
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/aa4087d7-dc3e-33d9-919f-151eee0337f4.roa
File: aa4087d7-dc3e-33d9-919f-151eee0337f4.roa (raw, json)
Hash identifier: LQT8Sk0XEe9lHE7n055vSglnpj7C6G0lgrdpqJfS8CU=
Subject key identifier: C2:06:CE:A1:52:C0:12:6E:2C:97:88:CB:B8:FA:18:0E:DF:05:7E:BF
Certificate issuer: /CN=f9441892-5f50-4eb3-a218-8dada1be8f65
Certificate serial: 010D0C9F4328584F4112A4E8EB5E9AA2EF19F620
Authority key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/aa4087d7-dc3e-33d9-919f-151eee0337f4.roa
Signing time: Tue 22 Sep 2026 01:00:12 +0000
ROA not before: Tue 22 Sep 2026 01:00:12 +0000
ROA not after: Mon 21 Dec 2026 02:00:12 +0000
asID: 29900
IP address blocks: 162.218.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:41:12:a4:e8:eb:5e:9a:a2:ef:19:f6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9441892-5f50-4eb3-a218-8dada1be8f65
Validity
Not Before: Sep 22 01:00:12 2026 GMT
Not After : Dec 21 02:00:12 2026 GMT
Subject: CN=27cf8763-979d-4d05-9a14-72d972325a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:e4:c5:98:ec:bb:a2:60:65:39:5e:88:4f:
7b:64:17:b6:00:aa:ae:10:51:f1:ce:31:30:e8:61:
b9:79:01:ae:26:6a:78:2c:ee:83:90:9d:8a:b3:4e:
ce:3a:5c:d5:59:50:fd:af:27:40:fa:c6:66:3b:d6:
79:1b:9d:e2:09:6d:6b:40:02:89:f4:12:b9:7d:87:
95:d3:1f:68:db:d4:3b:f0:fa:35:b4:e8:2d:ec:27:
b2:09:eb:7d:b9:74:f2:42:e8:57:41:57:d0:e9:57:
83:30:67:29:03:1d:8a:02:cd:0b:e4:d3:a3:c9:91:
f6:b7:27:d6:05:26:05:c5:ec:e1:6e:a0:7c:2d:7e:
ff:2a:11:e5:c4:fe:81:11:6e:19:0b:20:c8:c1:20:
7c:ac:be:4e:da:89:f9:6b:f6:22:31:49:15:18:1a:
4d:5e:4b:17:23:f9:6f:f5:37:b9:60:b5:eb:69:49:
27:92:11:f4:69:50:43:c8:46:d1:76:28:00:c3:2c:
31:92:ad:07:0b:50:18:a8:fd:b4:2b:2f:85:72:d4:
ea:ef:bb:ea:01:6d:9d:8c:ec:a7:63:cc:61:42:3a:
a9:42:79:20:d0:89:92:7b:92:4f:8a:a2:8b:23:67:
f9:ca:be:f6:57:6c:2b:32:06:e0:01:a0:28:62:c9:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:06:CE:A1:52:C0:12:6E:2C:97:88:CB:B8:FA:18:0E:DF:05:7E:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/aa4087d7-dc3e-33d9-919f-151eee0337f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl
X509v3 Authority Key Identifier:
keyid:5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer
sbgp-ipAddrBlock: critical
IPv4:
162.218.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:c5:d7:ca:24:b4:c2:96:10:17:a0:17:c0:2a:dc:30:20:9b:
2a:d4:03:9a:d3:28:5a:99:8d:63:d7:41:74:e2:57:ee:d6:62:
2d:68:d2:8f:b8:ab:95:49:ca:96:53:39:6e:f2:40:76:af:1b:
ef:7f:cb:25:ec:a2:4b:ae:f6:eb:75:70:d0:de:d0:fb:f4:9b:
36:23:fe:35:51:a0:bf:e0:69:73:6f:4d:26:d9:d0:cf:d4:4f:
01:e8:77:fa:14:a1:2f:25:1a:68:a8:05:65:03:a9:c9:4d:cd:
44:6a:c7:47:08:18:b3:69:0c:2b:c2:09:47:df:8f:61:58:28:
b5:61:98:cf:e9:26:0f:6d:2b:75:00:06:dd:62:6d:6f:49:4e:
1b:64:a1:d0:91:13:46:80:9a:96:1a:2b:04:4c:e7:93:1a:df:
02:40:3e:03:96:3c:7a:df:59:d9:ee:ba:78:fa:99:2f:da:0a:
3b:58:a5:2d:24:79:09:c3:35:41:be:98:05:6c:d6:d4:be:be:
16:3d:5b:11:20:ff:d1:46:83:7e:14:84:b5:d1:dc:ae:66:d6:
02:8e:81:d9:b1:28:e5:8c:75:10:67:e8:20:9f:7b:b0:dc:3d:
3f:da:ce:5c:88:92:d9:39:d4:b6:16:24:ed:de:29:3a:e6:84:
31:f6:4d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:45:57 2026 by rpki-client