
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa
File: b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa (raw, json)
Hash identifier: 0kfRScSgbJS/PkMNpSDPMUCezjUShlDWs/ACAh1ZJsw=
Subject key identifier: E1:91:C7:8D:E4:98:E3:12:72:A9:DB:7A:4D:FE:A4:0B:71:4F:69:32
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F4328584EBB11B8FD409CB6B4DF383C00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 397422
IP address blocks: 192.95.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 01 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:b8:fd:40:9c:b6:b4:df:38:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=86f62412-39f2-4e4a-a33e-cf4dbe95ed53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:46:a9:d9:f6:7e:58:5d:5a:39:84:39:1a:
25:48:ab:b4:01:7a:20:2d:36:56:58:30:51:5c:6b:
ae:62:70:3e:7d:ac:cc:3f:1b:e2:92:d4:8b:1f:cb:
e8:cf:93:39:c2:d0:45:59:4f:82:aa:19:80:ec:37:
bb:d5:6a:ee:f1:2e:43:eb:bf:cc:dd:53:53:e2:a3:
52:68:0a:5c:bf:18:58:d7:67:3b:f4:77:e7:e3:e3:
c5:17:3c:0d:af:cf:89:b7:be:55:34:4d:c6:5f:2e:
51:9e:44:8f:01:7b:32:d2:21:a5:24:ca:f8:54:94:
a9:ce:d1:eb:f6:3d:ff:27:d4:62:cd:ca:4e:fc:d1:
74:20:c0:13:0b:c7:57:3d:c3:77:a0:07:36:82:00:
ea:2d:2e:c9:26:ba:7b:7f:db:52:de:53:62:a9:dd:
43:10:dc:58:ca:19:44:09:20:76:b7:e1:4e:e6:79:
6d:0d:20:31:fb:fa:e7:9a:a9:ae:9a:4c:f5:62:96:
bc:43:7a:d3:f4:88:3a:87:4a:e9:bc:61:9d:b0:68:
5c:5f:95:33:a9:68:c3:54:a4:69:dc:8e:23:87:1d:
25:e0:cc:6d:f4:98:a7:f6:05:0c:1f:cc:90:b7:4b:
42:53:e2:9e:bc:30:b0:fd:31:bd:ce:37:c8:06:14:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:91:C7:8D:E4:98:E3:12:72:A9:DB:7A:4D:FE:A4:0B:71:4F:69:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
192.95.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:0f:9e:b5:72:05:6b:b1:52:73:9a:f5:ce:c4:24:40:95:d2:
2d:9d:f2:f8:66:20:a7:da:01:ee:42:f2:16:97:2b:55:91:6b:
4d:b9:a5:27:28:85:ea:48:f7:a9:2c:f7:0d:19:94:48:2f:04:
99:48:cf:0b:3a:f3:44:4b:74:fd:8c:40:77:1b:8d:02:f6:66:
db:57:ab:6a:f2:a4:75:8b:a6:0e:a1:59:9f:9c:70:ef:50:9d:
7a:67:8b:e9:80:bf:42:6d:47:37:7e:1f:53:28:ec:ee:d3:19:
4e:5e:f4:76:b2:23:01:07:0e:11:09:36:fb:af:9a:ae:c9:29:
38:c0:b1:21:a6:67:22:ff:31:e5:f1:2e:a6:e8:8d:0b:08:35:
7e:29:fb:9e:57:3d:2d:ef:06:79:93:7e:46:79:0b:35:87:93:
c6:86:52:0e:02:ce:85:bf:f9:b6:f3:13:37:23:eb:6a:58:60:
9c:61:2f:c8:b6:e0:bf:66:d7:1e:3d:08:a7:e6:33:77:0f:43:
6e:5a:f4:85:a8:7c:09:85:e4:ba:c3:fd:f8:21:4e:b4:09:47:
95:0a:9c:5a:ad:b8:85:5d:90:52:12:5f:4a:7b:c6:4b:54:e7:
5b:5a:75:6a:90:15:78:09:ad:f3:4e:9a:ea:61:44:25:c2:c7:
13:84:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:23:00 2026 by rpki-client