
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bad93590-57d3-32f3-bd80-03113a54a6eb.roa
File: bad93590-57d3-32f3-bd80-03113a54a6eb.roa (raw, json)
Hash identifier: lNpBBJNGQ2qkqMF5s5Cmgp7D02SuPqNHWq0ouCB/MJA=
Subject key identifier: B9:8F:7F:9C:A6:91:02:3A:EC:D9:BB:28:5F:E3:CC:D2:10:F6:55:BB
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584DF4DB77F432F660742D756180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bad93590-57d3-32f3-bd80-03113a54a6eb.roa
Signing time: Tue 26 May 2026 01:00:24 +0000
ROA not before: Tue 26 May 2026 01:00:24 +0000
ROA not after: Mon 24 Aug 2026 01:00:24 +0000
asID: 54113
IP address blocks: 157.5.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:db:77:f4:32:f6:60:74:2d:75:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: May 26 01:00:24 2026 GMT
Not After : Aug 24 01:00:24 2026 GMT
Subject: CN=09f85a91-da9d-479b-ae70-a8fdd8497c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:d7:ce:0b:a8:16:a2:0c:70:25:3a:0b:b4:
0b:b5:1a:9f:c9:1e:17:29:50:f0:29:e9:22:bd:02:
5f:e9:d6:99:14:35:42:cf:b7:59:6f:c1:4a:06:74:
cb:77:8b:ab:24:1f:2f:4d:a6:d1:91:4e:b0:cd:af:
8f:92:5b:85:b2:18:90:67:b4:76:fc:54:87:dd:e2:
45:2d:83:22:ea:dc:90:4f:40:c2:ad:53:df:60:bf:
e1:de:d0:fb:f4:c0:18:62:f2:d4:86:6b:9c:87:ef:
3d:b0:38:bb:f9:f0:f8:cb:14:35:4c:28:5d:e2:de:
e1:2d:95:35:ca:56:18:f9:1c:48:6e:07:24:84:4b:
d6:5c:d3:49:f7:71:fd:0f:31:4e:e4:3a:57:b3:46:
fa:3b:fd:09:77:8c:83:7e:12:f2:51:52:ed:c4:51:
29:04:6f:2e:86:21:c3:d4:ef:d1:20:9c:eb:a2:3b:
98:1a:44:d6:5c:9e:21:cc:8e:84:43:fd:53:d1:8b:
ec:59:81:a1:e5:d1:ef:35:73:66:e5:74:21:19:f5:
65:f7:ff:a1:73:b5:ed:e7:29:57:0a:77:b0:19:de:
d0:3c:c4:68:a3:11:9c:1d:91:23:dd:dc:00:17:42:
f7:19:30:76:1f:3f:69:cc:ea:1e:98:df:fe:d1:3a:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8F:7F:9C:A6:91:02:3A:EC:D9:BB:28:5F:E3:CC:D2:10:F6:55:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bad93590-57d3-32f3-bd80-03113a54a6eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
157.5.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:d7:cf:ac:2f:12:4c:73:6b:1e:22:f7:5b:95:33:16:28:88:
1b:08:1c:82:46:4e:b0:5f:17:95:92:f4:1d:86:bd:f5:da:bd:
a6:94:be:2a:e8:ab:2e:36:3a:35:cc:fc:ae:41:2d:46:a6:9c:
92:be:0e:5f:3a:e9:ce:14:22:e4:19:8f:ee:95:0c:70:c9:16:
8b:39:35:48:6e:33:c1:5b:47:83:b2:79:d5:f8:40:89:aa:76:
8b:47:9f:c6:60:3a:0c:c5:d8:18:24:ab:99:18:f5:35:01:cd:
51:7e:1b:02:79:e3:21:64:f5:76:7b:2b:14:e0:81:21:0e:59:
b6:67:43:09:15:4b:4a:ce:aa:66:2d:45:e1:d4:7d:c4:42:67:
1d:c1:bb:4b:df:a6:b6:c7:36:0c:57:ae:ee:ea:b7:7e:3c:b7:
ea:91:d1:e7:26:9f:d9:3e:3a:24:89:42:42:10:fe:f6:68:c5:
45:90:38:3c:65:4e:45:8b:d4:c0:c8:e4:58:f4:cf:04:d9:05:
bd:21:3f:b2:67:ef:d5:d0:56:b1:15:06:24:a1:be:2c:d9:03:
be:77:e7:63:6f:19:76:b7:13:05:bd:ee:1e:39:11:31:e6:1e:
e0:1b:d2:f9:89:d1:65:ea:a3:5e:17:fd:fb:35:b9:d7:ac:6d:
e8:f8:3c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:58:44 2026 by rpki-client