
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c12965f3-c52e-3ca2-82c6-dcfed468cdf6.roa
File: c12965f3-c52e-3ca2-82c6-dcfed468cdf6.roa (raw, json)
Hash identifier: wM8HG9W8+6xIzYnbW7aPll0kcLDGls5YHVfbwHXy24k=
Subject key identifier: 36:AF:86:C5:D0:DB:54:84:49:24:BE:B1:41:71:A7:38:5B:AB:D3:7E
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584F655D615A4C5D8055521BFE80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c12965f3-c52e-3ca2-82c6-dcfed468cdf6.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 395954
IP address blocks: 172.255.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5d:61:5a:4c:5d:80:55:52:1b:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=8cad7cc4-4314-4168-96f9-9d36e36e0be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:0d:94:ca:65:86:33:6f:e0:e2:6b:0e:53:
3c:aa:3d:37:c1:bc:9a:03:ed:d3:48:84:da:83:82:
bc:4b:a3:95:5d:f6:93:1d:1a:04:d8:c3:62:4d:54:
61:af:7c:3b:3e:87:fa:67:f7:cd:5c:ae:51:80:97:
b3:4e:65:8c:48:b5:c1:52:7f:6c:7e:38:17:b2:97:
d9:5d:ca:73:43:3b:1d:1d:ad:e2:3b:ef:f0:29:d3:
ea:b9:ed:eb:eb:b1:a3:05:7d:ad:ae:02:7a:42:18:
e9:8f:b6:d7:fe:df:03:bc:8a:5b:13:04:ae:24:0c:
b1:73:c0:d4:a5:23:92:d8:03:7f:85:39:cb:6a:3d:
44:2b:a6:72:cf:7b:e2:d2:03:36:18:55:6e:60:e8:
88:83:39:d1:ec:30:ca:79:15:96:8e:b6:92:c6:85:
c6:80:02:91:ac:61:cf:c8:77:30:3d:22:91:91:57:
32:ea:e6:9b:db:68:5f:d8:e8:5a:fd:8d:72:30:b6:
fc:b1:a9:2b:01:06:fb:77:2b:5b:97:a5:0d:5f:67:
56:09:ec:a9:a8:44:1d:3e:ba:27:11:79:28:08:86:
5e:1a:69:16:31:b5:c2:9b:2c:06:40:45:17:4f:9e:
19:90:62:b4:58:35:35:4c:4d:4d:de:cf:57:dc:c1:
ea:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AF:86:C5:D0:DB:54:84:49:24:BE:B1:41:71:A7:38:5B:AB:D3:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c12965f3-c52e-3ca2-82c6-dcfed468cdf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
172.255.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:15:a2:51:d9:d4:66:7f:04:30:6d:6b:2d:29:de:7b:fe:d9:
b6:32:5e:d9:84:e1:85:cc:b1:32:06:55:ec:fd:83:56:ed:af:
34:e6:6d:27:c9:3d:46:c1:be:88:89:45:d2:6c:f2:17:12:22:
71:3a:33:a3:40:47:58:11:19:5f:f2:a3:a7:d1:65:96:16:8a:
9f:6e:78:82:69:fa:6c:82:03:44:b0:ea:70:6c:7f:05:94:49:
a8:0c:50:ac:41:09:17:63:11:d3:ef:14:04:74:92:c0:56:ea:
67:2b:27:88:b1:75:53:44:bd:18:15:ac:e2:bf:e3:c8:a1:25:
ec:8f:9b:b1:46:7c:20:4f:8f:39:d1:87:65:ef:60:ef:56:db:
74:4a:6d:88:83:81:dd:96:21:fd:3e:9e:95:d2:89:3e:91:b0:
a2:fe:9c:87:6f:44:fc:ea:07:18:60:d5:be:20:00:ff:05:07:
b5:27:87:9b:b4:bd:58:cb:be:82:d0:22:88:6f:7e:c0:8a:88:
aa:5c:84:c7:9b:a5:fe:5c:24:2e:fb:65:ea:88:7f:b0:15:c1:
dc:ab:31:7d:37:3a:1d:3f:ee:fb:63:02:e1:2a:1f:86:b2:16:
23:f8:8a:5e:df:99:2c:71:1c:2a:29:b7:30:be:dc:8a:62:4c:
c2:9c:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:52:32 2026 by rpki-client