
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa
File: baf35b03-5e28-3070-83c6-669f5294e617.roa (raw, json)
Hash identifier: DvHYvBT+rAyEDIN86NE73AANhcHIX7fMxQJFL42QvmQ=
Subject key identifier: B9:B4:7D:DE:19:A2:F9:90:CE:FD:6E:40:D0:4D:F6:84:F7:F4:3D:7E
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584DFBD5D6BFABD161EEBAC75D80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa
Signing time: Thu 28 May 2026 13:00:12 +0000
ROA not before: Thu 28 May 2026 13:00:12 +0000
ROA not after: Wed 26 Aug 2026 13:00:12 +0000
asID: 852
IP address blocks: 99.199.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fb:d5:d6:bf:ab:d1:61:ee:ba:c7:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: May 28 13:00:12 2026 GMT
Not After : Aug 26 13:00:12 2026 GMT
Subject: CN=220caa5b-23db-4f41-b215-bc217601800b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:29:99:43:ec:10:ef:63:49:49:62:7d:74:
70:89:7a:2b:e8:f9:a2:6b:85:3f:6f:c5:7f:8e:c9:
9e:9f:63:b4:7d:cc:5e:50:47:2f:e8:ff:95:99:f1:
4f:2d:ad:2b:91:fb:fd:1d:61:df:70:0a:26:d3:3f:
47:96:5b:37:c2:26:2d:df:49:58:31:bb:42:8a:c7:
b0:5e:c4:b2:69:37:99:6d:2c:b6:34:45:08:75:b1:
c8:03:72:fa:a1:6d:ee:ec:67:b6:88:58:33:33:0e:
7c:1a:11:fa:62:4b:5a:3f:be:77:8e:c8:74:39:2d:
17:de:93:3d:82:15:61:48:79:39:58:21:f0:d0:91:
82:1e:5a:06:d9:23:66:f1:cc:01:2f:7c:b5:74:24:
25:32:08:c0:5c:3d:a4:29:63:f7:c5:98:4a:73:05:
e8:ae:e9:fd:7b:c5:85:39:79:50:0a:b5:d7:f9:47:
06:ba:1a:58:82:52:8f:20:e1:3e:dc:ea:50:af:3e:
f5:f0:c4:69:f3:44:62:33:96:ac:bb:08:59:66:57:
63:32:4d:a0:78:d7:ee:c2:5e:39:95:f5:e3:2c:ed:
20:4f:eb:a7:b0:b9:38:7d:81:42:a8:0b:80:e3:f9:
ea:9b:ad:69:ca:b6:d3:3c:fd:94:95:6d:70:96:5b:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B4:7D:DE:19:A2:F9:90:CE:FD:6E:40:D0:4D:F6:84:F7:F4:3D:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
99.199.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:77:af:5e:97:02:f0:3b:8b:35:47:b0:4b:7e:79:29:e0:87:
8c:f0:fa:10:90:c1:ac:49:07:d3:20:f5:5d:1a:f6:81:28:12:
54:dc:f2:3e:2d:00:c4:9c:7a:76:e1:23:e3:70:cd:14:3c:4c:
d2:96:01:cf:82:a3:d4:de:77:a2:e1:70:92:34:90:31:d6:6f:
93:b9:64:14:e9:c0:1a:84:1d:38:c6:ab:5c:7d:08:00:10:61:
6b:01:b5:03:32:bf:07:0d:d6:9d:99:f0:ad:bb:fb:fc:3f:8a:
a1:cc:1a:e8:b7:f2:6e:2b:0c:6f:2c:2f:d9:ea:72:af:17:e1:
67:4f:38:bc:08:ab:37:1b:6f:7b:de:da:5d:63:50:23:d8:c2:
8d:4c:94:29:62:c5:e0:08:f2:69:43:0a:4d:2c:66:a7:30:6f:
64:2f:94:94:97:1e:1e:8b:78:92:9d:0a:16:ab:5c:cf:12:59:
7e:a7:41:8d:14:4f:d1:91:13:3c:1f:bc:cc:f2:d9:c6:04:f9:
25:fe:2f:57:e6:4d:05:78:16:17:72:09:65:cc:af:85:fb:e8:
f2:52:e9:30:2e:db:82:47:0a:8d:79:b8:c4:dc:5d:c4:d7:a6:
30:c8:f4:9a:03:0b:ae:8e:4e:67:58:34:82:75:4a:36:34:b2:
a0:d5:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:57:11 2026 by rpki-client