
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa
File: 4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa (raw, json)
Hash identifier: VA31oD5eCQBVkpINkcQ0eRMkt+PrT6MnX6/S0w/Mx90=
Subject key identifier: 63:D8:61:F4:9E:5B:74:01:84:D0:4F:4B:D5:A6:B2:AD:72:AA:EE:84
Certificate issuer: /CN=17e20fae-392b-4b22-b475-c6dff7142fa6
Certificate serial: 010D0C9F4328584E2AD4508CCB46FED9D22B1680
Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa
Signing time: Sun 14 Jun 2026 09:00:11 +0000
ROA not before: Sun 14 Jun 2026 09:00:11 +0000
ROA not after: Sat 12 Sep 2026 09:00:11 +0000
asID: 715
IP address blocks: 199.120.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2a:d4:50:8c:cb:46:fe:d9:d2:2b:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6
Validity
Not Before: Jun 14 09:00:11 2026 GMT
Not After : Sep 12 09:00:11 2026 GMT
Subject: CN=315b8d9b-33f7-4473-8ad4-70245e8ef3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:c4:d7:c1:a2:13:fe:89:fc:a0:43:f6:3c:
e7:7d:74:ef:d0:ba:75:ab:ae:63:11:14:68:b7:fe:
34:bc:9f:f1:56:63:3a:f6:79:38:cd:1e:73:eb:90:
db:d7:8c:a1:40:0e:c8:62:73:60:c7:16:d4:3e:c2:
2b:59:11:07:55:f4:c6:2a:47:94:c8:80:d4:c6:1e:
43:5d:74:be:a2:45:b9:77:81:45:0d:34:e8:e6:43:
07:5d:29:b3:42:57:bf:09:ce:29:55:c1:e5:69:52:
cd:34:c8:75:09:3a:09:c8:1f:e5:88:6c:17:3b:cd:
ce:60:20:5c:8f:4c:27:9f:43:57:65:5a:9b:c1:db:
b8:a0:1c:ca:99:1d:bb:8b:cb:79:50:b4:18:79:41:
3e:d7:fa:bb:88:8f:9b:10:34:cf:5c:f0:59:8b:9f:
55:c1:ae:aa:f6:5f:03:d2:28:91:a1:d1:8d:c7:41:
03:49:0f:c3:97:1a:9e:d0:f2:75:6f:9f:1d:ba:2d:
77:0d:9d:62:1e:ed:2b:c7:bb:6c:e7:0a:f7:91:79:
6d:5a:cb:da:32:9a:e7:48:04:34:e2:ae:d0:d0:16:
d0:a3:9c:0b:43:b8:35:da:3a:05:ba:f8:01:18:8d:
e3:42:54:2f:94:2d:d4:0e:06:ee:39:6f:9f:69:30:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D8:61:F4:9E:5B:74:01:84:D0:4F:4B:D5:A6:B2:AD:72:AA:EE:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl
X509v3 Authority Key Identifier:
keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.120.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:4b:04:5e:ca:f0:e3:a7:b8:c1:6c:c6:f4:e3:08:48:dd:1e:
c8:96:18:db:e7:4a:92:0f:e7:13:59:d9:a8:c4:0e:89:21:a0:
9a:19:23:a4:9b:6c:b1:af:5a:a5:46:6d:95:33:99:ee:eb:76:
d9:72:82:68:86:6d:c4:73:5d:b0:87:0f:df:bf:a1:0d:fa:af:
35:a7:75:b6:51:c0:21:fd:d9:c2:4d:fa:1f:0f:40:5c:fe:52:
60:49:c2:d3:6e:65:d1:bb:dc:c1:86:d2:50:77:98:e5:8c:a2:
1f:8f:cf:21:c2:da:73:41:59:53:4e:a1:5f:89:af:2b:46:2e:
67:00:03:f3:37:7e:1c:af:8b:5f:a5:aa:64:be:07:36:02:c6:
2c:5e:54:27:59:8e:5f:36:82:3d:44:da:85:89:63:d5:12:25:
62:c1:4b:e2:8a:c4:7a:1b:9c:8e:80:89:8f:fa:ce:53:6e:09:
e8:4c:6d:fa:cd:47:9c:10:54:c8:1e:b1:82:36:bb:26:71:8d:
ab:35:18:b4:41:5e:66:1a:1f:49:0c:df:4e:9a:18:d1:31:98:
ab:c6:85:dc:db:9a:0a:9b:86:07:90:a8:65:46:fb:63:6a:99:
a5:22:1b:d4:71:bb:2d:61:6c:91:8e:db:64:13:7a:61:55:d3:
c3:45:71:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 07:00:30 2026 by rpki-client