
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/538eddd6-20cd-34a1-8793-4a48d5ce18ae.roa
File: 538eddd6-20cd-34a1-8793-4a48d5ce18ae.roa (raw, json)
Hash identifier: 5P/XquHVxFd2nnn6c1NhTf/pJQoskyME9mejcat4JzE=
Subject key identifier: 40:C0:6B:34:81:08:B5:31:E0:4E:95:55:9A:F5:A6:69:5B:56:72:14
Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial: 010D0C9F4328584D67DFFBAC018CB1B9DDCB0A70
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/538eddd6-20cd-34a1-8793-4a48d5ce18ae.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 14618
IP address blocks: 192.195.4.0/24 maxlen: 24
192.195.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:fb:ac:01:8c:b1:b9:dd:cb:0a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=d6795c83-6f52-412e-8a38-7f6651fb1605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:10:15:1d:77:71:a9:15:52:5f:02:e4:67:
49:bc:f7:bb:4c:a8:74:b9:a7:31:7a:22:6c:b2:97:
6a:6e:54:e8:ff:48:f3:a4:f8:87:7c:52:61:08:75:
2d:66:9c:39:c4:20:25:1d:a3:86:a0:e5:6a:5e:08:
24:47:42:33:b3:ca:0f:84:52:27:99:16:1a:bc:0b:
d9:3a:fe:71:fd:e2:e2:e1:d6:cd:c5:93:24:04:0c:
9d:8f:8f:02:07:a3:53:fc:83:e7:28:48:1e:75:92:
ed:8a:74:b5:9b:3b:60:c9:f9:86:ce:e7:f5:89:51:
32:6e:b6:ce:e5:3d:70:94:ff:06:a4:d1:27:25:1d:
89:69:45:0b:1a:e2:92:80:e5:6c:61:fe:49:12:2b:
01:00:c1:73:da:fc:0e:71:f1:c1:bc:a4:db:2d:f8:
bd:1a:4a:a0:14:3b:5f:87:45:88:ea:7b:75:15:96:
28:ce:f8:ca:95:41:d0:fc:3d:2a:76:90:09:59:66:
c1:91:17:6e:8f:6e:f0:10:1e:c8:21:cf:28:49:b0:
c7:05:23:d2:68:49:80:f4:b5:ef:74:18:26:37:1c:
d5:b9:a3:e3:fb:b2:cb:58:e7:84:04:ce:88:a6:72:
a5:97:0f:21:4e:b3:bc:b6:9e:a4:47:8f:ea:32:eb:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C0:6B:34:81:08:B5:31:E0:4E:95:55:9A:F5:A6:69:5B:56:72:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/538eddd6-20cd-34a1-8793-4a48d5ce18ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl
X509v3 Authority Key Identifier:
keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
sbgp-ipAddrBlock: critical
IPv4:
192.195.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:51:8a:03:c2:b6:e4:7b:86:b3:40:9c:6c:39:5b:ca:8e:0d:
fd:20:d0:e0:c4:4a:5f:25:94:f0:93:e0:1c:dc:ba:15:6c:82:
09:85:7a:bb:40:5d:fe:a1:d2:89:1c:72:1b:30:3c:cc:9f:1d:
c2:ce:94:01:73:0b:e7:e8:92:04:fc:21:ae:d8:ac:2e:c7:0a:
b4:74:27:38:07:bb:21:67:76:ef:4f:67:2f:f6:69:da:2f:12:
ff:55:dd:da:41:a1:fe:8d:5c:8b:85:81:0b:a2:bb:74:ad:92:
0c:e3:40:f0:ef:87:07:bc:e0:54:03:cc:73:ae:a0:34:30:bd:
32:6f:a6:ec:6c:6d:4b:df:3c:ce:18:08:d9:e0:8a:94:4f:8e:
e1:0f:fc:be:6e:89:c2:58:ac:37:0c:78:16:83:82:21:89:4a:
7c:80:e0:02:ac:7d:d4:2c:e0:c4:06:44:29:6a:fd:e8:4b:a9:
9c:8b:5f:75:e1:6d:0b:8f:90:fe:c1:71:05:ce:21:32:5f:49:
8f:f7:d1:52:63:88:15:86:cf:1a:05:42:2d:8a:59:9a:ba:19:
98:86:53:b0:28:ca:ac:da:42:52:20:86:15:16:9d:a8:e3:50:
f1:2e:0f:a1:03:f2:03:e6:84:01:42:54:ae:bf:86:1c:3c:ea:
e0:8b:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:17 2026 by rpki-client