
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ae046f9d-5e0f-39f0-aa05-18c0b2dfaf2d.roa
File: ae046f9d-5e0f-39f0-aa05-18c0b2dfaf2d.roa (raw, json)
Hash identifier: 1A3as9SLUf4Z/lKlAFKhA7nKEoeyf1seupVvoqRknHQ=
Subject key identifier: 45:13:9C:53:32:91:C8:D4:AD:96:1D:99:E4:55:0A:FE:F2:FE:C7:AC
Certificate issuer: /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial: 010D0C9F4328584F49770443B3FA735D8241CAD0
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ae046f9d-5e0f-39f0-aa05-18c0b2dfaf2d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 14618
IP address blocks: 199.187.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:77:04:43:b3:fa:73:5d:82:41:ca:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a6bcecbf-91e4-4b74-8629-d7957b557b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:05:bd:d7:44:23:3b:4f:69:e3:02:8b:18:78:
9e:dd:c2:e9:6b:4f:61:e1:96:7e:73:56:f4:90:93:
62:02:1f:03:e7:18:2e:69:68:ad:03:7f:4f:07:35:
f6:74:da:a7:da:51:9e:74:25:6d:1e:53:60:3e:d3:
17:32:ab:4e:9a:42:a2:0f:29:01:84:75:e3:c2:a1:
a3:44:34:af:13:74:3b:b6:62:31:d6:ce:f0:ef:9c:
75:8f:f7:d1:dc:00:fd:69:6e:df:a1:a1:66:93:dd:
31:91:de:fa:bb:a5:c6:55:38:f4:d2:4f:a7:04:19:
a5:f8:97:64:5e:b6:04:ce:d9:2f:9d:a2:f5:af:22:
80:85:32:26:d4:95:de:74:5f:82:d0:b7:9c:45:57:
0c:99:8e:e1:31:d4:4e:98:89:5b:d2:61:58:da:a6:
8b:98:d5:94:32:a7:2e:4f:86:18:e0:93:42:b3:45:
f4:54:a0:ec:69:6a:fd:c3:6a:c5:6e:84:b8:b7:c7:
e2:0a:17:3b:1c:69:6d:87:e7:5b:3c:20:61:b8:9b:
b5:78:f5:a5:16:89:de:7d:bd:55:e7:a5:da:1e:da:
31:5d:8e:a3:01:e0:88:bb:ef:85:8c:eb:09:eb:e4:
90:14:7b:21:ae:17:b4:b0:da:b0:5f:82:f3:90:e2:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:13:9C:53:32:91:C8:D4:AD:96:1D:99:E4:55:0A:FE:F2:FE:C7:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ae046f9d-5e0f-39f0-aa05-18c0b2dfaf2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
X509v3 Authority Key Identifier:
keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
sbgp-ipAddrBlock: critical
IPv4:
199.187.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:10:1a:1c:8d:eb:76:f9:91:4d:07:02:97:f2:2d:9f:a5:34:
b8:f7:8f:96:4e:a2:16:5f:4e:5f:9b:71:e2:d6:ae:0a:c1:6d:
40:9b:da:f3:99:cc:ff:83:40:5b:e7:03:55:f1:87:a9:9f:f7:
1d:6e:37:52:32:33:57:f0:39:95:3b:a4:eb:e3:a9:3e:47:89:
08:79:b7:f1:df:da:bd:a5:95:b4:ef:aa:7a:e3:b2:3f:b2:ea:
6c:61:e2:bb:ab:7b:55:43:fc:21:5f:aa:0b:64:a1:df:60:ff:
f6:8c:03:eb:64:10:61:90:22:d1:f6:35:f6:63:ce:b5:0d:7f:
5d:2a:6d:cf:6c:bb:63:8e:dd:de:cf:e9:16:2e:4a:36:33:c4:
37:4e:4f:7c:37:2b:24:07:a1:e9:08:12:f1:56:51:27:f1:ea:
6e:a0:92:6b:4d:4d:28:e8:50:a6:48:12:6b:52:77:6d:0f:6d:
37:ad:cf:f0:11:37:5f:78:33:27:ca:35:b8:a1:03:87:c4:c5:
f4:ca:92:6d:88:eb:0e:34:51:14:31:4b:6b:b8:5b:c6:31:b2:
0b:23:b6:29:dc:e7:a0:52:91:33:9a:cc:56:67:6b:48:a8:c2:
61:93:39:d0:74:6e:90:d0:88:c6:d6:61:e5:c4:92:64:2f:59:
52:90:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:27:38 2026 by rpki-client