
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9fb212d9-144c-3326-969c-a041694624f2.roa
File: 9fb212d9-144c-3326-969c-a041694624f2.roa (raw, json)
Hash identifier: TW09QBtu1mc3O8swMZeo+b9FjIWjFJX76YUolHtgD80=
Subject key identifier: 8E:59:57:43:0C:AA:B2:A9:90:31:47:A3:36:E9:8A:27:28:0D:87:F5
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584D15A2635B41DD464A685E5080
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9fb212d9-144c-3326-969c-a041694624f2.roa
Signing time: Sat 07 Mar 2026 02:00:32 +0000
ROA not before: Sat 07 Mar 2026 02:00:32 +0000
ROA not after: Fri 05 Jun 2026 01:00:32 +0000
asID: 11090
IP address blocks: 198.135.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:15:a2:63:5b:41:dd:46:4a:68:5e:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Mar 7 02:00:32 2026 GMT
Not After : Jun 5 01:00:32 2026 GMT
Subject: CN=a19457a4-4cf7-45f3-8252-b2e2a79822d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:24:57:51:ac:2c:49:f7:0e:70:eb:11:c8:
9b:e5:67:f6:66:b1:c1:01:50:08:29:8c:70:fd:8d:
45:62:01:a2:ed:fd:27:af:97:85:1a:8c:81:7d:13:
c5:93:fc:51:30:63:8f:9c:cf:2f:e7:c6:11:7a:20:
0a:76:8c:59:f5:51:3c:66:b3:75:04:55:f2:9a:04:
d0:cb:09:e9:c8:d2:8d:23:f7:e2:f9:17:30:02:7a:
a1:9f:de:1e:c5:7c:a5:51:c9:3f:6a:f8:bb:b5:67:
69:a6:75:99:8f:4b:02:76:f7:eb:88:a7:6e:d9:7f:
64:c6:7c:13:90:d0:2a:dc:01:ce:06:b7:7f:51:99:
13:91:b1:dd:cb:e1:70:27:58:4c:1e:34:3d:c2:86:
dc:45:53:43:43:4d:9a:f8:50:b3:de:4a:48:d6:11:
42:5a:d3:37:1b:73:a5:2d:18:d4:82:aa:5d:93:11:
7b:8c:72:44:66:75:4e:45:25:60:ff:05:82:13:17:
45:f6:52:82:01:18:23:d6:70:eb:f0:31:bb:99:09:
2c:c4:92:cd:3c:1e:67:cd:60:73:41:7a:e4:9b:30:
52:44:99:27:b5:48:69:1c:a6:55:28:c4:c7:73:62:
2c:52:f6:c4:f6:3a:c4:42:c3:78:03:b8:9f:84:80:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:59:57:43:0C:AA:B2:A9:90:31:47:A3:36:E9:8A:27:28:0D:87:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9fb212d9-144c-3326-969c-a041694624f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
198.135.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:97:0b:66:7a:e8:5f:ff:9b:52:4e:fc:f5:39:9a:e0:91:04:
d4:ea:83:86:3c:77:7c:69:93:2b:12:d4:2a:06:b8:d4:83:a6:
0b:08:b6:6d:41:54:a4:20:aa:84:66:9b:e7:21:bd:e2:92:6c:
6e:c9:f4:d0:4d:f9:c3:b4:d0:43:6f:4d:c4:51:6c:24:2d:60:
f7:81:d6:e0:ae:4f:48:40:72:83:1f:e8:46:91:9e:b2:51:9b:
4b:2e:e8:7f:06:c3:4b:e3:06:df:1f:f8:bf:b3:d6:20:37:46:
ee:74:ae:c1:2a:fe:4a:85:68:fa:c2:90:c5:d5:71:f9:68:ef:
de:a1:6f:7d:1d:77:92:2c:15:ba:27:52:83:7e:cf:b4:95:4e:
63:97:9c:24:d7:d0:63:aa:2f:29:c7:9a:dd:cb:03:ba:88:4d:
aa:bc:11:99:45:21:6e:03:4e:3d:07:b7:eb:c8:67:4a:b7:f1:
0f:fa:06:fd:45:d0:72:b3:07:3d:e1:79:16:01:b6:b9:8c:5e:
51:66:48:f4:13:9f:f8:c4:49:49:93:cf:af:99:e2:0e:5e:8f:
21:6e:6e:ec:98:2c:1e:d3:3a:54:1a:4c:49:28:6e:f0:bb:82:
72:9e:4a:0e:98:b0:25:f8:33:68:18:0c:e1:f6:26:8d:f5:67:
91:33:41:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:54:44 2026 by rpki-client