
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa
File: c9b75257-3222-3571-8c3f-8375e5c50eb2.roa (raw, json)
Hash identifier: dkR+Lpvh0Up3GLJ73xznnbxMs4F+w8idDT6kNZQGCig=
Subject key identifier: D5:FD:0A:B0:8D:18:88:81:EF:A9:C7:6E:38:FB:64:29:99:A3:95:A1
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F4328584D100D018233F8505871EB4880
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa
Signing time: Thu 05 Mar 2026 02:00:32 +0000
ROA not before: Thu 05 Mar 2026 02:00:32 +0000
ROA not after: Wed 03 Jun 2026 01:00:32 +0000
asID: 15164
IP address blocks: 199.200.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:10:0d:01:82:33:f8:50:58:71:eb:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Mar 5 02:00:32 2026 GMT
Not After : Jun 3 01:00:32 2026 GMT
Subject: CN=f9586668-a0d2-4704-bf22-a45352654491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:73:d3:7d:12:11:49:7b:bd:97:b4:2f:8b:
a5:9a:f5:90:73:70:6d:31:a6:25:13:0e:a0:b4:42:
bf:8e:98:17:bf:04:15:1f:3c:e6:56:9b:fa:7f:ce:
b2:77:01:18:65:ce:2d:36:7c:8c:54:a5:80:31:88:
40:9e:45:85:34:80:60:1c:ef:01:27:6b:96:7b:89:
66:c9:9d:c2:6f:f3:61:03:26:ca:7a:8e:16:dd:ca:
92:eb:d9:52:bd:e9:ac:24:7f:16:e0:55:98:d0:f3:
9e:11:0a:d7:df:5b:d7:be:14:31:7a:f0:59:94:7b:
03:a3:8a:70:a8:f2:71:65:6d:05:5e:7d:e5:30:82:
47:fb:58:e7:5a:e3:d1:38:ea:b7:ce:50:e8:f5:7c:
07:ac:f0:98:d3:26:37:ba:47:0b:0c:d8:b9:11:f8:
b6:cd:be:db:0c:79:20:ce:e2:ac:ff:6f:95:6c:f3:
02:24:55:b8:8a:ae:04:8d:42:ee:de:76:f3:04:da:
9b:27:70:e7:f1:b5:27:44:9b:a1:38:34:7a:35:74:
41:10:03:56:26:6e:b8:27:e0:86:fb:ab:f7:89:43:
2b:ff:0c:a7:6d:d7:6a:ca:80:05:15:91:52:5f:29:
7e:dd:92:25:91:d4:36:8f:21:68:f8:dd:4d:d4:00:
44:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FD:0A:B0:8D:18:88:81:EF:A9:C7:6E:38:FB:64:29:99:A3:95:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
199.200.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:a1:1c:81:8c:2e:78:54:bf:69:73:60:1e:39:b6:9d:09:cd:
2e:1e:a7:4a:8e:b8:30:f0:1a:81:3e:fe:25:ae:b3:e1:cd:63:
86:f5:85:c5:1c:61:e8:dd:0d:ff:c8:0d:31:85:f9:e2:33:28:
bf:0f:b5:c5:a5:7b:49:2a:72:bd:36:0f:66:81:01:5d:37:d0:
49:61:a8:60:5a:ff:81:9b:71:c1:a2:f1:86:c9:be:15:ac:1c:
81:c3:3e:24:cf:c2:93:04:96:8f:8f:17:c4:00:5f:7e:44:5e:
92:3e:8c:52:1c:26:e4:1a:b9:0f:d9:82:2d:2c:b7:e4:8f:e5:
03:fb:8c:09:f3:3f:8b:5e:96:35:14:7f:ec:cc:6a:8a:9b:82:
93:b9:07:98:87:9c:3b:04:9f:ef:60:6d:50:6a:61:41:18:b6:
da:26:39:56:d1:f5:51:ed:95:ef:78:ad:01:62:e4:af:d4:70:
05:fe:d0:6d:1b:44:c7:a0:bf:95:c1:04:8b:55:d0:0e:96:d3:
2f:4e:dd:bd:f4:5e:2b:77:4a:28:09:46:b4:c7:a2:36:36:12:
85:0b:c0:ce:f2:cd:0d:31:44:7f:4d:0a:7e:b5:9f:78:74:4f:
10:c0:ae:ff:0b:42:ca:e5:b3:b4:9d:71:12:8b:69:ae:a1:f1:
3f:bd:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:33:27 2026 by rpki-client