
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa
File: 649189b4-bfc0-35b4-931b-45e2843949b0.roa (raw, json)
Hash identifier: fv9r7ZpUGl4+NiY1WYLEfizrEcsDC5G74+zJwyyWB0k=
Subject key identifier: 99:DA:97:91:DF:FB:8D:66:19:FB:BD:13:22:3B:7C:7D:D4:9B:98:BB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EC0A736301441710B21F7D920
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 36183
IP address blocks: 172.225.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:36:30:14:41:71:0b:21:f7:d9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=12918af0-dd6f-45f9-a2c8-dfefce152f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:09:1a:13:43:2b:66:9d:c9:88:a4:1c:71:
a8:95:53:76:f0:c5:95:55:c6:de:5c:a2:a8:22:eb:
e8:aa:f8:ce:ea:9f:00:23:ea:2d:6e:27:ef:a5:d5:
59:8b:8f:bd:68:ba:45:19:a9:0c:82:2c:f0:90:24:
ee:bc:cf:28:d8:20:96:4f:fa:16:9a:80:06:24:ed:
0d:ec:ae:f0:c0:04:71:d3:3f:79:b4:a1:2d:b2:6a:
e1:bd:0d:2e:a4:7d:06:f5:70:b3:44:11:3d:da:0e:
3e:9e:ab:26:e7:1d:93:9a:9d:6a:85:72:cb:bd:15:
44:39:67:13:c7:6b:f4:41:bc:47:51:cc:f1:33:fd:
d1:bf:2e:55:1e:91:0b:96:1d:a0:1f:c8:b7:99:73:
71:ad:e2:16:9e:f7:69:28:b6:2c:24:5e:45:6d:62:
6b:79:c0:92:09:88:0a:cd:0f:ca:1f:97:9d:87:be:
7b:26:28:01:38:0b:91:b0:4d:8d:ed:00:a6:7e:bc:
40:a9:12:3f:f6:fe:ca:bf:92:2b:76:a0:5c:7c:9f:
5a:01:eb:b2:e1:e6:71:7e:f2:c8:dc:81:1c:0e:0b:
f4:cf:60:24:a7:e8:d3:c0:29:f3:31:ae:8f:7a:06:
95:e4:f1:06:9f:e2:22:e7:b7:6e:25:f3:d6:cc:2b:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DA:97:91:DF:FB:8D:66:19:FB:BD:13:22:3B:7C:7D:D4:9B:98:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:0c:52:f9:2e:6c:22:bb:04:8e:24:91:fa:6f:76:63:fd:ee:
c7:34:35:ba:37:91:66:9e:21:85:4d:a7:d1:15:11:57:07:97:
f3:14:a8:32:50:03:77:7f:c7:d1:8e:13:7e:d9:23:5a:68:6d:
9e:97:c1:a2:ca:76:9a:b6:fa:71:45:70:b7:87:69:0d:fa:d1:
3c:04:55:96:e9:88:95:ec:db:bd:b0:1d:78:c9:09:1a:54:fc:
e4:f9:53:78:14:16:36:9c:3d:ba:97:87:ff:2e:e5:c0:82:32:
5f:a1:9d:43:f2:96:f3:46:6c:98:09:00:37:94:8f:70:78:45:
8b:a1:0e:e0:75:a2:b0:f9:4e:3b:42:27:62:90:ff:90:5a:97:
97:b1:95:a4:b8:4f:41:f8:5c:2c:b3:06:ed:e5:fc:5f:e4:a7:
47:ef:1a:3a:43:b3:3c:45:49:04:ee:08:8a:e2:50:b6:72:b8:
81:58:a8:81:39:2b:ad:c2:e2:2f:65:77:3f:7b:fc:da:6f:96:
4f:fb:b0:fa:ed:8c:d0:89:de:75:83:9c:11:c0:c9:ca:fd:15:
10:b6:8b:35:fa:84:75:db:14:8b:27:67:11:6b:aa:a4:8e:7e:
ed:55:96:4c:00:4e:d7:8f:1a:5c:d8:ab:10:ce:f4:8c:de:f0:
9c:e4:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:10:16 2026 by rpki-client