
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa
File: fde4e71b-e3e8-3394-a523-a42805ae411a.roa (raw, json)
Hash identifier: oLN7qeLu+Ixd0RqruklJ14QqLwj2urNp7u5N9yly8H4=
Subject key identifier: 34:FD:B9:D6:EE:93:3C:5D:DB:BC:C4:36:FE:FA:57:DB:4B:5E:DF:0C
Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial: 010D0C9F4328584CBDB1DEA772AE087244805858
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa
Signing time: Tue 03 Feb 2026 14:00:39 +0000
ROA not before: Tue 03 Feb 2026 14:00:39 +0000
ROA not after: Mon 04 May 2026 13:00:39 +0000
asID: 14500
IP address blocks: 192.151.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bd:b1:de:a7:72:ae:08:72:44:80:58:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Validity
Not Before: Feb 3 14:00:39 2026 GMT
Not After : May 4 13:00:39 2026 GMT
Subject: CN=4695dc0d-e4d4-4c58-94b1-b59b67e267dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a0:5c:02:7c:8d:23:bb:2a:da:e2:55:c2:71:
32:f0:46:24:b1:11:fd:49:b0:77:36:11:af:4c:e0:
a8:a3:2c:f0:e3:b1:5a:67:40:6b:f5:9b:d1:44:e0:
8a:ad:0a:3a:eb:2a:27:34:e2:f2:6e:b5:4a:b8:f1:
90:ce:b0:d0:bc:2a:5b:98:65:ee:dd:c8:98:b7:a6:
26:f6:45:c9:32:6f:8f:67:ab:ff:f0:fe:d7:29:6c:
28:bd:51:0b:87:d4:02:cf:d6:75:df:19:d6:fc:d5:
b4:bb:7e:1f:ad:96:2c:a1:c0:2f:e7:a0:91:13:9d:
49:26:ee:79:f1:27:a4:d4:6d:f0:b7:cd:2b:c5:12:
99:39:22:6c:27:ff:9d:30:78:2f:e0:3c:e9:e1:6f:
59:3d:24:2a:cd:d4:aa:be:fa:3d:4d:64:ef:ba:5f:
1a:6a:f9:0b:71:e1:e8:22:33:10:22:12:ee:fb:01:
48:7a:b3:d1:26:39:22:2a:16:d3:32:41:bc:80:3b:
76:e5:a9:3c:31:8b:fe:3c:8c:ac:72:8e:ab:c8:7a:
9c:3c:03:ed:3b:8a:60:5c:f6:10:a8:5b:95:93:55:
ad:c8:77:28:d4:73:3d:5c:90:60:87:6d:f6:80:3b:
d6:a2:d8:07:3b:80:7e:ff:b1:84:4a:1d:09:93:c7:
fd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FD:B9:D6:EE:93:3C:5D:DB:BC:C4:36:FE:FA:57:DB:4B:5E:DF:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
X509v3 Authority Key Identifier:
keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
sbgp-ipAddrBlock: critical
IPv4:
192.151.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:55:78:04:ee:ad:46:c5:a2:ba:25:ea:e1:29:4e:32:59:95:
14:1d:48:18:b6:e6:93:ee:77:79:ca:77:83:6c:ea:ef:9f:f9:
bb:99:45:37:f2:0d:dd:46:c3:bc:2d:e2:3a:75:10:6c:a0:3f:
4e:1e:0d:8c:93:d2:96:5a:9c:c7:32:d8:f3:6a:47:f0:c4:cb:
32:7a:fe:c6:88:df:c9:c0:c4:0d:e7:df:b3:73:7b:6e:a1:eb:
91:e0:02:99:f7:cf:10:2e:77:f0:58:47:0c:49:b1:15:39:51:
b1:2f:85:64:8a:5b:d8:40:96:5b:84:04:a3:83:79:d5:e5:a7:
f2:eb:b4:a4:99:9a:28:87:99:a7:20:b0:25:14:f1:d3:50:d2:
6d:5c:aa:20:06:5b:8c:d9:5e:b9:c9:1e:0e:77:50:24:0f:66:
73:f3:04:62:45:0e:a1:26:1f:ca:df:48:a6:0e:64:ac:de:bb:
dd:2a:64:92:2e:8d:19:c0:7c:35:31:ea:a8:e0:cf:40:36:6b:
61:63:9e:37:30:14:af:44:3c:d3:0d:59:65:12:2d:8a:8d:05:
f3:20:2c:12:ee:ae:89:75:45:b8:8a:2f:41:46:08:c7:17:5e:
2a:d5:cf:88:44:3d:9a:ea:67:b9:0c:c4:c7:e6:b8:1f:3d:da:
3e:a6:3d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:42 2026 by rpki-client