
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa
File: 09e21013-7b4b-34c1-82cf-d3a46658b996.roa (raw, json)
Hash identifier: behVkTvDCMnrUNeZ3xMtx6UB3NTJA76nctGzqYhsQig=
Subject key identifier: 25:8E:24:E3:F4:B3:03:CF:10:97:8A:22:AC:C7:15:D2:50:3D:E7:73
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F4328584D59EA7B3A8C24E775A8713400
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 16509
IP address blocks: 143.223.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:7b:3a:8c:24:e7:75:a8:71:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=408d1172-7bd3-4ff5-90a3-fcb5339dacf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:75:2c:b6:4f:06:40:51:97:43:b6:87:c9:
75:52:3b:1e:b4:64:8e:0c:e2:a5:b3:57:8e:dd:ec:
b9:d3:46:38:2e:b5:cb:28:cf:79:d7:70:6b:8e:3a:
84:90:30:d4:70:76:66:75:25:d0:7b:ce:74:2d:c5:
f8:64:bd:26:0d:58:0b:fd:9b:bc:4a:fc:d9:6b:3a:
ba:c7:4f:26:dd:0a:c9:4d:87:fa:93:d4:d4:d2:48:
75:72:db:ce:54:11:c1:8f:03:66:e9:0d:51:a2:21:
07:e7:b2:e2:fc:57:1d:05:a0:13:90:2d:a7:b3:7b:
ab:7f:8e:b4:6f:2f:5c:79:b2:e8:8b:37:4d:02:6e:
79:7e:23:bb:8f:4b:e5:57:49:d1:51:9e:f9:c4:65:
b4:b0:6b:82:3f:7d:33:fd:91:f9:0d:7b:4f:03:e2:
6b:14:15:ae:02:22:a9:a6:f9:20:ca:ac:7b:d0:e8:
bc:fd:21:d9:73:7d:19:4d:72:7f:99:be:75:dd:31:
9f:91:18:6c:a0:8a:0b:45:2a:8b:bf:c8:8d:11:31:
2e:f2:22:5e:4b:bb:b6:e9:15:9b:31:64:ad:9a:64:
d9:d1:eb:8e:c2:12:f8:80:33:49:08:9f:dc:ad:91:
9e:1a:cc:56:5f:9b:19:61:56:51:1d:33:4d:96:3d:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8E:24:E3:F4:B3:03:CF:10:97:8A:22:AC:C7:15:D2:50:3D:E7:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:25:2c:7e:d5:16:58:89:dd:e1:93:2a:fb:da:e6:1a:94:46:
a6:f7:37:71:5f:7c:4c:35:79:eb:59:8f:06:b7:20:da:98:2e:
fc:a6:30:c8:54:52:24:7f:ac:1f:7e:09:1d:34:88:a3:e3:ba:
96:2c:d5:39:c4:b2:4b:3c:90:35:76:27:d8:69:b2:c9:18:84:
d6:97:35:ab:55:76:87:9d:0b:35:0c:db:0b:e7:36:6d:e9:14:
d2:9b:2b:81:97:55:b3:43:43:0f:1b:a1:76:00:f4:82:5b:6c:
cd:39:71:1a:24:84:76:44:7f:4c:18:51:fc:b1:20:03:a6:44:
85:ec:2c:2b:91:1c:ad:37:f7:52:37:8a:7f:3a:75:60:25:2c:
90:63:6f:3a:05:69:ac:82:d3:f3:97:f2:43:4d:1e:d3:88:66:
75:f4:90:66:05:ae:45:5c:d8:b8:ba:94:8b:2e:a4:b9:34:d4:
31:cd:1f:fb:ad:c7:62:9c:12:0c:f6:b7:45:6c:06:13:97:a0:
d4:f7:af:29:88:77:27:07:14:d2:27:be:ff:d9:52:cb:50:e0:
76:4c:94:fb:29:af:d7:e3:68:33:e2:99:89:53:b0:0c:8f:39:
ab:c2:cb:73:26:8a:e0:ff:25:3f:ea:53:b1:0b:c1:61:80:bf:
c3:67:15:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:04 2026 by rpki-client