
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa
File: bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa (raw, json)
Hash identifier: U2hbctNCx8TMfsErtUX370JjjSVgw8Rpmb/CIeOKhks=
Subject key identifier: 5C:22:EA:7A:6D:5F:01:11:95:92:9D:C6:C0:31:CF:0B:F5:A4:0F:59
Certificate issuer: /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Certificate serial: 010D0C9F4328584EF7176A24FC5CADDC792EAD80
Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa
Signing time: Wed 26 Aug 2026 13:00:12 +0000
ROA not before: Wed 26 Aug 2026 13:00:12 +0000
ROA not after: Tue 24 Nov 2026 14:00:12 +0000
asID: 11978
IP address blocks: 192.5.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f7:17:6a:24:fc:5c:ad:dc:79:2e:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Validity
Not Before: Aug 26 13:00:12 2026 GMT
Not After : Nov 24 14:00:12 2026 GMT
Subject: CN=a90a07ea-16f4-4603-bc5d-a373da02fb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:55:f5:ce:61:db:37:f0:39:de:2b:7f:3b:
14:88:d9:70:a8:51:cf:23:50:5d:49:23:e1:c2:f0:
7c:ef:f4:cf:62:11:e2:d0:0a:40:0b:b9:f9:8a:3c:
33:9b:29:29:65:93:b2:57:e1:ce:9b:cf:89:12:eb:
67:22:15:15:22:09:7c:bd:ec:35:8f:4d:1a:61:9c:
a2:7d:9e:da:8d:55:ab:61:69:56:f7:46:62:ca:3f:
34:d9:1e:f4:4c:0b:5a:a3:81:55:90:62:f0:59:f3:
78:7b:dd:d6:91:ec:07:53:94:c1:a9:5d:3e:11:8a:
42:79:71:c2:26:e5:ee:5a:d0:d0:19:6b:00:39:5e:
10:27:6d:71:9d:86:24:6d:74:83:71:f9:9c:b3:3c:
8f:e5:41:8a:2f:3a:16:2e:b6:cf:5d:a3:ad:bb:c2:
4b:d2:74:69:49:f7:03:52:da:e3:f2:e4:4c:49:43:
81:51:66:d7:4b:af:f7:d1:f3:c0:9b:0f:0d:87:8a:
9b:f0:5a:c2:df:6f:4d:f0:24:bd:33:57:dc:ca:b9:
61:8c:f7:6e:e7:88:55:48:76:9d:20:0f:17:cb:c5:
9b:1e:a6:e5:7c:76:e1:c2:3d:1a:03:1a:95:59:1a:
50:2b:03:9b:95:06:d5:13:55:ee:25:81:87:70:da:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:22:EA:7A:6D:5F:01:11:95:92:9D:C6:C0:31:CF:0B:F5:A4:0F:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl
X509v3 Authority Key Identifier:
keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
sbgp-ipAddrBlock: critical
IPv4:
192.5.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:50:6c:ec:69:8d:6b:ed:cd:2d:1e:90:80:6e:18:b4:0c:9e:
48:1b:5f:09:5c:65:ab:47:76:1d:6d:4d:df:64:bc:84:50:fd:
4f:b6:d3:b3:74:64:27:3c:07:03:41:f8:0c:55:55:f3:86:d4:
58:51:ad:66:9d:c4:88:7b:96:8b:a4:88:63:bb:76:88:44:d7:
39:db:7c:15:f9:9e:a0:c6:e2:84:75:ae:6f:94:41:11:73:a8:
56:94:a9:20:9f:85:fc:47:a0:de:fe:42:e3:ef:12:4c:b9:85:
bd:d1:d2:a4:fc:1d:d1:95:ca:a5:45:d8:a8:f1:ba:7c:ed:90:
8c:4d:bf:ab:4d:24:d6:e6:e3:ce:db:90:77:ec:77:1f:a4:21:
fa:bb:11:a6:6d:c3:cb:b3:9e:28:c6:cb:b8:a6:62:69:b8:dd:
4b:0a:7b:50:40:d6:41:90:db:d1:18:53:de:6f:c3:b7:ab:3b:
a6:87:77:6a:42:82:fb:6f:11:70:67:95:24:c4:b8:10:89:b8:
a6:81:63:f2:68:d6:bb:aa:e9:38:c4:66:2d:75:8d:f8:71:e9:
6e:a0:23:06:26:5c:46:83:81:b0:35:be:de:74:da:6f:13:39:
30:e2:55:cc:1a:7d:07:e1:ad:01:c7:e8:9d:11:e5:02:28:9f:
fa:99:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:48:46 2026 by rpki-client