
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa
File: d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa (raw, json)
Hash identifier: AQR7SiN85i/IaYDf0hWtEg+XybDgdPNUxsxshomXAMQ=
Subject key identifier: FE:D5:6D:A7:0E:AF:95:89:B4:F4:C5:73:1E:3D:B6:2E:D7:61:17:B1
Certificate issuer: /CN=3bb548a9-e172-41a3-925a-609e931d0009
Certificate serial: 010D0C9F4328584F0D6CEDD7443AF8A038341500
Authority key identifier: 16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 40460
IP address blocks: 199.182.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:ed:d7:44:3a:f8:a0:38:34:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bb548a9-e172-41a3-925a-609e931d0009
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=0a66f973-8ef0-4518-8c34-82ec521f8e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:b6:67:cd:61:18:c9:64:66:dc:be:3f:07:
b5:11:a6:4a:fe:2f:ba:68:27:29:d8:b3:3c:b6:5d:
d3:91:f2:6f:73:41:d0:ac:52:8e:21:5d:19:27:28:
96:68:73:03:1a:6b:d8:40:5f:ab:a2:86:a7:12:c7:
70:b7:ce:de:1d:53:62:17:0b:27:d0:f2:eb:28:b0:
09:67:2a:c1:01:f7:2c:4b:0b:83:a2:b4:ae:a7:2c:
02:a1:46:86:98:40:fb:8f:8b:9d:de:ff:99:b7:3f:
67:d7:24:e4:c4:df:02:86:9b:49:b8:b5:e8:b0:6d:
2e:66:50:1c:bf:70:55:93:af:2b:80:6e:0c:18:f2:
a6:a2:ab:3e:68:c0:88:5b:60:0d:58:bc:99:02:de:
a8:6d:6a:84:cc:38:3d:f4:79:93:86:f6:3e:a6:bc:
ac:fb:fb:2a:b0:c4:c5:15:f1:7b:a2:c2:c9:0e:17:
9f:2c:77:ea:0e:a8:54:29:59:c5:46:46:d1:ed:df:
24:02:2f:e5:1e:d0:e7:67:93:75:7e:b9:1e:7a:e8:
bb:96:fb:2b:7b:f9:2f:72:b8:80:6e:a3:80:c8:0e:
3b:de:3e:21:7f:f2:51:dd:63:69:db:68:72:af:6d:
02:8f:76:32:04:d9:c3:7f:30:a4:6c:e4:01:16:f7:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D5:6D:A7:0E:AF:95:89:B4:F4:C5:73:1E:3D:B6:2E:D7:61:17:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl
X509v3 Authority Key Identifier:
keyid:16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer
sbgp-ipAddrBlock: critical
IPv4:
199.182.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:16:73:f9:93:bc:60:92:11:c9:db:4d:5a:bd:76:16:e2:ec:
37:f9:ed:b5:4a:6c:73:db:c6:f8:32:79:a6:df:8c:6e:37:81:
f2:df:e2:a7:bf:73:ba:d2:b5:5e:0c:21:2e:cf:80:fe:f9:ef:
15:af:17:03:c1:30:60:49:bb:91:c6:9e:52:80:7b:11:12:83:
4a:7f:2d:a5:be:fa:da:84:9d:d3:e5:6a:11:c1:21:6c:00:86:
e7:a8:b7:6b:40:cf:f7:38:9c:c6:33:27:98:b7:e5:5e:39:6d:
9a:70:3d:e2:ea:20:f8:21:7b:eb:32:47:14:fa:7c:98:57:6a:
2d:0b:23:e7:b4:d3:d7:9d:eb:b0:c6:9a:b5:08:28:ee:34:75:
88:b8:99:6c:eb:31:8b:85:7e:7e:81:6d:ad:de:fe:13:40:d9:
33:79:59:58:9a:23:66:b1:65:1c:69:9c:79:01:65:21:d1:16:
51:4a:66:9f:16:13:12:0e:9e:f7:b2:20:c8:72:04:71:19:57:
53:bf:24:da:c5:2b:84:6a:ed:8d:c1:50:51:1c:85:6d:f9:6c:
1d:e4:7d:4e:11:49:78:3b:10:6c:1c:fa:e4:23:6a:6d:2b:b8:
bf:77:96:37:d5:ab:b3:3a:e5:b5:37:47:3d:a8:e6:4e:82:9f:
65:46:4c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:12:31 2026 by rpki-client