
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/9ae2582e-294e-3281-bf09-2642a6663c7d.roa
File: 9ae2582e-294e-3281-bf09-2642a6663c7d.roa (raw, json)
Hash identifier: 2P21Cn7lNeh/+jxveXW6do4fsLbBTeSwNBi+z0aA/bg=
Subject key identifier: 8A:D2:4A:A2:40:FE:E0:B5:E3:9A:7D:49:43:FE:FF:21:7D:37:0D:AF
Certificate issuer: /CN=293fd22c-acf2-43f5-bbd1-2b63ea7128c7
Certificate serial: 010D0C9F4328584EB2B1B9DB5F34494100F6A780
Authority key identifier: 14:D6:F1:9E:F8:E5:BA:88:DB:08:5A:22:98:FE:68:86:61:1D:EB:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/9ae2582e-294e-3281-bf09-2642a6663c7d.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 399386
IP address blocks: 199.88.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:b9:db:5f:34:49:41:00:f6:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293fd22c-acf2-43f5-bbd1-2b63ea7128c7
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=991cd177-8efb-4d93-8259-14145880b303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:50:eb:a6:aa:34:7d:85:06:80:76:3f:35:
3d:51:09:61:9f:f2:9b:39:bf:69:17:7f:c8:2f:97:
77:20:4c:c3:8c:d2:ed:3b:a8:8a:6e:03:9a:2b:4e:
8a:ad:a8:7c:d4:db:6f:e8:47:72:ad:4a:d6:2d:89:
d9:1e:06:4e:ae:3e:c5:b0:da:1c:78:6a:32:c4:10:
53:25:7b:6a:15:4c:69:bb:c9:16:6d:79:f7:ff:73:
d7:d1:f9:1f:ef:ea:bb:6b:1b:a6:11:2d:8b:1e:4d:
3d:ce:29:f1:bc:12:2c:c0:9e:1a:9e:50:62:e9:a2:
74:66:e5:2a:c2:1b:cc:65:70:b1:20:04:78:c9:ff:
f2:6d:7e:2b:65:77:00:82:d8:b1:05:88:b5:8f:8d:
ad:cd:d0:32:b3:9f:a2:a5:a4:c5:84:04:a9:9f:4c:
69:11:77:46:1e:d6:e8:a7:16:c1:10:4e:55:70:74:
4f:be:a1:44:fc:0b:16:af:5f:f6:4e:ed:e8:8f:3b:
92:9e:81:77:f7:bc:b2:5e:8f:59:3d:a9:14:9b:61:
77:25:b1:57:70:2b:d0:d5:8b:41:80:5a:f9:21:e9:
91:4b:69:d3:68:ef:2f:e8:09:22:58:af:71:12:27:
b7:aa:41:d5:ac:09:40:46:50:fe:a0:e8:65:3e:d9:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D2:4A:A2:40:FE:E0:B5:E3:9A:7D:49:43:FE:FF:21:7D:37:0D:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/9ae2582e-294e-3281-bf09-2642a6663c7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.crl
X509v3 Authority Key Identifier:
keyid:14:D6:F1:9E:F8:E5:BA:88:DB:08:5A:22:98:FE:68:86:61:1D:EB:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.cer
sbgp-ipAddrBlock: critical
IPv4:
199.88.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:d0:a8:14:da:b3:32:2b:10:00:27:d7:ce:4c:57:16:df:8c:
90:59:53:9c:94:f1:d9:79:4f:9b:a5:5f:04:0a:7e:fd:7d:f5:
64:ae:f0:2b:d5:49:1a:e6:73:dc:0c:1c:4c:67:87:8b:ba:d9:
2f:a9:35:6b:5e:41:e2:0e:9f:8e:16:ee:0f:ec:14:52:3d:6d:
62:2a:cc:56:39:47:95:e8:d7:ec:17:86:a2:35:de:39:d7:fb:
f5:a0:a8:ec:95:4a:bf:60:40:c6:0f:bd:96:41:7e:57:27:eb:
e8:e7:0b:c5:44:3c:05:75:e5:75:0d:28:27:fa:49:42:74:d0:
12:b8:dd:82:76:5b:63:23:4a:87:76:85:a0:8c:bc:20:84:b1:
34:08:4e:ce:2f:be:cf:05:4a:0f:9e:0b:ad:a0:a9:62:86:63:
b0:62:84:17:d5:fc:95:61:72:df:2f:8a:47:21:95:06:38:32:
31:fa:f9:68:5b:d0:ed:19:a3:06:4d:34:08:8b:3b:48:41:a1:
c3:b1:65:83:e5:d7:90:53:90:9a:f2:a7:d4:79:dd:09:66:60:
b8:f3:fd:bb:ed:88:13:c4:cb:75:31:a4:34:57:29:7b:92:7e:
b2:4f:1a:35:6f:1d:d3:69:75:1c:84:59:d7:4d:7b:47:40:6c:
89:1a:98:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 04:28:22 2026 by rpki-client