
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa
File: dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa (raw, json)
Hash identifier: BqNPjCNmv0py2r0r+VhCovqyQyY2ViHBXVVlKJLWFTo=
Subject key identifier: E3:64:E9:8D:3A:F1:60:86:24:C2:76:CA:D5:B7:8D:62:87:B2:61:C3
Certificate issuer: /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial: 010D0C9F4328584FA85DF9B09A3741425D3C2040
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa
Signing time: Thu 29 Oct 2026 01:00:12 +0000
ROA not before: Thu 29 Oct 2026 01:00:12 +0000
ROA not after: Wed 27 Jan 2027 02:00:12 +0000
asID: 17055
IP address blocks: 204.99.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:a8:5d:f9:b0:9a:37:41:42:5d:3c:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
Validity
Not Before: Oct 29 01:00:12 2026 GMT
Not After : Jan 27 02:00:12 2027 GMT
Subject: CN=01ca7409-2da7-4a3a-82b9-cfbe244531a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:ca:c9:db:83:ae:b6:5b:1a:48:74:7d:39:
d8:f4:35:14:a6:c0:72:92:3d:ed:d0:40:03:ee:e8:
6a:1b:ea:3e:fa:36:df:14:2e:d2:a6:3f:bf:60:73:
ae:99:59:11:42:b3:f0:6a:01:af:0d:e9:14:36:e2:
f4:b5:8e:ac:88:7e:3f:95:36:2c:48:0a:41:29:d5:
29:92:64:93:81:4c:af:c6:90:b5:27:48:56:71:14:
6f:df:9f:fc:ee:65:f9:53:d4:b3:33:c7:fb:67:35:
67:93:6c:30:49:8b:0b:b4:57:f3:01:ae:4d:49:16:
56:11:27:1a:5c:c9:14:ed:64:33:d4:fe:13:e8:41:
1b:18:5c:a7:b1:40:50:3d:3d:da:78:47:89:9f:c9:
eb:12:33:90:e9:43:b2:f3:8c:d9:90:e1:e0:80:8a:
b9:63:83:78:a6:e2:0a:e8:80:05:c3:41:c3:eb:36:
a7:f6:4c:05:ef:85:9e:5b:14:fc:93:6d:39:8e:b4:
7a:e7:61:9c:a0:af:7b:af:af:d0:26:27:5a:ae:8b:
6d:f8:6e:c6:1a:88:bc:10:48:ab:b9:2e:e0:07:d0:
8f:71:b9:d0:04:57:06:75:7b:ec:a8:f4:73:6f:30:
5f:76:38:48:e1:12:00:78:50:25:0d:31:d7:a3:5b:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:64:E9:8D:3A:F1:60:86:24:C2:76:CA:D5:B7:8D:62:87:B2:61:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
X509v3 Authority Key Identifier:
keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.99.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:3a:f3:e5:2d:f9:82:14:31:75:99:27:fd:c4:99:b4:07:09:
93:f4:3b:a3:f6:01:cf:e0:b0:f1:df:6a:6f:02:45:92:65:8c:
eb:75:86:32:c4:39:6f:7c:12:e8:2e:11:2c:27:69:2a:24:0c:
25:4a:13:e3:dd:ea:f8:61:d0:d7:57:e0:fb:80:a5:a3:1e:22:
08:30:e8:a9:be:27:c6:37:e6:8b:d2:02:33:17:84:37:10:2b:
ff:ad:f1:2d:0a:51:9e:c3:39:05:9b:57:91:30:cd:d3:95:75:
35:21:74:82:1b:9b:d0:54:bb:0b:1e:a6:05:57:91:9b:85:aa:
89:9a:16:eb:2b:11:fa:69:0a:69:2f:35:59:e6:73:c9:51:4e:
7c:b1:84:46:55:4c:89:ab:a5:f3:80:6f:2e:36:19:be:55:70:
33:33:22:87:ef:9a:b3:7f:45:f4:b6:76:3d:42:bf:1e:bc:09:
3f:a5:60:89:47:58:5f:c1:b5:59:f3:01:74:e3:62:bd:63:d1:
f6:59:66:6a:25:b9:50:19:12:8d:83:2a:a9:5b:01:c3:5d:03:
ca:b0:8d:2e:01:46:c2:af:44:e0:0f:22:55:ce:26:bd:94:40:
d1:20:32:ed:7e:bc:0e:99:7a:0c:81:f9:f6:ca:4a:e2:5e:c7:
59:7e:a8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 19:43:16 2026 by rpki-client