
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa
File: c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa (raw, json)
Hash identifier: NgW5bcXFm/eA2jaVNVH9GPqg2KRubg4SC1WiS2b4CWo=
Subject key identifier: F0:B8:FC:9B:31:18:81:48:9A:8A:0E:CF:67:6E:87:5D:96:C6:45:A4
Certificate issuer: /CN=d29c11ab-c477-4c3c-8a5d-aa4ac4233132
Certificate serial: 010D0C9F4328584EF9E21DD16A09162884A2CB40
Authority key identifier: CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa
Signing time: Thu 27 Aug 2026 13:00:12 +0000
ROA not before: Thu 27 Aug 2026 13:00:12 +0000
ROA not after: Wed 25 Nov 2026 14:00:12 +0000
asID: 394149
IP address blocks: 199.185.184.0/23 maxlen: 23
2620:121:9000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f9:e2:1d:d1:6a:09:16:28:84:a2:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29c11ab-c477-4c3c-8a5d-aa4ac4233132
Validity
Not Before: Aug 27 13:00:12 2026 GMT
Not After : Nov 25 14:00:12 2026 GMT
Subject: CN=9400428e-5979-4ffa-97bb-523bafa91b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:60:36:83:cc:24:ce:a6:3f:9f:2b:0a:4c:
9c:88:56:ac:8b:1d:4f:56:d3:8a:b5:aa:33:db:21:
00:6d:71:6c:0d:ab:d9:6d:d1:77:7f:c6:22:35:1d:
07:0b:1a:be:be:5e:d7:81:3c:f1:48:5d:44:6a:3e:
89:1b:20:fa:8b:fb:28:0c:6f:63:d3:ec:3c:4e:06:
3b:c7:b9:dc:c5:0e:a8:e2:4e:4a:27:d8:06:4f:15:
36:99:0d:71:8a:1b:70:d4:e0:d8:0b:bb:84:07:68:
fb:f5:33:1d:26:63:8b:56:24:02:4e:43:72:97:f7:
b4:15:c1:84:67:67:b2:00:21:16:f8:63:61:2c:09:
a0:5f:a4:4b:22:27:af:2c:5d:7f:53:a6:88:e8:35:
a4:9c:a6:d7:82:62:cd:c0:e5:9e:21:93:9c:38:da:
72:d3:7a:80:fe:4a:20:e6:12:fc:38:42:96:a3:24:
ae:fd:33:01:4b:08:e1:63:0f:3f:6e:c9:78:a9:b5:
97:d5:57:05:ee:90:5a:f4:f1:13:55:e7:d5:19:95:
61:10:53:29:02:3b:c8:49:e7:f1:a4:38:ea:3a:a1:
03:04:9a:26:d4:a2:8b:0a:27:d6:2e:14:ac:9a:12:
ce:e3:b5:4a:98:c0:3d:97:40:12:eb:09:f6:eb:d8:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B8:FC:9B:31:18:81:48:9A:8A:0E:CF:67:6E:87:5D:96:C6:45:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.crl
X509v3 Authority Key Identifier:
keyid:CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer
sbgp-ipAddrBlock: critical
IPv4:
199.185.184.0/23
IPv6:
2620:121:9000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:ad:d8:16:1d:c7:9a:b4:60:86:14:57:21:38:56:fb:88:32:
aa:1b:83:39:08:73:39:ad:e9:95:74:43:fe:1e:b3:84:1b:2d:
aa:ac:17:59:06:99:34:44:d3:ba:ea:7d:fc:ed:f6:65:25:14:
4f:a2:be:9f:bc:0f:13:45:94:84:3e:0b:76:21:b0:dc:be:3a:
c4:4f:22:45:bb:df:90:24:98:4a:07:5a:4c:4f:a6:dd:d6:fc:
4a:9f:21:ac:7c:54:66:d3:1c:e3:6e:06:93:e8:04:78:66:88:
9e:58:cf:4b:5e:77:99:ef:99:d1:91:33:19:52:45:b9:68:fb:
dd:7f:b6:b5:ac:56:37:68:3a:98:d0:26:72:5c:e6:62:a6:3a:
61:33:36:a9:c0:94:0d:6e:22:57:5b:6c:79:94:cd:3f:50:3b:
76:52:34:04:78:d9:00:d1:be:0b:ec:e5:c6:c3:21:95:de:f6:
54:2f:a2:ad:1b:8a:6e:70:4e:0b:15:cd:58:8b:a4:21:e0:46:
14:0f:c7:c5:de:08:ff:3c:87:43:fa:cf:e3:d2:1d:de:28:8a:
3b:1e:0f:70:96:7e:b2:1a:14:b0:78:79:b4:74:c0:b8:79:e0:
18:36:de:55:60:d9:d2:ed:b1:ef:a5:1a:f9:8b:48:5c:a7:cf:
7d:0a:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:25:32 2026 by rpki-client