
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/88190764-9983-3779-9082-f64dccc70d7a.roa
File: 88190764-9983-3779-9082-f64dccc70d7a.roa (raw, json)
Hash identifier: 72fP16vuOJm26En9BigT988Vtx3ZcI6/2xGE139kPEw=
Subject key identifier: 99:5B:5C:57:B7:50:97:95:8D:35:1C:9C:2A:42:68:D0:2A:60:E0:9E
Certificate issuer: /CN=6201e8e9-68e9-43e6-bed0-be51611bbda8
Certificate serial: 010D0C9F4328584EF87CB3071CBD9EF28795D230
Authority key identifier: 02:26:3E:29:63:4F:E3:A5:E8:6C:C3:C4:0F:89:3E:ED:9E:AA:49:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/88190764-9983-3779-9082-f64dccc70d7a.roa
Signing time: Thu 27 Aug 2026 01:00:12 +0000
ROA not before: Thu 27 Aug 2026 01:00:12 +0000
ROA not after: Wed 25 Nov 2026 02:00:12 +0000
asID: 399541
IP address blocks: 198.45.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/6201e8e9-68e9-43e6-bed0-be51611bbda8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/6201e8e9-68e9-43e6-bed0-be51611bbda8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f8:7c:b3:07:1c:bd:9e:f2:87:95:d2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6201e8e9-68e9-43e6-bed0-be51611bbda8
Validity
Not Before: Aug 27 01:00:12 2026 GMT
Not After : Nov 25 02:00:12 2026 GMT
Subject: CN=ea74f800-1088-4b05-b81d-11d60a23d2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:d2:af:54:ba:4b:40:59:96:a2:bc:39:e8:
04:ca:49:38:c5:b8:6d:f2:1c:35:67:b6:3a:e1:96:
25:1f:16:79:55:01:29:15:25:16:be:03:7c:b5:48:
e5:89:26:8f:22:6a:17:a2:6d:e1:b3:19:36:0c:7b:
d7:f2:89:cd:c7:74:78:48:db:88:84:65:6f:5d:b4:
84:46:81:8c:c4:0f:91:5f:c7:2c:b8:15:55:4f:10:
c1:65:e9:17:2a:66:8f:f0:07:8d:ea:06:3f:f6:ce:
bc:62:2b:25:26:23:7a:27:cc:74:f1:f0:b9:65:e3:
61:5d:4e:1f:cb:fb:f6:bf:be:24:c7:8c:00:2a:d6:
a9:91:a2:3d:b4:47:b5:8f:99:ee:62:10:fe:b1:db:
8b:72:0f:30:25:62:82:cf:2e:c1:35:49:b6:28:64:
a7:14:1f:41:e1:05:5b:68:a2:bf:19:5f:44:d3:b1:
93:54:a4:c2:83:e3:a9:09:96:fb:75:d1:ec:63:68:
ff:cf:83:7c:b8:2a:55:a2:e1:2b:bd:15:6d:39:23:
49:df:00:ea:d3:4e:8a:b3:54:95:8b:5d:1c:9d:ac:
42:a2:ab:4b:c6:e5:25:d5:34:6a:ce:cb:0f:42:2f:
47:63:38:25:04:d7:97:d4:76:7c:10:c7:23:52:03:
11:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5B:5C:57:B7:50:97:95:8D:35:1C:9C:2A:42:68:D0:2A:60:E0:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/88190764-9983-3779-9082-f64dccc70d7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/6201e8e9-68e9-43e6-bed0-be51611bbda8.crl
X509v3 Authority Key Identifier:
keyid:02:26:3E:29:63:4F:E3:A5:E8:6C:C3:C4:0F:89:3E:ED:9E:AA:49:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:67:f7:f3:c3:56:e3:6c:88:b2:79:f1:da:a9:32:d2:b6:60:
f5:54:1a:28:bf:e4:9f:de:e8:17:04:f1:ff:17:0b:1c:fc:b4:
32:f0:6d:ec:ae:96:c0:9c:b5:c2:8e:f4:7b:45:be:72:3a:29:
d3:c2:61:fd:e7:61:89:04:53:e4:e5:64:34:ff:a5:13:b3:16:
ac:2d:53:9d:86:49:84:ef:81:c0:d8:c6:72:85:fd:17:3f:16:
7b:b7:fe:fe:3e:f9:d2:cd:c3:16:40:6a:d5:e0:f6:b8:2e:cc:
8c:85:24:f5:12:50:87:02:f9:83:6f:8f:65:71:b9:ec:ee:18:
9b:a4:9f:bb:8c:48:6e:75:1b:fd:6a:c9:60:aa:1c:47:98:fe:
a8:2b:e2:39:b0:d1:d9:fb:9a:78:7b:0a:f4:9f:99:79:76:63:
36:cd:c2:87:65:fb:86:74:3a:8f:22:ef:38:44:2a:8f:d1:6d:
1d:27:bb:52:ad:bb:53:0e:d1:0a:bd:9e:f7:e0:33:b5:c8:1d:
72:d5:6b:0e:bb:b2:1e:6f:c1:72:43:35:73:67:09:8b:ff:c3:
8c:26:42:c3:53:b1:f8:04:44:8e:7f:cf:a8:04:57:d2:dc:f4:
ce:6c:2a:51:a0:77:f0:be:9f:59:9c:d6:18:8f:57:56:cb:a0:
3f:cd:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:51:06 2026 by rpki-client