
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa
File: 9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa (raw, json)
Hash identifier: 3zpnOdd5Yx4cTVKX1Sv2EFz27HSMKCwrXwoQF0tFmDA=
Subject key identifier: F2:1C:6A:F1:5B:3D:BC:4B:74:5F:8B:1A:E2:69:3C:F5:CB:6F:B1:25
Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b
Certificate serial: 010D0C9F4328584F49746DAB39B190825FF42600
Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 40676
IP address blocks: 199.89.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:6d:ab:39:b1:90:82:5f:f4:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b9fe4ef4-b75b-4bc3-93ce-4706c7040b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:00:52:ae:be:b9:a6:90:4a:3a:d4:e2:61:
9f:2d:a1:d1:71:d2:b9:67:73:ee:cf:db:6c:41:48:
99:2a:3e:dc:6d:21:25:86:30:76:e5:56:93:4e:49:
c6:e2:f4:6c:bd:82:d0:8b:94:bd:6c:6d:75:53:c0:
6e:21:5c:9c:47:86:6c:0f:23:5b:6e:d0:83:35:cd:
9c:0d:a8:10:57:ef:b9:a5:ee:4e:19:bf:2d:99:29:
61:30:a8:1d:15:80:b9:12:90:c1:bf:2c:0a:24:47:
b3:fe:72:fd:8c:04:9b:9f:4b:86:d4:ae:2f:e2:58:
6c:92:ad:80:3b:ab:6e:05:87:d3:af:e2:ff:53:77:
78:ad:ce:2c:83:67:36:23:87:06:6e:b7:53:d4:59:
44:b4:a6:0f:56:8b:55:52:ba:5c:b6:3f:47:af:35:
71:6d:0f:75:3b:aa:c6:6e:11:fd:94:78:3a:73:14:
22:d1:84:06:d3:fc:71:1c:ff:ab:1b:a2:d1:e1:5d:
58:b0:25:cb:5f:2f:ed:cb:2c:e9:34:6c:a8:f7:68:
eb:b8:b6:c2:32:f8:e9:27:80:26:2c:7a:96:51:cb:
66:9d:69:6a:68:68:eb:ac:89:e2:ee:17:dd:d8:e5:
b3:f9:6e:3c:7c:59:e2:d0:bb:7f:bc:e8:b0:ef:2d:
6a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1C:6A:F1:5B:3D:BC:4B:74:5F:8B:1A:E2:69:3C:F5:CB:6F:B1:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl
X509v3 Authority Key Identifier:
keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.89.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:aa:4d:e4:3c:fb:5a:9b:c0:d9:bb:87:fe:e5:6b:aa:33:27:
e3:49:e7:fc:ad:bb:ec:f6:93:bb:30:37:1d:e7:bf:3b:74:53:
6f:74:4f:b4:c1:f1:e9:dc:33:68:a2:3c:f9:df:2e:65:7e:1b:
93:39:de:da:a2:c2:53:5b:5d:d9:23:c9:af:b1:b3:f8:b6:f5:
7a:14:10:43:41:3d:eb:bb:6a:03:11:00:11:72:84:b0:4d:11:
40:0f:84:d6:72:85:84:52:1e:9d:8d:9f:b7:df:2b:fc:ce:be:
d3:01:16:0b:40:7c:5f:72:a3:ee:7a:fd:8a:49:d4:82:fe:25:
fc:40:a9:e5:62:b1:a1:5f:1f:c8:26:6d:5f:62:7f:1f:71:48:
db:f0:83:a0:3e:07:51:87:09:a4:96:66:d7:1d:8e:dc:78:99:
ed:ab:17:dd:c7:de:e3:34:02:97:a2:ec:8b:1d:39:d2:11:db:
65:c3:76:03:86:e6:96:ed:54:24:d2:a2:91:4c:f2:e7:ba:72:
f8:05:e6:90:76:9c:23:e0:db:4d:2c:f1:92:6e:8a:be:88:43:
6b:60:2a:b2:51:b1:3b:12:70:e4:37:14:0e:f9:9d:73:fb:f5:
06:d6:50:2c:fd:d3:6e:ac:d0:5d:f2:ed:45:ff:24:ed:a0:e0:
ff:e9:f2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:04:43 2026 by rpki-client