
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa
File: 8345228f-8d57-3f90-97d1-76ce96dca4d7.roa (raw, json)
Hash identifier: NR9N6P7zXbNqQpIlGjHLJkw+imiESC5A1nLxCaH/A8g=
Subject key identifier: CB:15:16:6C:BC:83:C3:01:AD:5E:A7:91:95:87:E5:B9:E4:89:86:09
Certificate issuer: /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial: 010D0C9F4328584D7A05349343D1A08795B9A000
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 30041
IP address blocks: 199.187.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:34:93:43:d1:a0:87:95:b9:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=3a3a03fc-9130-4b42-b8e9-96261ffb85ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:15:38:69:ec:5e:ce:f0:71:bb:2c:68:d8:b2:
35:8e:ad:b4:25:7d:14:9a:86:79:d2:d3:98:b5:20:
c2:4e:de:7f:f4:9f:00:2a:f4:c2:4a:98:77:9f:af:
05:9a:3d:5a:24:48:4d:4f:bb:aa:3e:b6:30:07:6d:
5e:6c:b2:5b:e9:03:93:0d:5d:c5:ed:8d:4a:54:1f:
43:1c:a9:24:15:53:ae:ce:2f:d8:05:4a:4a:d9:07:
6c:ed:25:61:e8:be:c7:55:45:fb:4c:57:dd:55:0c:
65:ea:76:18:2c:55:72:35:22:12:53:b4:45:57:fb:
08:44:5b:4f:d2:83:3e:61:65:01:1b:f6:e9:be:7c:
89:21:3b:b3:82:45:27:85:ad:4a:cc:f8:b2:f6:79:
e7:a2:9e:59:dd:97:7c:a5:d8:03:49:5e:c0:fb:29:
74:24:aa:78:f2:02:2f:4d:34:ea:b1:6c:0d:b6:dd:
28:fa:2a:c0:94:8e:4b:d4:7d:19:f4:3f:3f:3e:ef:
60:0e:41:f0:6f:be:ce:a7:26:95:fb:0b:b9:5a:aa:
ae:24:2e:b1:da:c6:c7:f3:10:51:db:d7:1d:de:ca:
dd:66:e7:45:49:26:69:a7:cf:3e:aa:5c:0b:e8:ba:
94:77:78:1a:e3:60:8a:cc:2d:7f:42:72:e9:5e:3c:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:15:16:6C:BC:83:C3:01:AD:5E:A7:91:95:87:E5:B9:E4:89:86:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
X509v3 Authority Key Identifier:
keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
sbgp-ipAddrBlock: critical
IPv4:
199.187.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:cf:5a:cb:30:90:ec:47:03:05:91:1d:e8:55:70:88:1f:a9:
ed:33:98:e1:5b:fe:17:9b:48:b9:e0:27:15:81:c2:da:32:c5:
bf:78:d9:bb:82:aa:e4:8b:98:a4:30:ed:24:2d:0e:ca:14:5e:
b1:78:44:19:c5:a4:fd:fd:5e:b1:7a:fc:e4:71:11:f1:ed:6e:
35:ed:cb:28:09:f7:2c:0e:57:1b:b5:df:f3:6f:c8:c2:40:7f:
5f:4e:19:f6:96:ca:5f:87:96:7b:d2:c6:85:1a:ca:9f:d9:cd:
60:bc:86:ea:ed:42:30:f7:8c:7c:14:ed:2f:76:30:7f:0c:5b:
6c:c4:6e:56:1a:d7:cc:12:90:d1:ab:5c:e3:c0:82:99:30:15:
2b:fb:3d:7c:47:04:a1:88:42:ad:c6:46:0c:bf:cb:23:48:13:
70:7c:78:9c:82:cf:a6:3d:4d:62:dd:02:f8:c5:16:dd:51:0e:
05:a1:e9:ca:02:28:d7:76:e9:67:af:eb:71:a1:14:10:eb:e2:
fc:a7:af:e6:8c:61:63:95:13:8e:1a:1c:a4:c2:77:43:5f:76:
e3:c8:29:8e:2d:d1:53:19:6d:2a:c0:d9:8a:3d:12:fc:a2:36:
27:86:e3:03:88:9e:42:e1:c7:05:b0:d0:90:45:f9:3b:ec:6f:
20:f4:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:06:49 2026 by rpki-client