
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/dd2f23a5-7b05-3f38-804a-ffa5fb709a14.roa
File: dd2f23a5-7b05-3f38-804a-ffa5fb709a14.roa (raw, json)
Hash identifier: SuvP0dMHMRkrsU2CEwTQDyCsCfAZJ+er6NAjaOA5mD8=
Subject key identifier: 45:2E:64:30:82:C1:C0:B7:A8:CA:8F:33:99:AE:C0:C5:7F:2C:3E:C0
Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial: 010D0C9F4328584FBCE717B87A573D53798A2340
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/dd2f23a5-7b05-3f38-804a-ffa5fb709a14.roa
Signing time: Thu 05 Nov 2026 09:33:03 +0000
ROA not before: Thu 05 Nov 2026 09:33:03 +0000
ROA not after: Wed 03 Feb 2027 09:33:03 +0000
asID: 20326
IP address blocks: 209.222.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:bc:e7:17:b8:7a:57:3d:53:79:8a:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Validity
Not Before: Nov 5 09:33:03 2026 GMT
Not After : Feb 3 09:33:03 2027 GMT
Subject: CN=a120ba67-a1bf-4b11-a347-72e4c62f539d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:a2:8c:72:b3:df:c9:8d:44:bc:76:3e:f5:
63:68:05:f3:45:86:cd:92:d3:dc:bd:be:30:60:3e:
d2:5b:ee:78:d9:38:25:02:0d:a7:21:dd:05:7f:3a:
74:e3:4a:1d:20:25:d8:36:d6:87:15:11:87:a5:ce:
e8:75:42:a4:7b:17:a1:d1:ed:c7:c9:4b:30:cd:57:
c7:38:c1:8a:5d:87:a4:1b:67:66:c7:a9:9c:80:7e:
94:d4:b1:72:76:97:9d:f4:8f:ed:b2:b6:80:db:d4:
f6:e1:22:e5:f4:6c:07:60:c3:63:07:94:a9:fa:55:
e0:17:a1:2e:75:2c:f1:c3:68:29:a1:b2:63:6a:5a:
95:49:2a:f8:cf:02:ac:59:91:05:b4:95:f9:73:bb:
2a:37:9a:bd:24:83:d6:c0:f1:19:7b:87:82:6c:2c:
80:7c:56:b3:1b:6d:e6:12:7a:e0:1a:50:48:ec:6d:
6f:20:8f:27:2b:4c:48:7e:99:0b:2d:9b:e2:42:1e:
b4:9b:c2:23:9e:df:ee:e3:ef:33:a3:19:d2:65:66:
f3:6d:e3:59:63:3d:50:67:05:aa:60:90:b5:cb:63:
99:be:a5:88:20:40:a5:8b:9c:d0:50:ef:25:d2:e6:
7f:72:b2:20:a2:7d:bf:a3:65:68:1c:1e:7e:7d:5b:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2E:64:30:82:C1:C0:B7:A8:CA:8F:33:99:AE:C0:C5:7F:2C:3E:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/dd2f23a5-7b05-3f38-804a-ffa5fb709a14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
X509v3 Authority Key Identifier:
keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
sbgp-ipAddrBlock: critical
IPv4:
209.222.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:ac:ba:fa:35:df:1a:bc:f3:ba:6f:1b:50:5b:78:5c:06:e9:
a1:e1:83:72:08:88:d7:e7:38:47:7b:48:f3:90:4e:a0:30:38:
48:e7:19:f8:dd:00:f7:a2:a1:59:05:0b:0c:77:2c:6b:ef:52:
c7:36:d1:8d:aa:3a:bd:17:dc:33:97:1e:5e:a7:e5:4f:13:9a:
aa:f5:9c:9c:00:73:b5:df:b3:5b:a8:d9:b7:74:62:97:4d:aa:
18:55:a5:ea:ca:2d:a8:ae:53:59:f6:f1:b3:bf:a8:4a:59:4a:
f3:52:f6:b5:67:40:65:9d:7a:75:9a:5a:20:71:93:5a:0e:56:
d9:d5:95:1c:f1:75:2d:12:69:9d:ff:08:37:a2:1d:fe:45:36:
d2:e0:70:83:0d:56:48:81:44:11:32:90:fc:ab:3f:96:c5:26:
75:90:6b:44:41:42:d5:f5:87:51:a2:9e:cd:61:56:df:74:44:
12:6e:a4:87:cb:38:e4:52:04:9d:27:3f:5f:8e:c3:59:21:de:
a0:e7:ca:b1:3d:da:dc:0c:ed:1d:32:79:58:57:29:8d:23:81:
60:2d:25:7c:c1:a7:41:14:06:5e:9a:44:69:2e:83:9b:4e:d0:
52:cc:78:4b:94:77:a5:5c:a1:c3:5a:10:83:a4:68:c8:11:98:
ca:7f:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:53:21 2026 by rpki-client