
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/90dd3b44-fbc5-37b1-8f89-2e5136eb6db0.roa
File: 90dd3b44-fbc5-37b1-8f89-2e5136eb6db0.roa (raw, json)
Hash identifier: Y/woNNda+lIuCqo6+slaVQ/4pn3VLOxd0QsNSHxZZy8=
Subject key identifier: 9C:CA:57:EB:C6:9A:DB:06:D5:9C:0B:CE:09:5D:FB:64:F2:C1:B4:4C
Certificate issuer: /CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Certificate serial: 010D0C9F4328584F4F080182D6A6F1B3EA411C00
Authority key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/90dd3b44-fbc5-37b1-8f89-2e5136eb6db0.roa
Signing time: Sun 27 Sep 2026 01:00:12 +0000
ROA not before: Sun 27 Sep 2026 01:00:12 +0000
ROA not after: Sat 26 Dec 2026 02:00:12 +0000
asID: 5650
IP address blocks: 204.235.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Oct 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4f:08:01:82:d6:a6:f1:b3:ea:41:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Validity
Not Before: Sep 27 01:00:12 2026 GMT
Not After : Dec 26 02:00:12 2026 GMT
Subject: CN=939aa8e2-8252-4584-88bc-9f42c9f64d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f5:31:fa:bd:c8:14:d7:3b:99:41:04:19:5d:
1c:47:64:cb:d5:8a:7f:c8:75:6b:37:82:c1:cd:ee:
c8:d4:88:2f:3f:08:5e:bf:7f:b8:25:69:bf:58:b7:
fe:f8:04:fc:5f:88:25:8b:2b:bf:ad:25:be:bf:70:
08:fd:7c:5c:34:7d:eb:b9:02:00:de:68:32:11:00:
30:49:4c:94:48:12:9b:c5:32:5c:c8:5b:db:00:9e:
70:6c:2c:e3:79:8f:a4:a8:d0:77:2e:b8:76:d3:ab:
50:76:e2:c6:d6:20:98:3a:f3:6a:91:fd:85:d9:fa:
f9:c8:e0:79:45:e3:66:e1:ad:1c:a1:bc:58:90:bf:
c6:83:88:d4:09:fe:2e:91:b1:dd:2a:30:ea:ce:09:
68:5e:3b:3b:e8:11:ad:5d:63:a8:95:83:bb:9e:e1:
11:ba:17:b6:9b:58:d8:d4:f9:e9:7d:4f:77:a1:75:
ac:23:41:7d:8a:9d:15:b5:4f:77:7b:fd:74:82:b9:
8e:c7:ea:8b:30:25:e8:f1:10:9f:cd:f2:c4:b5:40:
70:b8:24:5a:97:16:1e:35:9d:e6:e7:8b:05:62:65:
a7:21:70:26:da:c6:05:23:bb:78:c0:61:e5:31:99:
a7:88:2b:58:d0:5c:a5:74:9a:b4:d5:53:ff:3b:36:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CA:57:EB:C6:9A:DB:06:D5:9C:0B:CE:09:5D:FB:64:F2:C1:B4:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/90dd3b44-fbc5-37b1-8f89-2e5136eb6db0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl
X509v3 Authority Key Identifier:
keyid:68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
eb:10:51:14:08:ba:6b:07:41:4c:9e:f0:ed:82:bd:87:1b:c6:
63:b9:33:62:c8:eb:c8:e7:82:a6:87:3a:5e:71:2a:51:c9:12:
65:4b:73:6e:00:70:d4:8d:85:4c:4c:03:8b:55:4a:cf:a7:9a:
20:81:8f:ef:8b:b4:19:fc:84:54:b7:21:58:55:40:f9:bd:40:
40:01:da:93:b9:b2:b7:46:9f:fd:e2:d2:03:d7:14:35:59:2f:
c9:4a:f3:48:59:36:59:03:bf:5f:e0:6c:3e:b8:43:e8:2c:07:
d8:a3:8b:b9:19:36:2d:b0:a6:32:68:e3:b6:b8:7f:ce:ad:1f:
5c:dd:5e:5f:2f:4f:5e:5b:8f:80:39:a8:65:05:99:2c:bb:9c:
68:03:48:e8:32:e7:4e:7a:77:86:78:6a:9b:c5:e7:9a:76:9b:
d2:17:38:80:0d:c5:5e:6f:f5:be:8d:ed:fc:0b:5d:8d:40:4e:
21:f8:8d:1b:4f:06:ac:42:e6:9d:15:33:5d:9c:2c:16:1c:93:
ad:cf:d9:b6:a0:31:a3:88:88:72:c6:1c:a1:6e:fa:90:a7:1f:
24:6d:50:6d:80:8d:87:38:b7:92:bf:42:e8:04:b0:91:e7:09:
6b:ca:ce:f0:67:b2:4f:51:da:7a:b7:ef:0b:97:46:df:94:95:
d7:08:14:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:49:56 2026 by rpki-client