
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/6d8928a4-c1a8-3fcd-9844-cc13eca2d971.roa
File: 6d8928a4-c1a8-3fcd-9844-cc13eca2d971.roa (raw, json)
Hash identifier: rmO7wVWWtTwq91Tc3si1DFzFKxyuT0iEmck+vkTHL3g=
Subject key identifier: 19:A2:92:C1:AA:C4:D6:35:25:F8:89:1C:11:FD:6B:78:A9:D3:A6:69
Certificate issuer: /CN=b71f0bde-5320-4917-be9e-6cadf8118c9a
Certificate serial: 010D0C9F4328584C5BFBECDE2B3D853795F46E00
Authority key identifier: 49:38:D0:DC:4F:72:DC:6D:1E:73:43:B9:5E:37:CB:AC:C5:02:F1:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/6d8928a4-c1a8-3fcd-9844-cc13eca2d971.roa
Signing time: Tue 30 Dec 2025 14:00:38 +0000
ROA not before: Tue 30 Dec 2025 14:00:38 +0000
ROA not after: Mon 30 Mar 2026 13:00:38 +0000
asID: 393853
IP address blocks: 192.206.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/b71f0bde-5320-4917-be9e-6cadf8118c9a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/b71f0bde-5320-4917-be9e-6cadf8118c9a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5b:fb:ec:de:2b:3d:85:37:95:f4:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f0bde-5320-4917-be9e-6cadf8118c9a
Validity
Not Before: Dec 30 14:00:38 2025 GMT
Not After : Mar 30 13:00:38 2026 GMT
Subject: CN=83a99b8f-c8d7-4d46-9997-05fa957f26da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:17:e9:9a:52:4c:8a:b5:28:8e:75:fa:94:
75:95:61:65:71:35:98:77:9b:b0:e5:5e:b5:98:47:
03:ea:57:ca:05:8a:5c:d3:f3:16:5e:2f:b6:4d:f5:
e2:1c:59:2b:1e:9a:68:19:29:62:91:91:e1:5c:ea:
6c:ac:8f:32:b4:e9:2c:1c:f9:8e:8c:82:36:c3:f2:
26:80:5f:74:a7:6c:49:87:ba:e4:02:fe:4f:a5:b5:
b1:dc:5c:f3:53:ed:64:dc:77:41:c9:0d:16:2b:bd:
c9:78:35:6e:62:98:5c:88:48:a8:88:84:2e:4f:8c:
fc:24:ed:10:fa:61:a5:20:f8:56:1d:3c:18:ec:d3:
0c:f8:c5:37:2e:02:f4:c4:d0:e0:f9:c8:d4:70:e9:
74:e6:65:a0:7f:78:d7:df:ef:37:24:8c:89:c4:67:
39:f3:b4:a5:30:bd:13:66:8f:0f:8f:51:c1:ca:76:
b6:4f:c3:33:d1:b4:9e:65:7a:a6:ec:1c:e1:f9:88:
44:a8:22:af:0e:69:37:9d:e0:87:90:a7:28:9c:61:
c5:6e:ce:d8:1e:a5:0b:84:48:69:59:c6:99:50:7d:
64:47:d3:dc:e6:49:cc:9c:89:1d:bc:81:b7:54:73:
4b:92:51:3e:99:ab:b7:d4:e6:1e:1c:5e:83:09:1c:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A2:92:C1:AA:C4:D6:35:25:F8:89:1C:11:FD:6B:78:A9:D3:A6:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/6d8928a4-c1a8-3fcd-9844-cc13eca2d971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/b71f0bde-5320-4917-be9e-6cadf8118c9a.crl
X509v3 Authority Key Identifier:
keyid:49:38:D0:DC:4F:72:DC:6D:1E:73:43:B9:5E:37:CB:AC:C5:02:F1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.206.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:48:2b:0d:6c:ab:35:1e:6d:95:00:1a:a7:65:83:e6:e5:22:
f1:46:b9:77:73:b1:c8:a4:80:c7:d9:0c:b1:e3:33:59:53:ce:
3a:8d:1e:d0:91:f9:1d:f6:d4:84:00:17:87:76:90:38:be:fa:
d1:f9:65:59:99:cb:c2:5d:23:0c:0f:d0:03:98:1a:5a:42:56:
95:6d:86:a1:f4:a0:3c:fc:9e:ef:2f:22:26:fa:f6:38:06:91:
c0:58:8d:a7:93:19:8a:c4:7c:40:00:8e:0a:58:d2:c8:4e:43:
da:e4:33:72:c7:b0:24:de:86:48:45:38:dc:3b:ea:61:6b:a4:
23:8f:7f:27:70:6e:4a:6c:72:61:76:0d:73:f3:75:f3:44:47:
f5:7d:d4:12:36:d7:15:f1:29:8f:9d:63:32:40:4c:55:60:2f:
44:08:b4:2b:cd:fb:2b:6d:47:89:47:0f:a5:35:2f:83:14:5d:
02:d0:e8:b9:0a:30:81:4c:5e:a7:6f:5e:c5:9e:01:23:bd:29:
af:d6:d7:60:02:72:c4:85:36:92:6b:c6:84:89:40:10:54:74:
91:58:8b:17:de:3a:92:f2:1e:6f:1c:ff:0c:fb:0c:3d:37:64:
f4:2e:e0:c9:54:70:7d:36:0c:d3:1b:b7:c3:e3:8b:eb:c8:9c:
2c:70:07:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:32 2026 by rpki-client