
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa
File: c4cf259e-e700-3217-b9f2-8c833c86c901.roa (raw, json)
Hash identifier: 8QtCE/s/qSVP2LWsstCrUiEvoKUjUcPLC+bf0jUOpNM=
Subject key identifier: 37:42:83:71:3A:C1:99:97:86:42:5F:2C:4A:75:4F:AB:2E:E8:84:CF
Certificate issuer: /CN=9ff91cfb-8c05-4ee8-9006-f7a1e162f92c
Certificate serial: 010D0C9F4328584E4C548F41030105AE85204400
Authority key identifier: 09:F4:11:37:AC:74:7E:B2:59:25:BC:46:14:9E:F9:6E:C9:B7:8A:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa
Signing time: Fri 26 Jun 2026 09:00:12 +0000
ROA not before: Fri 26 Jun 2026 09:00:12 +0000
ROA not after: Thu 24 Sep 2026 09:00:12 +0000
asID: 8075
IP address blocks: 199.38.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4c:54:8f:41:03:01:05:ae:85:20:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff91cfb-8c05-4ee8-9006-f7a1e162f92c
Validity
Not Before: Jun 26 09:00:12 2026 GMT
Not After : Sep 24 09:00:12 2026 GMT
Subject: CN=3677e2de-fa77-458c-90b0-7841adacb2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:6e:c6:46:ee:13:51:1c:4e:74:2b:71:a9:
f4:51:04:94:a5:8d:9e:68:cf:ac:58:83:53:3a:b3:
75:eb:69:d4:c5:9c:d1:ad:ca:fd:7b:43:8d:89:1b:
91:22:c2:40:62:e7:ee:43:d6:0b:d2:5c:e6:4e:23:
24:45:ef:b6:81:43:f4:dc:6b:72:ad:e8:27:c8:5e:
03:56:96:f6:30:d6:32:a6:1f:d4:65:05:2c:2b:96:
53:34:dd:ec:c1:84:61:cc:30:b3:ac:01:a9:b5:06:
cb:c0:95:4b:92:d4:e7:9b:7e:d1:23:5e:7f:ad:33:
8e:bb:f1:f5:27:4d:ef:d7:04:53:2f:bd:10:3d:25:
4b:5b:3c:6a:d4:03:7f:af:2e:32:65:55:0e:0c:3a:
b6:3b:12:cf:e8:9a:6b:b0:49:7c:70:51:54:99:04:
f7:9c:c2:70:e6:77:fb:4a:2a:7c:77:71:b5:54:87:
fe:de:e1:ac:5f:2e:87:09:a9:9b:ab:d2:2e:05:a1:
04:7c:31:4c:bb:4d:dd:99:c3:e6:47:63:4a:34:b2:
13:45:b2:c9:09:fd:c3:39:65:8b:0e:70:9b:08:f8:
a4:26:82:4a:4d:fb:0e:a0:5f:da:86:1a:12:cb:4e:
6f:a6:78:06:67:e3:81:b4:56:77:a7:11:6a:6a:0f:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:42:83:71:3A:C1:99:97:86:42:5F:2C:4A:75:4F:AB:2E:E8:84:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.crl
X509v3 Authority Key Identifier:
keyid:09:F4:11:37:AC:74:7E:B2:59:25:BC:46:14:9E:F9:6E:C9:B7:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.38.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:dc:dd:29:c7:d5:88:2d:f6:7c:76:41:47:c3:3d:3e:c5:cd:
d8:97:d6:4d:ae:6a:2c:30:d5:59:e4:af:2a:bc:d4:d3:d2:25:
25:17:63:8a:52:91:c4:24:9d:2b:10:07:d3:4c:a6:8d:64:0f:
8a:2b:ff:ca:b4:37:11:73:17:5c:fd:24:56:6c:1a:0f:ae:60:
c9:eb:f3:9e:1e:73:61:23:29:65:d6:2b:56:e6:75:4b:b7:54:
24:2c:a8:95:6d:8e:3c:7a:53:c0:fc:e5:47:7e:c1:38:9c:bf:
b7:7c:f3:4e:7f:41:b8:6a:91:d0:82:b2:ca:34:04:9a:2c:ea:
91:4e:26:0e:aa:bd:8a:30:d3:18:be:ad:ba:3d:7e:40:39:a3:
de:34:5d:96:24:eb:a0:07:ef:39:cc:82:6a:32:34:ef:16:d2:
fc:58:60:c4:00:06:75:f0:da:5f:dd:90:3d:05:5b:5b:b5:29:
28:90:2d:ce:27:66:84:38:73:58:c4:e7:da:11:10:5b:03:30:
f7:cb:e5:7e:a5:17:17:79:6c:2b:25:a5:56:33:1b:c1:67:12:
8a:23:53:4d:37:c8:8b:e5:2e:b5:dd:13:54:09:e4:30:9c:b1:
f9:5e:df:4f:ad:b6:5e:19:61:f8:1d:8b:48:3b:bd:58:0b:f1:
eb:c2:1f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:54:39 2026 by rpki-client