
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/531069aa-fc87-328c-84eb-4940ce8d82da.roa
File: 531069aa-fc87-328c-84eb-4940ce8d82da.roa (raw, json)
Hash identifier: 7Yu30hfIBOS6xtf6YbItL2DDgiwTe/sSrSzVhNfo4ik=
Subject key identifier: B8:97:E7:F7:F0:A9:AE:03:04:59:F7:2C:21:DC:B0:E1:3B:88:8E:71
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584F4F0817D7D278B17D36D20F80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/531069aa-fc87-328c-84eb-4940ce8d82da.roa
Signing time: Sun 27 Sep 2026 01:00:12 +0000
ROA not before: Sun 27 Sep 2026 01:00:12 +0000
ROA not after: Sat 26 Dec 2026 02:00:12 +0000
asID: 14618
IP address blocks: 172.111.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4f:08:17:d7:d2:78:b1:7d:36:d2:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 27 01:00:12 2026 GMT
Not After : Dec 26 02:00:12 2026 GMT
Subject: CN=56535e59-64bd-45ba-8dd1-58c4efc1d6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:2d:94:aa:cd:b3:60:8f:87:21:f4:ca:54:
a5:de:e1:fc:b6:32:24:46:9b:46:ef:ab:56:88:df:
51:7d:1b:23:50:25:0c:7a:0f:2d:18:ec:41:80:ef:
ea:ba:eb:15:66:3a:99:57:7d:6f:31:63:5d:12:3d:
13:52:05:56:ee:79:12:ae:a6:ab:1b:09:21:34:6f:
57:67:c1:45:7b:4f:92:de:86:fc:15:85:05:8b:80:
ae:ba:86:29:be:7b:33:05:76:18:5e:c9:88:a8:25:
e0:aa:77:97:92:07:30:a5:b0:2d:a1:4d:5c:50:dc:
8f:22:2e:b5:d2:0f:e0:7a:56:3c:53:fe:2e:c3:79:
5a:64:28:e2:c8:af:45:e5:83:97:e0:64:28:26:01:
9a:cf:90:6c:57:4f:c1:0f:a6:4c:fb:0d:31:b5:c1:
51:63:99:5e:06:a8:ba:f9:8b:a6:1b:be:45:01:f0:
59:23:45:9b:a6:c3:82:a8:33:10:e9:35:5a:3b:3e:
c9:e8:0b:e2:cd:6a:a0:f4:06:8a:b1:9a:37:a1:e1:
61:0f:22:4b:8e:e6:0b:8d:f2:4f:4e:6b:45:e8:2b:
a5:d8:0b:0b:50:f6:3d:c4:4e:3a:c9:7e:ae:bc:6f:
20:8a:6e:b6:b5:9f:2d:d1:b6:e6:e4:db:89:aa:31:
f8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:E7:F7:F0:A9:AE:03:04:59:F7:2C:21:DC:B0:E1:3B:88:8E:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/531069aa-fc87-328c-84eb-4940ce8d82da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:63:b1:94:9a:cf:52:7d:df:bb:52:0a:17:59:59:0a:5e:a5:
c1:d9:05:ee:78:97:8e:05:30:12:27:af:13:13:c2:88:ad:64:
f0:0d:37:c7:f1:32:fb:17:ab:d1:01:1f:63:91:34:ff:12:18:
32:dc:1a:8a:e2:c4:00:9d:a5:09:9e:58:87:04:85:77:2f:e9:
73:5a:75:1f:63:06:1e:11:8f:f2:ac:14:62:fe:42:ca:6b:da:
22:d6:87:aa:f0:7b:b5:57:1a:b7:df:1b:f1:93:8c:48:ef:bd:
61:42:60:88:3c:cb:05:a7:30:9a:07:3e:a6:4b:76:23:c0:94:
b7:d9:30:d5:5f:74:01:2a:db:d4:21:21:21:5a:04:fe:3f:a8:
e2:48:2f:3d:eb:6a:ce:83:12:d4:29:95:dc:40:2f:81:b1:e2:
e5:60:54:18:f0:94:a8:d0:48:3a:57:26:b8:80:b0:67:46:c7:
f5:0c:ba:a3:d1:fc:e4:5f:4c:f4:9b:27:05:f2:f6:42:31:53:
0e:1a:47:b9:b7:cb:e7:11:7e:a5:60:cf:9a:9a:f1:76:d9:c1:
63:11:0e:e3:76:eb:34:ff:c5:63:c0:55:5a:8d:54:fb:20:86:
ea:31:ea:8c:ef:9f:46:1d:00:95:6b:1a:b6:42:c8:d4:58:d0:
55:02:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:03:54 2026 by rpki-client