
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa
File: 1aea4482-4596-3858-b921-9cdd4d27ea47.roa (raw, json)
Hash identifier: qMxBwvTJXZw8tTV2B987K3iO2hCm2CE20q30kvvF7YQ=
Subject key identifier: E5:7D:CC:31:80:31:63:16:5E:34:3B:23:18:72:15:75:A2:7E:61:80
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F4328584D100D057905C52F8E2487A400
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa
Signing time: Thu 05 Mar 2026 02:00:32 +0000
ROA not before: Thu 05 Mar 2026 02:00:32 +0000
ROA not after: Wed 03 Jun 2026 01:00:32 +0000
asID: 15164
IP address blocks: 199.200.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:10:0d:05:79:05:c5:2f:8e:24:87:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Mar 5 02:00:32 2026 GMT
Not After : Jun 3 01:00:32 2026 GMT
Subject: CN=4afe1257-16a8-402b-9ab7-0406a283b727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:5b:7b:98:35:9f:46:be:f4:0e:b9:d2:03:
43:97:b9:82:d4:ed:83:38:d0:43:6c:82:d5:13:38:
b5:2b:33:88:eb:48:08:2c:38:2d:2d:49:26:cc:d8:
0d:9a:a0:52:cc:af:fc:97:d2:b7:49:95:41:fb:76:
c0:bf:ee:a9:b2:31:4e:85:f0:b5:27:9f:3b:0e:6a:
72:77:f5:26:3a:dc:f3:d1:f3:63:78:12:bb:0a:e4:
17:57:ac:43:1d:2b:0a:90:61:91:44:13:a7:3f:af:
e8:1d:a3:e9:6f:58:54:75:5d:58:2b:b2:2c:47:e4:
1c:95:8e:93:7e:f6:be:18:0d:f7:23:8f:e8:fb:7e:
8b:f4:51:b0:ee:c3:0b:82:a7:b8:7d:fe:65:47:cd:
22:30:df:17:e5:79:42:09:99:d5:bc:b4:11:c6:fc:
3d:5f:56:05:44:3e:45:3c:00:f6:d7:2c:e0:6a:10:
5d:b0:b1:d6:a7:9e:fd:dc:47:ec:38:d4:84:03:2b:
87:1d:88:b0:67:ad:fe:81:b7:e6:42:e7:48:16:f3:
14:e0:68:9c:c5:fe:f9:67:86:7d:f2:9e:be:dc:69:
48:bd:e0:0c:50:6c:b4:7d:b6:13:16:cb:f8:3f:f8:
db:8c:13:97:8a:e1:74:c8:cb:99:a6:94:95:91:e3:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7D:CC:31:80:31:63:16:5E:34:3B:23:18:72:15:75:A2:7E:61:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
199.200.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:a8:98:27:a1:1c:25:84:a7:aa:db:da:7a:37:e9:d4:ec:0c:
57:36:33:83:d3:c9:4c:cf:eb:cd:32:4b:fc:3f:89:3c:ad:2b:
22:e3:9b:38:cb:f8:1f:9d:d8:06:f4:28:98:dc:cd:d2:da:55:
2b:84:9a:76:c7:5a:a6:dc:2f:bb:b6:89:42:6b:0b:51:68:47:
a7:73:1b:3a:4b:ef:6c:32:49:50:3c:54:78:13:3b:37:a2:1e:
a5:89:ce:d0:61:63:26:b6:bd:f9:26:19:09:d2:bd:43:71:00:
cc:76:1d:fc:6b:4c:b6:1e:91:76:14:f8:b3:1e:62:a9:8f:af:
30:e0:83:14:af:2b:b6:9e:8f:f2:7a:c6:0b:be:62:72:cc:82:
14:e4:36:59:d2:cf:27:0f:76:e6:f6:c7:07:2d:1d:00:2b:93:
b3:c0:15:89:c9:84:da:0c:76:6f:c4:74:37:d5:e4:e1:54:68:
31:91:18:67:6a:48:7c:0a:f3:10:81:81:52:11:b7:35:be:09:
54:7b:77:34:a1:22:e0:69:21:57:35:a3:ec:4e:ef:ef:60:ff:
66:c0:4e:51:ea:97:6a:83:2d:6c:66:fb:df:9b:61:5b:9c:3f:
31:38:05:b1:29:97:00:75:d7:c2:8d:5e:2b:f3:62:b4:fe:6c:
6e:b2:a4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:33:28 2026 by rpki-client