
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa
File: 20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa (raw, json)
Hash identifier: Qeiz+xVq7ohzw2As5yL709w8r0nw6TrtLUCob+Y45J0=
Subject key identifier: 7C:7C:0D:45:F4:D1:E5:65:85:DF:80:79:EF:68:80:11:B5:48:6E:C5
Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial: 010D0C9F4328584F8F3DF2C14F4A6808444F2400
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa
Signing time: Tue 20 Oct 2026 01:00:12 +0000
ROA not before: Tue 20 Oct 2026 01:00:12 +0000
ROA not after: Mon 18 Jan 2027 02:00:12 +0000
asID: 20454
IP address blocks: 96.47.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:8f:3d:f2:c1:4f:4a:68:08:44:4f:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Validity
Not Before: Oct 20 01:00:12 2026 GMT
Not After : Jan 18 02:00:12 2027 GMT
Subject: CN=b80ccd36-e50e-4413-a587-6bad1ce0a9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:86:b8:a9:26:3b:23:2b:b8:9a:eb:9c:2b:
4a:75:53:81:4e:72:54:dd:73:a3:94:6b:d5:a6:a5:
13:de:00:00:42:57:b1:94:a8:f1:63:12:52:09:7b:
46:4d:67:be:58:55:22:99:f2:84:4c:dc:e1:7b:4b:
44:c0:f9:33:32:b1:a3:b8:6f:31:09:9b:0d:6c:a6:
18:73:09:06:21:05:0e:57:50:dd:ce:53:0c:6e:97:
51:26:04:07:31:bf:63:9d:dc:fb:41:cd:56:ae:8c:
0c:f6:48:60:76:10:b4:7a:43:f2:b3:66:ba:ec:68:
19:7b:57:98:87:97:97:21:38:f7:84:73:ef:5e:63:
d2:76:6f:fa:ec:7b:49:c9:6e:2e:65:03:30:72:85:
75:05:ee:f2:a3:07:6f:92:50:bb:7f:6f:8f:a5:88:
0a:c8:9a:5c:2d:a9:4f:bf:26:85:19:15:bd:78:31:
22:81:0a:97:fe:12:c7:47:b3:c7:1a:f7:86:bf:3b:
86:01:2f:6f:95:cd:34:0b:e1:9f:84:d6:f4:f4:82:
8b:d5:4b:37:38:b2:8c:48:ef:9c:a7:b1:e0:5e:36:
60:7e:90:ff:06:5e:90:9e:fe:5b:99:b9:58:4d:8d:
b4:6f:e7:6a:88:ff:35:3e:ca:f2:8a:24:13:2c:5e:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7C:0D:45:F4:D1:E5:65:85:DF:80:79:EF:68:80:11:B5:48:6E:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
X509v3 Authority Key Identifier:
keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
sbgp-ipAddrBlock: critical
IPv4:
96.47.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:47:7c:48:52:e0:e9:e0:90:63:87:6e:d2:2d:d3:69:e4:a2:
cf:a8:ea:78:69:80:01:a1:59:07:a8:58:6d:32:4b:32:6e:61:
d7:95:73:6f:0f:04:c8:58:ac:c4:f4:9e:f2:5a:7b:68:47:a4:
de:d8:a3:c4:94:85:fd:dd:61:9e:32:cb:01:2e:c3:88:79:c2:
3b:33:a3:35:a0:ba:3d:f1:3c:76:f7:4c:87:d7:92:d3:94:f0:
57:01:2d:88:74:5d:78:c5:df:56:11:e9:bb:b5:a7:70:b9:0a:
c9:c9:82:99:56:59:09:e8:08:3f:2a:4b:d3:20:3f:22:21:17:
e2:3b:f4:56:04:fc:79:de:63:87:c2:ec:c5:d3:64:86:e2:5a:
c4:2a:f5:11:e3:44:c8:d2:bc:6b:28:2d:bd:64:c7:6d:bc:cd:
72:c3:44:a0:c6:d0:4d:d7:dc:cb:93:61:4b:91:6b:bb:14:9f:
be:b5:b6:be:73:8e:5e:54:14:95:58:81:2b:08:3f:7c:fb:fd:
eb:9c:1d:34:2f:94:d0:06:f8:df:bb:28:9e:6d:f5:d4:51:79:
60:27:9c:25:aa:d6:82:7f:1a:e7:3a:ac:ba:fb:24:1a:bc:0a:
cf:36:ff:38:df:b2:1c:99:22:43:43:a8:c6:9b:ae:dc:4c:a3:
cb:ab:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 18:24:07 2026 by rpki-client