
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa
File: 0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa (raw, json)
Hash identifier: gh0qatNIqkIxk2iDOkqj6ZocKJR5iDolmy3lmyBsJgw=
Subject key identifier: 79:90:3B:21:2F:CB:2C:15:C3:9D:FC:70:9C:A9:2B:88:FF:E8:6E:AC
Certificate issuer: /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial: 010D0C9F4328584F698D9D41518BFE83B66DF700
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa
Signing time: Tue 06 Oct 2026 13:00:13 +0000
ROA not before: Tue 06 Oct 2026 13:00:13 +0000
ROA not after: Mon 04 Jan 2027 14:00:13 +0000
asID: 376
IP address blocks: 198.73.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:69:8d:9d:41:51:8b:fe:83:b6:6d:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Validity
Not Before: Oct 6 13:00:13 2026 GMT
Not After : Jan 4 14:00:13 2027 GMT
Subject: CN=e268f709-c6e4-404a-a6b2-c7c5e6ad12e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1e:6d:bc:fe:b4:47:e1:af:48:b9:c5:7a:b2:
8f:6d:c6:6a:3b:13:8e:1e:c2:7d:76:b5:f9:4d:59:
21:ce:47:8a:cf:35:fc:09:e2:e4:e6:1c:77:01:e8:
b1:41:af:81:54:be:98:0e:d1:21:8f:b4:68:cd:62:
19:83:5a:32:49:c8:94:56:97:e4:bc:5b:c5:2d:e8:
26:c9:7c:3a:31:e5:c9:30:67:75:73:6f:da:32:4b:
aa:8b:60:3c:22:77:93:2a:c3:e2:76:d9:89:11:66:
d6:04:d1:33:20:cc:6f:bd:a7:85:f9:c2:d0:6a:b0:
6f:e1:97:7a:9b:0c:1d:2b:d8:df:a9:fb:6c:35:36:
5f:1a:77:b8:4d:71:dc:70:e1:df:e7:98:1b:b0:60:
b8:5a:3b:35:3f:c6:1d:ad:e8:41:69:26:fc:c0:ae:
b3:0b:84:43:09:6b:6f:9e:76:b1:e9:db:74:16:a5:
3a:8b:31:6c:80:cf:0a:42:0a:c7:7d:8d:18:54:31:
55:bb:84:a5:10:f9:98:0a:ef:1b:98:db:6f:48:8f:
96:6e:24:ec:72:0d:98:9d:4c:7b:23:82:3f:69:46:
12:32:87:2b:6e:b2:62:f4:93:d6:ce:d6:51:ee:03:
37:37:52:f4:fc:dc:d9:c3:17:0a:38:d6:e4:69:48:
78:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:90:3B:21:2F:CB:2C:15:C3:9D:FC:70:9C:A9:2B:88:FF:E8:6E:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
X509v3 Authority Key Identifier:
keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
sbgp-ipAddrBlock: critical
IPv4:
198.73.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:45:b8:3e:a0:31:45:5c:1e:a6:cd:05:2e:23:d2:6e:7d:e8:
46:55:6b:66:f3:0e:24:1e:d6:77:72:e4:ef:84:4b:9c:96:b6:
f2:a0:17:c6:97:f7:a1:d4:16:9c:ef:99:97:bb:1c:96:fa:02:
05:d4:75:c8:ae:a1:ca:38:9f:53:0a:26:5a:3e:84:63:25:cc:
cd:d5:f7:b2:bf:87:b4:78:fa:70:a8:62:2f:57:20:61:2d:e6:
f0:38:41:4a:cc:56:a6:1f:49:fe:70:e9:a4:85:31:55:82:79:
0c:a2:96:2c:d9:30:db:be:34:44:0a:97:d6:b5:dd:c8:95:3c:
d1:5b:bc:7a:64:2a:0d:06:b1:e9:25:4e:0b:79:af:e1:08:8b:
31:a0:3c:50:8a:10:a4:a9:aa:bc:91:36:85:c8:4a:94:08:5f:
c0:9e:43:01:a0:2f:e7:88:ab:31:c2:4d:df:0b:f1:a1:a4:e3:
b7:8d:4d:c9:c7:2d:00:dc:bd:ce:77:d8:41:7d:e8:1f:40:69:
22:5c:a2:1f:cf:1a:22:f8:12:54:f8:3f:75:cf:48:d5:3a:d0:
32:cc:21:bc:02:d4:19:95:0c:60:ad:f2:3f:66:9b:0b:14:26:
68:d5:ea:ba:55:6e:40:15:d4:f0:42:5d:a4:7b:00:5e:1b:70:
21:24:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:26:11 2026 by rpki-client