
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed490fc3-0ec2-3ccd-8bcd-fc9942007083.roa
File: ed490fc3-0ec2-3ccd-8bcd-fc9942007083.roa (raw, json)
Hash identifier: 5sUOi3WAV5Eb7QX5oP2U4DdubWNZgrq3zE3Nww2BNlM=
Subject key identifier: A4:B9:C3:89:39:F1:75:2A:1D:67:68:54:0E:EF:D3:A2:12:40:B6:33
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EBF9929A801D1035E3D14BAC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed490fc3-0ec2-3ccd-8bcd-fc9942007083.roa
Signing time: Thu 06 Aug 2026 15:56:31 +0000
ROA not before: Thu 06 Aug 2026 15:56:31 +0000
ROA not after: Wed 04 Nov 2026 16:56:31 +0000
asID: 25987
IP address blocks: 199.97.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bf:99:29:a8:01:d1:03:5e:3d:14:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Aug 6 15:56:31 2026 GMT
Not After : Nov 4 16:56:31 2026 GMT
Subject: CN=2dc33305-4a5d-4936-9aae-ca35782aaacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:39:cd:fd:63:5a:d9:4c:9a:c7:67:6f:74:
e0:98:a3:e0:09:50:7d:d2:b6:2e:78:d5:c5:42:2a:
46:60:54:72:11:b8:05:e2:8b:e5:5b:ce:bd:e3:12:
71:53:78:71:35:1d:c4:92:e2:bb:a5:d9:f9:e0:96:
bf:41:db:0f:b9:f9:61:cb:06:1f:5d:80:c1:bc:3d:
b3:60:88:21:dd:95:20:ee:38:b1:36:d4:01:b7:bd:
ec:28:82:0a:24:2e:24:89:37:b5:8f:2c:8e:6a:52:
c4:51:3d:b9:6b:41:d5:fe:fa:6d:9b:32:c2:1c:af:
f9:97:09:8d:67:37:0a:bc:28:a5:db:67:33:12:a3:
54:47:16:5e:be:2f:44:99:e1:f0:1a:fb:d5:95:1e:
39:c5:e5:38:ef:f1:56:9e:fd:17:11:cc:7c:23:27:
84:3a:d0:b3:08:1c:52:2a:6d:05:3d:0d:ad:b7:a0:
58:d5:c5:3b:e0:4f:87:73:c2:fa:dc:ec:5e:10:b3:
08:a4:44:6f:08:0f:f0:1b:c4:34:5a:2a:cf:90:18:
af:66:65:73:a3:f4:fd:32:0f:de:e6:b5:1f:2a:20:
b5:f3:9b:fc:af:a9:59:97:b1:34:60:e9:b6:cd:4e:
5c:b9:e5:5d:78:7c:d0:92:3a:bc:ff:34:32:0e:c4:
8e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B9:C3:89:39:F1:75:2A:1D:67:68:54:0E:EF:D3:A2:12:40:B6:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed490fc3-0ec2-3ccd-8bcd-fc9942007083.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
199.97.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:68:0b:25:52:26:6a:4e:c9:74:7a:04:3a:32:14:ef:a8:e1:
eb:60:d0:e6:c6:f8:c4:c8:5b:3e:a3:ae:7b:85:cc:9d:a9:88:
c7:26:b4:94:fc:f4:5a:bf:c4:ee:a2:cf:12:61:80:54:09:d2:
a4:b0:eb:2e:02:51:8d:c2:bc:78:4d:e2:75:3c:0a:f8:18:3d:
3b:ea:47:d5:36:90:42:50:78:61:e7:d4:9a:06:df:f8:1b:09:
7e:94:25:a3:69:f6:d4:5b:0a:16:9e:60:51:9b:ea:a1:8b:31:
65:71:2e:94:d8:5a:2c:8f:8e:ab:ff:85:7a:1f:34:8e:87:7c:
6a:23:28:eb:a1:f7:ba:d2:fa:57:c9:f8:38:d8:0d:7c:d2:5c:
73:9f:36:68:67:14:a8:0f:9e:89:ed:9b:a8:32:73:6f:c4:e6:
1e:05:ed:52:d1:3a:73:fa:a9:3a:f8:cc:85:23:5c:b3:c1:9a:
39:81:10:a2:80:1f:dd:84:63:76:ec:5f:a4:82:02:ab:45:a4:
f2:ce:75:49:3e:cc:7a:db:85:c5:1a:26:0f:97:39:d6:cc:87:
03:e4:f9:8f:38:ee:25:bc:89:94:bc:ba:51:9d:43:54:11:13:
d1:e2:c6:f8:e6:ea:c9:70:42:09:83:72:a0:39:05:53:19:e3:
63:29:65:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:05:12 2026 by rpki-client