
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/46a07bce-d159-3940-9c4e-a7bf314f74a9.roa
File: 46a07bce-d159-3940-9c4e-a7bf314f74a9.roa (raw, json)
Hash identifier: soU+ALMvQPg+LGQZcfOhXbD6EzJmra7Iqr+I1dQIoHM=
Subject key identifier: 6B:0B:F9:F7:06:78:37:32:F1:85:3D:6F:5D:D0:84:0E:94:61:50:BA
Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial: 010D0C9F4328584F268D07FEADF6A09A7256D780
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/46a07bce-d159-3940-9c4e-a7bf314f74a9.roa
Signing time: Sat 12 Sep 2026 13:00:13 +0000
ROA not before: Sat 12 Sep 2026 13:00:13 +0000
ROA not after: Fri 11 Dec 2026 14:00:13 +0000
asID: 16509
IP address blocks: 198.169.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:26:8d:07:fe:ad:f6:a0:9a:72:56:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
Validity
Not Before: Sep 12 13:00:13 2026 GMT
Not After : Dec 11 14:00:13 2026 GMT
Subject: CN=6df1502c-5dd8-462e-bc6f-1a5f17793d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:13:be:5b:0a:3d:ce:69:1d:d6:c3:98:be:
a3:59:92:25:e7:46:7e:ba:59:3c:81:46:41:ba:73:
b5:3d:86:e5:70:d4:d8:80:0f:f9:a4:bf:96:e6:ea:
6b:a2:ac:c7:d9:3a:37:fa:6a:5b:c6:4e:5d:62:81:
61:cb:45:50:21:45:cc:cc:19:41:7c:84:32:c6:59:
f5:87:03:e2:d5:0e:03:d6:44:7b:36:f3:d6:ed:37:
43:82:44:e8:03:4d:1d:e3:fc:e0:ff:bb:cb:a9:db:
dd:8c:7e:55:e8:45:6d:da:39:66:3d:51:be:75:e3:
21:94:ea:52:4f:e7:b6:4b:67:e1:70:21:84:6c:c1:
fc:5a:5a:0e:c3:cd:43:b8:c3:89:25:44:16:3e:ce:
87:0f:21:a6:e7:4f:31:82:47:87:18:20:fc:18:56:
b0:11:ee:b9:7c:c3:28:7b:72:08:15:4b:ca:9b:17:
e1:09:90:25:2b:f3:24:ad:45:65:12:14:08:39:43:
f3:58:99:35:b7:ea:c2:91:f7:a4:77:95:fb:e9:52:
c3:e3:f8:8c:74:88:fb:e0:71:ae:31:82:dc:a3:d9:
41:ba:06:d2:dd:21:a5:d0:87:9f:ac:2e:76:60:22:
dc:3d:e7:f9:07:a4:f7:cb:5c:2d:d2:21:5e:b4:e1:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0B:F9:F7:06:78:37:32:F1:85:3D:6F:5D:D0:84:0E:94:61:50:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/46a07bce-d159-3940-9c4e-a7bf314f74a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
X509v3 Authority Key Identifier:
keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
sbgp-ipAddrBlock: critical
IPv4:
198.169.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:fd:99:68:1e:78:f8:f9:69:a2:d3:c6:ed:a9:42:3b:06:27:
1a:39:f5:5b:df:db:44:0a:05:52:f1:88:1e:32:be:54:de:bf:
aa:0f:14:17:c8:44:82:3a:d7:2d:d9:fc:23:fd:f5:dd:6d:dd:
c1:7f:e7:22:21:46:2c:39:20:49:53:de:47:33:d4:2c:12:96:
7a:8a:d1:02:4a:ab:95:e9:62:47:88:28:e1:00:9c:bf:38:41:
fe:e0:32:d0:79:25:a2:9a:bd:01:61:25:13:a3:28:dc:ee:8b:
69:76:76:1e:7b:b6:3b:1c:81:e5:30:8d:4e:c2:cc:fe:98:95:
c9:91:3a:d4:2c:95:1f:0a:b4:4a:2e:47:84:28:ed:4b:b1:1d:
83:01:35:62:7b:40:02:13:17:65:13:55:d3:20:0a:4b:0c:89:
2c:36:39:ee:38:83:d7:91:88:da:c4:f8:85:16:24:e9:c6:8d:
0c:2f:ae:46:b8:0f:7d:90:5a:c4:62:0e:e0:12:4e:9a:1f:9d:
c1:da:31:42:c2:b0:80:ac:d0:07:48:93:e8:1e:a6:be:97:a4:
c7:e1:24:b5:4f:83:b5:dc:92:22:26:41:9e:5d:a0:7b:a5:2b:
ea:e5:36:b4:05:0d:da:79:53:02:8f:66:ce:61:a2:0f:5b:54:
d9:bd:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:39:52 2026 by rpki-client