
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa
File: 9721a2b0-73bd-3612-b051-3fefdae4d925.roa (raw, json)
Hash identifier: Vf5iPxQM8hAvDXHkr/F58zR8HUQQQqkPnQAzBpttrfw=
Subject key identifier: 49:1F:4F:0F:47:72:55:86:74:3B:F4:C5:46:4D:66:22:79:B6:D4:78
Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial: 010D0C9F4328584CE3620F3A577BF53C61068380
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa
Signing time: Tue 17 Feb 2026 02:00:31 +0000
ROA not before: Tue 17 Feb 2026 02:00:31 +0000
ROA not after: Mon 18 May 2026 01:00:31 +0000
asID: 19637
IP address blocks: 192.19.66.0/24 maxlen: 24
192.19.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e3:62:0f:3a:57:7b:f5:3c:61:06:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
Validity
Not Before: Feb 17 02:00:31 2026 GMT
Not After : May 18 01:00:31 2026 GMT
Subject: CN=3c26fb43-ed63-4fc5-b225-a41c8dbdd5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:ec:a4:c2:0c:a2:50:af:3b:37:2f:fa:a0:
0a:e1:35:c1:10:77:32:5e:35:87:d0:6f:de:28:b8:
e8:92:da:81:cf:93:ef:07:04:2e:40:51:51:11:f8:
0f:6f:f7:e1:58:ca:fe:8f:d9:37:f6:1e:cf:e5:dd:
1e:37:55:e4:47:bb:63:cf:55:54:6b:8d:67:de:e7:
f5:7e:29:3c:cf:15:08:64:2e:38:d8:4b:11:5e:cd:
60:66:e5:c4:2d:96:85:66:3e:7e:c0:f8:d4:3f:e5:
4a:5e:af:ce:c4:e2:21:6f:bf:c4:bd:33:c8:89:b4:
f4:72:fa:34:45:81:39:57:b3:86:69:00:b6:14:fb:
b5:24:a9:ab:bf:0a:b8:fb:1d:0c:0e:df:e2:7e:a0:
cd:52:a9:a8:9e:a3:1f:a0:c8:64:8a:2f:ce:7e:c6:
9d:4c:a4:4a:e2:f0:4e:6a:40:08:5e:96:3b:2b:33:
94:01:48:c2:40:1b:0e:c4:95:1a:42:c8:6b:41:77:
65:a1:57:d3:b7:44:32:f7:1e:68:c5:40:5d:c2:19:
e3:7d:61:14:4a:89:98:79:bd:68:11:00:dc:a1:e1:
b6:25:b8:5b:c7:eb:1d:51:45:8e:09:d9:32:e0:fa:
41:06:4f:18:c5:d0:b3:4d:cf:27:0b:bf:ec:ad:9e:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1F:4F:0F:47:72:55:86:74:3B:F4:C5:46:4D:66:22:79:B6:D4:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
X509v3 Authority Key Identifier:
keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
sbgp-ipAddrBlock: critical
IPv4:
192.19.66.0/24
192.19.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:e3:eb:f5:fe:d1:00:dd:72:d7:b1:6d:70:4f:5c:61:2c:bc:
c5:9f:0b:e1:36:46:40:0e:48:b4:b0:f6:10:fd:24:80:29:73:
7c:ce:a5:ed:8a:e1:26:31:b5:2a:b4:29:44:b4:e6:34:6d:a3:
42:09:13:f6:91:0b:ad:d8:fc:e3:97:64:31:ed:dd:bf:43:db:
67:91:92:e1:78:6e:7b:46:6f:40:17:73:7a:3e:24:50:d7:4a:
c3:d5:34:60:a2:17:58:31:13:91:78:42:a9:ab:84:99:2b:4d:
0e:7b:bf:b4:18:d3:1f:c3:bc:38:91:9e:87:86:10:98:d1:26:
64:65:8a:c4:ea:c9:7f:9e:c1:50:98:c9:72:d6:3e:4d:4c:e0:
5a:ec:4f:12:c3:be:8d:52:38:c6:fd:aa:3f:7a:fd:35:43:ea:
8a:63:04:8e:86:27:fe:79:4f:d3:f3:a1:c0:dc:86:97:7c:4f:
ad:2b:c9:21:be:a1:0a:54:4a:d5:9e:ea:84:39:4a:6b:63:8b:
f5:ad:70:42:07:45:79:a7:02:ce:69:0c:a1:70:86:c9:0a:01:
c7:1f:72:99:e7:67:ef:7d:a7:91:34:29:b3:01:91:4f:54:eb:
63:d7:2f:9e:89:c4:1f:c9:26:7b:30:b4:0d:45:81:03:e9:38:
7e:f5:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:55 2026 by rpki-client