f:2c:a4:af:59:6e:
14:9d:ed:25:87:20:b6:69:8f:3a:e2:68:45:26:d8:
98:4b:2a:9c:c9:cb:c1:13:84:af:b7:8f:af:10:42:
ad:86:c1:c1:6c:29:65:b3:03:8a:93:fb:27:93:ea:
2f:0e:7a:62:80:ab:bc:1d:be:ec:c4:79:5a:b3:e0:
a7:3c:66:07:40:69:ff:a0:36:0e:aa:a2:62:d3:04:
ad:42:0d:a0:c4:7e:91:db:ea:f2:b2:87:90:b8:5d:
69:4c:49:e8:bc:2b:c6:6b:69:ab:39:4d:27:67:ab:
28:4e:8d:d9:9a:dc:41:aa:e9:8a:f8:ab:93:7f:6a:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1D:BB:42:6A:56:1B:1A:F8:EB:F7:73:DE:D2:F4:E9:5A:D3:65:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/faa9a69c-d5ce-3d37-829a-95c1d2b23f16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
X509v3 Authority Key Identifier:
keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.208.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:e4:56:d2:85:35:ea:22:f9:30:fb:b3:71:6d:2a:c2:10:18:
d9:ab:84:02:e8:61:c0:ba:0e:6e:50:d5:ef:85:b6:4d:99:74:
29:17:f1:e6:d4:a7:c5:35:07:7c:96:73:bd:c1:70:57:26:e5:
ab:dd:18:d9:bf:fd:2e:f6:9b:6d:c4:84:a6:62:b5:d9:08:f6:
6a:64:97:f2:35:6b:31:27:4f:69:42:ab:74:f8:c3:a1:84:37:
0a:3f:0c:a3:38:d3:0d:b6:e7:0b:ba:8e:b0:1f:64:71:61:2c:
3c:72:09:54:49:ab:55:0b:58:06:b9:9f:45:bb:c6:a4:50:45:
62:e3:d3:bd:47:c6:e6:45:d6:9c:00:27:c2:c4:48:a1:99:a8:
1c:01:a1:f6:bb:09:30:3d:87:1c:11:f6:10:3a:7b:9c:b3:16:
fa:ed:34:57:4b:b3:78:0f:8f:9f:b3:4c:9d:a0:c7:db:18:27:
f6:7a:8b:fe:2d:88:6a:40:12:a2:48:1c:34:2b:63:24:42:00:
19:d3:6d:e7:bc:d3:0b:94:87:5f:b9:d0:1f:40:41:be:d9:ed:
00:46:f0:44:a8:ee:52:8b:ef:19:f2:e6:ac:12:c0:58:9f:2a:
09:9c:2c:12:a0:5f:3e:4c:c7:31:da:84:79:81:08:ae:93:46:
91:3c:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:42 2026 by rpki-client