
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa
File: 9ce597f6-b093-3c3d-b115-eebeaf02c756.roa (raw, json)
Hash identifier: E1RkG627t/hEqW3rCM1JUCSYV8Vk2m9cNBB7kGCk+lQ=
Subject key identifier: 31:0A:CC:B6:C5:D9:BF:DA:28:04:02:05:10:F1:B8:89:BE:AA:6F:DC
Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
Certificate serial: 010D0C9F4328584F20F7BD9731E4811FA72163C0
Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa
Signing time: Thu 10 Sep 2026 13:00:12 +0000
ROA not before: Thu 10 Sep 2026 13:00:12 +0000
ROA not after: Wed 09 Dec 2026 14:00:12 +0000
asID: 59
IP address blocks: 192.12.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:20:f7:bd:97:31:e4:81:1f:a7:21:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
Validity
Not Before: Sep 10 13:00:12 2026 GMT
Not After : Dec 9 14:00:12 2026 GMT
Subject: CN=27cd4fe3-dca5-4e49-b6f7-cf20dc102554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:18:4d:41:9b:43:3e:f9:3c:b1:81:f0:e4:66:
f2:32:d2:68:e0:90:37:de:c0:05:47:16:fe:4e:c3:
12:77:8d:a1:b7:e4:46:77:16:84:c4:37:a3:59:60:
61:24:9b:01:2c:a9:69:ed:11:00:0c:5f:5c:1b:a6:
f8:83:7f:fb:21:a5:f2:2b:cc:34:4b:57:3d:f6:00:
08:71:6a:87:2c:b4:5b:84:3d:ce:5c:f9:0b:14:86:
34:67:d0:70:cf:2a:ff:02:ea:fe:77:ae:38:cc:0d:
56:d2:47:dd:c2:8c:54:e7:1e:ef:cb:58:8b:79:57:
08:ce:73:d0:d5:89:a8:f0:f0:7d:38:09:bc:a7:bc:
f6:89:11:e9:ee:d7:7b:9c:de:b9:d1:b9:4a:af:66:
91:e2:5f:50:29:3e:83:cf:3b:c7:04:cf:df:71:c4:
09:b6:6c:3a:7e:24:c2:7d:35:3e:07:35:6f:42:77:
aa:c9:82:62:9f:ba:8a:08:9d:06:d9:7d:d4:cc:a4:
15:cf:b1:5d:38:cd:1b:35:62:7f:1d:49:ec:df:2e:
0b:71:52:be:f4:b8:d6:46:a4:36:ac:f3:2f:e2:c7:
19:d7:6b:4b:14:6a:cc:b2:e3:4f:ac:af:d8:1b:eb:
ca:8e:af:b9:f8:77:33:ed:ed:c2:ec:f0:17:e7:77:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0A:CC:B6:C5:D9:BF:DA:28:04:02:05:10:F1:B8:89:BE:AA:6F:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl
X509v3 Authority Key Identifier:
keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:c9:0c:82:4b:bd:02:ef:18:40:c0:4b:c9:d9:af:64:34:df:
86:56:6f:50:bf:fc:9c:2c:ea:b0:98:54:d8:ab:c8:9a:e3:d6:
e7:21:2a:6d:f9:90:33:40:bd:8b:e9:7e:9d:d6:39:84:11:53:
5e:16:10:ff:e5:7f:34:07:22:37:c6:65:23:63:0b:60:64:31:
0f:39:66:61:6e:79:17:5f:78:5e:b6:41:6a:f7:22:36:65:84:
b6:7c:83:79:e3:c5:04:d7:d3:98:5b:1b:d3:da:12:c4:af:6f:
08:6c:54:3a:34:13:08:13:03:43:81:e5:0a:2a:fe:a2:e9:63:
94:0f:ff:c8:20:0b:f4:22:66:4b:b3:f9:f9:c1:34:c4:a1:a9:
ab:08:12:9d:47:cb:90:a2:9a:d6:84:9b:33:24:ea:c3:0d:00:
be:7e:35:e2:5f:97:1e:94:e6:00:49:52:2f:aa:cb:8b:22:cd:
43:e1:e3:7f:61:fd:f2:01:9f:a0:e8:74:ac:5a:af:61:b5:73:
31:86:6f:05:08:61:a3:85:ab:cf:2d:43:33:2c:44:ea:34:d6:
dd:9f:ce:fa:cb:5a:76:d8:2e:df:f2:d6:ad:3d:c9:50:51:4f:
f7:c1:94:4d:39:9d:da:4c:36:2c:6b:98:32:cb:23:dd:c9:49:
e1:f0:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:30:38 2026 by rpki-client