
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/b9e8f069-91b2-31a8-95be-93db8964f515.roa
File: b9e8f069-91b2-31a8-95be-93db8964f515.roa (raw, json)
Hash identifier: KxzA/20LaHzVMCsCiHuYVXI/0+Dat1gvt1ut4xN4O6Y=
Subject key identifier: 9F:4A:A7:51:84:4D:D0:5C:40:92:37:53:9D:7E:F3:8A:4E:2A:84:A1
Certificate issuer: /CN=81216c68-71e2-4795-933c-05f1e22d0c17
Certificate serial: 010D0C9F4328584D895FE91359935E3E08B42440
Authority key identifier: E7:67:85:ED:8B:EF:52:31:FC:98:2E:05:8D:26:C3:98:2A:CA:80:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/b9e8f069-91b2-31a8-95be-93db8964f515.roa
Signing time: Fri 17 Apr 2026 13:00:31 +0000
ROA not before: Fri 17 Apr 2026 13:00:31 +0000
ROA not after: Thu 16 Jul 2026 13:00:31 +0000
asID: 17196
IP address blocks: 192.203.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/81216c68-71e2-4795-933c-05f1e22d0c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/81216c68-71e2-4795-933c-05f1e22d0c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:89:5f:e9:13:59:93:5e:3e:08:b4:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81216c68-71e2-4795-933c-05f1e22d0c17
Validity
Not Before: Apr 17 13:00:31 2026 GMT
Not After : Jul 16 13:00:31 2026 GMT
Subject: CN=cbcceef9-a524-48fe-a88f-f924f0794139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:33:55:d0:96:e0:5d:9b:a3:0f:fa:8c:7f:
c4:d3:96:ad:7e:9f:98:bf:c3:e4:70:b6:6e:b0:8b:
50:dd:f4:72:05:f0:20:32:48:4b:71:f6:31:91:0a:
aa:76:1a:1d:43:04:50:93:32:b5:56:9e:72:b3:c6:
4c:61:ec:1f:ac:12:af:61:23:78:72:17:e8:d5:dd:
68:dd:98:b0:2f:15:38:dc:f4:98:f3:b3:78:77:7d:
2d:82:c1:d0:40:5b:b9:35:f2:58:67:d7:25:bc:14:
0c:5e:9b:6c:e2:e1:15:98:ec:8c:2c:23:07:86:08:
b5:15:2d:5a:f9:b0:c9:e9:27:db:7c:69:57:d5:22:
f3:81:5b:76:fe:99:80:bf:5c:c3:b8:65:56:50:93:
b0:78:de:34:7e:48:40:11:f3:99:fc:fb:fa:83:48:
f3:e6:49:53:c0:ff:de:24:89:d3:76:ae:78:0f:1a:
21:dc:54:b9:bb:de:53:e1:70:4e:4f:d3:e3:00:e8:
69:1c:da:af:77:2e:68:83:3c:e5:53:28:5e:0c:95:
66:55:ff:da:49:7d:46:b1:4f:e0:78:46:f4:2d:e7:
73:6a:3a:5d:00:7a:9a:91:9c:7d:e7:d1:e9:76:f4:
48:cc:ea:30:d7:7c:44:5f:d5:0e:25:48:ff:df:8c:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4A:A7:51:84:4D:D0:5C:40:92:37:53:9D:7E:F3:8A:4E:2A:84:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/b9e8f069-91b2-31a8-95be-93db8964f515.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/81216c68-71e2-4795-933c-05f1e22d0c17.crl
X509v3 Authority Key Identifier:
keyid:E7:67:85:ED:8B:EF:52:31:FC:98:2E:05:8D:26:C3:98:2A:CA:80:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17.cer
sbgp-ipAddrBlock: critical
IPv4:
192.203.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:86:51:31:4f:03:51:fd:78:f2:6d:c4:29:ee:1a:03:8a:e9:
44:16:80:05:f6:de:14:7f:a4:73:08:06:8c:59:cf:70:eb:d5:
02:b9:f0:20:08:d9:5c:5a:c8:af:a7:6f:24:df:67:79:23:b8:
bf:36:58:cb:67:57:cc:63:b5:59:08:1d:58:75:5b:7d:fa:e4:
2b:7d:65:bf:bd:d6:24:ae:08:e0:5d:15:67:8f:0c:c9:b6:32:
1c:40:e6:06:e3:04:9b:e2:e9:09:f4:93:4c:47:39:50:49:c9:
ee:23:55:ab:75:50:b0:a9:c1:d5:af:2c:60:e3:57:c9:45:ad:
78:2c:5a:9d:4d:b8:45:00:88:06:42:e0:3e:2d:ab:bb:ad:b9:
f3:e8:c3:ac:08:94:30:46:8e:70:3b:e6:c1:ea:28:e8:4b:e8:
d2:d4:9f:8e:3a:fc:ae:a4:ae:24:9d:61:ab:97:9b:56:eb:3f:
96:0d:a3:68:bc:e0:a8:a5:7c:21:b3:0d:b0:21:ce:24:e1:cc:
47:03:7d:04:45:5e:30:3f:b0:f6:70:0d:18:4e:b6:bd:4b:7f:
1d:c9:88:2d:8a:18:db:d0:46:a7:a7:84:a5:87:9b:70:9d:70:
94:30:15:02:20:f6:2f:72:ab:84:d9:d1:48:3e:57:94:58:d6:
d2:a7:31:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:35 2026 by rpki-client