
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fc9a0abd-f06d-347d-ad73-17b8543afc55.roa
File: fc9a0abd-f06d-347d-ad73-17b8543afc55.roa (raw, json)
Hash identifier: /s3ZbFgGMkb5SXLsZCvW35eh+CHANyfYkkyJFEosG+Q=
Subject key identifier: 42:28:DC:C2:95:4B:F6:01:88:1B:69:28:03:10:E9:4C:34:D6:0B:85
Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial: 010D0C9F4328584D703FF956C695D2D4D1A59C00
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fc9a0abd-f06d-347d-ad73-17b8543afc55.roa
Signing time: Wed 08 Apr 2026 13:00:33 +0000
ROA not before: Wed 08 Apr 2026 13:00:33 +0000
ROA not after: Tue 07 Jul 2026 13:00:33 +0000
asID: 203724
IP address blocks: 131.229.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:70:3f:f9:56:c6:95:d2:d4:d1:a5:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Validity
Not Before: Apr 8 13:00:33 2026 GMT
Not After : Jul 7 13:00:33 2026 GMT
Subject: CN=96bd1de9-94f6-473f-8b16-3a5ff5c68df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:12:00:4f:4d:6b:7d:90:b4:a1:ce:89:ff:c5:
e8:7d:58:03:2e:18:83:48:52:95:c6:1f:b5:04:53:
70:3c:e7:95:0c:6a:83:a1:0a:24:9f:5a:9f:74:0e:
d1:1a:9f:b2:9d:e0:79:43:24:60:6a:0a:b6:1b:1d:
a2:c5:64:f3:38:22:85:1f:d6:35:d2:e7:58:0d:1f:
8b:a9:39:c5:75:f8:01:25:90:3c:b5:a8:43:ae:c0:
b5:53:98:b0:df:9d:e6:d5:2e:90:2e:76:90:84:34:
63:39:76:92:07:54:5a:69:f4:e9:8f:e9:af:e1:50:
84:60:7c:02:57:f1:88:a7:a7:c0:10:41:61:57:cf:
68:36:4a:56:8c:2b:31:57:c8:95:fe:34:33:ed:f8:
9b:d9:f6:48:f8:06:8b:62:cb:a9:99:b3:38:c7:64:
d5:7c:db:fb:b1:94:a8:e5:90:bc:81:7f:2d:46:80:
84:c7:38:76:51:0c:4b:11:44:49:67:c3:63:c9:b3:
5f:b9:12:58:ba:a9:9b:8d:b6:06:26:28:de:46:89:
04:10:af:65:de:6e:48:11:d9:83:f5:0a:ff:a6:d5:
fb:93:e2:49:b6:d3:93:0c:1a:54:0f:fb:bb:6a:38:
2c:fe:ba:f2:c9:09:54:b8:59:7c:95:79:a2:ca:a6:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:28:DC:C2:95:4B:F6:01:88:1B:69:28:03:10:E9:4C:34:D6:0B:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fc9a0abd-f06d-347d-ad73-17b8543afc55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
X509v3 Authority Key Identifier:
keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
sbgp-ipAddrBlock: critical
IPv4:
131.229.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:e4:3d:8b:84:c9:1d:3c:7a:0e:a5:19:7f:a7:2d:9a:0a:e6:
6d:d7:45:94:5a:64:51:c2:6f:b3:ee:56:be:aa:4f:4c:0c:5a:
2b:5b:03:b2:c3:a2:73:d9:97:da:85:b3:bd:47:de:4c:ee:44:
f4:d9:2c:18:75:b0:71:19:a5:b9:07:7c:dd:1c:37:dd:44:a9:
9f:4f:9b:da:75:e7:88:58:8a:d8:a5:a4:70:d1:d2:66:47:2c:
19:43:0e:d3:4c:97:b7:2a:63:fa:ac:09:18:4a:86:57:48:b5:
77:9e:4c:72:fd:19:60:6c:e3:0e:86:e1:20:cd:ae:6c:b0:8a:
85:86:54:de:78:da:50:71:40:22:b1:73:07:2a:3f:a3:a9:6f:
8a:5a:12:fc:9e:f4:36:b7:66:e2:3c:33:d2:df:e6:ca:29:75:
ef:a7:1a:b5:c0:d7:ec:25:d5:d2:e1:d6:ec:08:e5:97:b2:a8:
4c:c6:32:6c:9d:26:c1:c5:24:67:e0:cd:24:a9:7e:ef:55:08:
b8:c6:19:f2:a2:0c:07:6b:81:8f:9a:b6:12:ed:7b:a1:86:68:
00:ff:b3:e9:ed:7c:c9:d1:b3:01:ce:88:dd:db:06:84:54:34:
4d:2e:28:5d:02:58:59:78:d5:ed:6e:c8:05:40:95:39:85:fb:
36:fe:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:18:25 2026 by rpki-client