
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa
File: 59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa (raw, json)
Hash identifier: zzA2bII2aGO3+VDQN/Pz0YinSg37/cTn5sGLr8zJebg=
Subject key identifier: 80:06:30:50:18:64:B6:C0:6A:65:2A:4D:45:88:91:A2:31:CF:F4:BD
Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b
Certificate serial: 010D0C9F4328584E07009894323FE099ED33ECE0
Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa
Signing time: Mon 01 Jun 2026 13:00:10 +0000
ROA not before: Mon 01 Jun 2026 13:00:10 +0000
ROA not after: Sun 30 Aug 2026 13:00:10 +0000
asID: 21976
IP address blocks: 192.150.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:07:00:98:94:32:3f:e0:99:ed:33:ec:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b
Validity
Not Before: Jun 1 13:00:10 2026 GMT
Not After : Aug 30 13:00:10 2026 GMT
Subject: CN=13086de8-a40f-49a2-930e-5620e0e99d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:7e:41:cf:26:7c:25:42:d9:89:f2:37:de:
46:75:38:54:7c:c5:09:2f:d5:1f:7d:a4:3f:47:ce:
5c:02:29:4d:01:55:5a:72:35:bf:a5:cc:ad:b2:ac:
8c:79:af:0a:2e:1d:72:fd:82:9b:68:d4:c1:4e:21:
ac:6d:0d:97:9f:8a:40:c1:02:b2:4f:b3:e4:17:13:
f0:24:bb:01:82:6f:67:24:b2:b7:d3:3e:ce:55:8a:
ea:47:7e:64:6b:ff:bc:37:ae:f2:a2:15:a4:1e:af:
49:d7:6c:b9:d8:00:29:9a:db:59:62:e2:25:f6:71:
74:31:e8:51:37:c9:55:30:4c:ab:96:4c:93:c8:01:
55:93:8d:68:81:59:a8:e7:c4:08:e1:7e:93:8a:e4:
52:ab:9d:62:c8:df:4c:d4:6f:ad:37:c7:7c:f2:3f:
7f:b9:b4:0e:4c:d6:92:42:2f:c3:1a:39:c7:31:a2:
af:e6:82:0e:68:55:15:30:6c:68:6f:65:8f:b8:81:
01:75:bb:9b:72:75:63:b3:91:39:f0:58:64:02:76:
a7:19:95:c6:ff:5b:1f:a3:cd:29:57:fe:e8:a8:5c:
d3:14:01:5d:c9:49:22:dc:d6:e7:9d:8b:e9:e6:50:
ea:52:44:89:f9:48:62:ea:1c:0c:73:a1:f0:ce:06:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:06:30:50:18:64:B6:C0:6A:65:2A:4D:45:88:91:A2:31:CF:F4:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl
X509v3 Authority Key Identifier:
keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.150.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:68:b5:79:0a:93:bf:60:43:45:25:69:6f:f7:68:07:71:1c:
06:38:a8:b9:b7:e3:78:87:c3:78:9c:c5:95:ae:a0:17:e2:71:
a1:cf:bd:47:16:30:6a:35:69:19:5c:a7:c0:4c:5b:15:96:e9:
4a:31:29:11:61:d6:94:d3:12:e6:a6:fb:f1:b4:53:fd:86:f7:
e9:33:91:b0:51:29:df:fd:92:e3:d3:f0:48:38:75:54:0c:de:
4f:dd:99:08:b5:86:fc:09:1e:ea:01:ae:7e:35:8e:ff:38:c5:
af:07:30:dd:0d:fb:aa:8e:5c:04:02:81:39:1f:0c:64:47:61:
c8:55:68:35:0f:c8:41:7f:99:24:3c:b8:a0:8d:c4:90:44:2c:
7a:b5:26:db:56:66:4c:d6:49:72:e6:09:5e:e7:31:85:93:d9:
53:d7:04:fb:a4:32:bb:4c:bf:ca:0a:52:27:38:47:bf:d3:56:
8d:46:1a:a6:93:82:e2:94:6b:23:57:df:98:2a:0e:40:9a:71:
71:ac:77:7c:9c:80:d5:44:be:46:34:4b:b2:8e:d0:ad:d9:9d:
c9:3c:12:7e:74:d5:74:3a:10:c7:ca:73:fe:ac:b0:17:43:69:
ac:92:f2:2d:bd:bc:53:03:98:94:3d:6b:f2:65:c1:7d:fb:85:
1d:92:90:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:43:59 2026 by rpki-client