
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa
File: dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa (raw, json)
Hash identifier: g45gOz4nGWWb8bN2dZzGnaiZHcqVau8yiqgex5GTzCc=
Subject key identifier: 1E:32:F1:21:8B:63:C7:83:0F:94:F0:08:8E:A9:72:CC:A8:C9:93:F6
Certificate issuer: /CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1
Certificate serial: 010D0C9F4328584CA061AB76BE3832D136EDAF40
Authority key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa
Signing time: Sat 24 Jan 2026 02:00:31 +0000
ROA not before: Sat 24 Jan 2026 02:00:31 +0000
ROA not after: Fri 24 Apr 2026 01:00:31 +0000
asID: 7018
IP address blocks: 192.31.9.0/24 maxlen: 24
198.17.99.0/24 maxlen: 24
198.22.152.0/24 maxlen: 24
198.137.234.0/23 maxlen: 23
199.74.244.0/24 maxlen: 24
199.79.216.0/24 maxlen: 24
199.89.132.0/23 maxlen: 23
199.89.158.0/23 maxlen: 23
199.89.160.0/24 maxlen: 24
204.89.153.0/24 maxlen: 24
204.89.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a0:61:ab:76:be:38:32:d1:36:ed:af:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1
Validity
Not Before: Jan 24 02:00:31 2026 GMT
Not After : Apr 24 01:00:31 2026 GMT
Subject: CN=0ea1759c-fc9f-417f-84df-f1642c3a8caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:a8:18:0b:04:49:c2:80:0c:f6:ad:b0:58:
3d:d7:d0:86:cb:30:03:b4:73:4a:a8:87:6a:56:c7:
ab:3a:19:e8:fb:a7:a3:5b:80:7c:cb:61:a5:57:24:
6b:04:4a:66:84:0b:87:5b:3f:26:3c:f9:c1:50:24:
ee:ae:82:db:e5:7c:a0:8e:9c:19:6f:5b:c5:28:dc:
22:05:e8:b3:b4:73:b7:9d:b8:bd:e3:a9:8d:a9:7d:
7a:fa:23:ba:4e:68:95:21:79:0a:56:7e:e1:b3:d5:
41:6f:d2:14:75:ee:f6:35:01:fb:5c:9a:4b:42:d5:
a2:1e:a5:2b:2e:be:70:ab:aa:ee:93:c8:19:ac:ea:
ba:ae:8f:c2:55:0d:79:10:11:5f:7f:83:36:fe:f4:
48:38:27:e4:01:c0:ae:a2:f1:95:e9:dc:56:ef:2d:
ee:f6:a1:8a:67:e1:07:01:0b:3d:65:c3:96:e0:65:
ff:a0:e3:48:c9:87:9a:2f:a6:7c:9e:d1:d6:21:b4:
4d:6e:6d:8e:a7:fc:7e:9a:a8:c1:26:39:43:03:35:
0b:d1:f4:6d:36:21:cd:41:6b:52:0b:f6:10:6a:6d:
85:96:e3:5a:c1:33:eb:76:98:e9:03:7f:19:be:81:
77:85:71:92:4d:a6:72:4e:23:a0:27:03:67:dc:45:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:32:F1:21:8B:63:C7:83:0F:94:F0:08:8E:A9:72:CC:A8:C9:93:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl
X509v3 Authority Key Identifier:
keyid:67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer
sbgp-ipAddrBlock: critical
IPv4:
192.31.9.0/24
198.17.99.0/24
198.22.152.0/24
198.137.234.0/23
199.74.244.0/24
199.79.216.0/24
199.89.132.0/23
199.89.158.0-199.89.160.255
204.89.153.0-204.89.154.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:c8:6a:b9:87:57:43:3a:7e:f0:fe:a6:15:f5:2a:c6:3e:73:
b8:f3:1e:6a:91:69:48:9c:d8:b5:df:6e:35:6c:07:a9:03:e4:
1b:19:6c:dd:2d:28:ce:1e:f4:f0:9c:ad:13:8c:28:39:5c:32:
50:45:57:88:8f:7b:de:56:b5:d0:3e:44:47:87:1d:44:c0:2e:
3a:27:07:24:97:90:8c:a9:75:ac:06:d9:21:ca:96:ee:e8:85:
7d:64:90:31:73:93:5c:d0:48:a2:b6:1e:39:45:0d:aa:cf:36:
fb:24:03:67:c0:5b:b3:a8:51:fd:4d:4d:a5:93:88:7d:3b:fc:
ba:b6:0b:c3:c1:5c:f2:29:2b:64:e7:c7:d5:b8:e6:f6:1f:2a:
d6:34:ba:7f:d1:e2:4f:25:6f:f7:0d:43:f3:94:92:2b:d5:c2:
6b:fb:fe:3c:b4:10:1e:ab:1b:8c:f0:30:e5:30:35:96:eb:ba:
1f:73:67:3f:df:7f:4b:66:ad:2d:af:fe:39:7d:87:32:93:28:
70:86:18:07:ad:c6:7c:2f:00:ef:b9:c3:d9:6e:85:fd:0c:bc:
44:67:99:eb:a7:92:65:44:a7:cd:2e:52:fd:95:a8:5f:85:f1:
a1:4b:56:cb:ff:08:21:c4:0a:e9:bf:81:24:ba:4a:19:e3:e3:
f8:6a:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:09 2026 by rpki-client