
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1b9efe8e-dc87-3d23-bff1-a82e6048650e.roa
File: 1b9efe8e-dc87-3d23-bff1-a82e6048650e.roa (raw, json)
Hash identifier: BN37+5a+zeKcQdt8PmfX/5bAmiAP3ODvimvxqoV4WFA=
Subject key identifier: 82:04:99:95:7F:58:E5:F0:2B:E3:FD:4A:1C:E8:A1:23:03:48:C8:19
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F4328584D7A0526C4C5D496E752EB9700
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1b9efe8e-dc87-3d23-bff1-a82e6048650e.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 401838
IP address blocks: 65.87.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:26:c4:c5:d4:96:e7:52:eb:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=cf755084-2adb-4a19-801c-319a57f3b1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:c5:02:17:c1:98:60:ff:53:38:a3:09:5e:
9a:10:ff:2d:b2:d7:4d:e1:83:f9:96:30:8b:0c:5a:
fa:9c:97:1e:5d:fa:d1:2f:02:1d:d4:f8:06:35:b5:
22:08:05:0d:63:b9:05:a5:24:9c:14:3c:c0:7f:b8:
b7:2f:e7:8a:bb:2b:54:90:9e:29:32:ba:d9:02:f2:
fa:61:23:30:c7:46:9d:51:ba:bb:01:65:96:a4:8c:
53:58:8d:05:3e:96:21:c1:2d:2c:2a:d1:2a:e8:04:
38:82:ed:13:6b:3e:1a:85:0b:81:51:d8:cf:3a:26:
0d:a9:09:89:ac:9c:3e:48:ea:d4:16:20:bd:6e:26:
4d:39:53:f2:14:89:d4:0b:90:87:0e:c9:8e:a6:19:
4e:54:a8:8f:c8:a6:a8:38:ba:63:ef:d1:09:36:3b:
99:09:dc:37:d3:3a:f3:10:b7:7b:43:ee:13:25:a8:
e0:93:34:61:10:34:f3:b2:ba:19:ba:f1:63:40:ee:
24:e5:e2:93:14:82:5c:98:fb:f0:77:4a:ac:50:95:
15:0e:f7:d7:51:47:a0:63:39:bd:73:fe:90:97:e5:
4e:96:c8:85:da:e3:65:ef:33:6c:aa:c3:38:89:58:
73:8d:76:ab:0b:a6:ec:5f:2c:d6:d2:40:94:67:46:
52:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:04:99:95:7F:58:E5:F0:2B:E3:FD:4A:1C:E8:A1:23:03:48:C8:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1b9efe8e-dc87-3d23-bff1-a82e6048650e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:6c:7c:bb:81:26:81:d3:73:fa:db:90:20:e1:25:19:72:2d:
8e:ce:a4:c0:64:73:81:95:76:90:42:06:31:ca:b3:89:e0:ec:
e3:42:90:2c:d9:5d:5e:1a:a7:e6:c5:85:dc:97:45:fb:fd:5f:
bc:ce:30:9b:68:c9:f8:12:0f:e9:e9:c4:f8:e0:ca:5d:54:45:
ba:4b:e0:08:de:11:03:b9:ee:64:6a:c6:2f:fa:53:48:a2:40:
64:d6:be:32:ff:c4:8b:0e:bb:17:ef:f3:2f:72:70:d2:58:a3:
71:e1:c8:9c:64:a3:26:b5:6d:ac:e0:e2:03:ae:5d:2b:4d:9b:
fb:e6:ea:72:c8:2d:57:04:6d:36:a0:62:39:22:74:1b:15:e1:
90:ea:41:01:47:8d:c9:ac:1a:ba:24:4a:4f:0b:e1:cd:6b:81:
5c:10:82:ce:5f:e3:14:a4:ef:31:44:16:13:67:7d:28:70:e4:
1c:e6:13:09:0b:ba:d7:e2:b0:92:72:9c:36:fc:dc:05:65:b0:
24:52:44:ca:29:8a:ff:d2:34:62:e0:3c:47:41:f8:f0:d6:05:
28:bb:e0:34:ee:44:72:82:f7:ad:bc:90:25:8b:e9:48:94:0a:
ff:c4:1b:45:2f:ed:49:7d:87:c6:1f:49:96:f9:d4:14:17:33:
bb:6e:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:29:52 2026 by rpki-client