
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95f1bca9-38f8-343d-ae93-c5e2e8ae57ab.roa
File: 95f1bca9-38f8-343d-ae93-c5e2e8ae57ab.roa (raw, json)
Hash identifier: 1SwwwdZ9Q6sYHwXvvS2ORlJgNzCYFv+/Hxp4U+CMyQQ=
Subject key identifier: 69:57:A7:39:08:62:38:B0:27:DE:07:22:8E:80:D9:3F:EB:62:52:0B
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584EA787DF52E61BA8FD9444B600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95f1bca9-38f8-343d-ae93-c5e2e8ae57ab.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397213
IP address blocks: 198.133.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Aug 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:df:52:e6:1b:a8:fd:94:44:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=df151e33-7141-40c6-844b-c8b64fa86eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:96:ae:4c:02:c7:9e:0e:bd:63:51:13:37:
8a:92:a7:8b:4c:0e:3f:7c:56:4a:58:c2:41:71:b1:
2f:26:cd:80:78:a2:5f:fc:5c:36:1d:97:a1:d0:a1:
56:c2:9c:ae:8e:0c:ae:a1:ca:73:61:be:ef:2b:00:
57:1e:47:a8:8f:46:87:2f:77:69:09:a0:24:0c:4b:
15:cf:80:87:78:03:34:50:2d:12:d0:d9:0b:0b:43:
5f:08:36:ba:61:66:2c:85:f6:db:3e:fd:8f:cd:a9:
4d:f6:c6:16:d1:8a:61:0c:1b:0c:64:48:cd:b5:b9:
e9:b7:1f:2d:98:c1:65:29:d5:e4:00:cb:ac:92:60:
de:28:a2:36:3a:a7:63:86:c0:3c:96:ed:c8:24:e8:
da:db:e6:2c:4f:0d:ee:a7:94:0a:23:81:7a:2d:9f:
61:9e:65:1e:b4:b4:97:14:90:2e:dc:9a:70:f2:e5:
8f:92:88:f7:70:4f:f4:58:ae:37:25:63:82:2c:ee:
34:46:24:8a:ba:84:6a:d3:b9:44:18:20:ef:eb:49:
8a:a1:6b:47:2a:65:a0:2c:94:60:85:4d:9e:ee:c7:
25:a0:1b:4a:00:8e:df:6c:1b:4e:04:9d:9e:bd:db:
11:fb:23:5a:11:20:31:bd:06:50:7c:38:06:27:4f:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:57:A7:39:08:62:38:B0:27:DE:07:22:8E:80:D9:3F:EB:62:52:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95f1bca9-38f8-343d-ae93-c5e2e8ae57ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:c3:aa:26:65:c7:2f:4a:06:73:ed:6a:6b:7c:da:22:3f:92:
9b:3c:1d:43:2e:47:a8:7a:b9:63:ec:56:a9:06:d8:45:c5:8c:
34:6b:4c:6e:67:a1:95:ff:42:90:30:0f:3d:9a:a0:e6:dd:b3:
97:cb:76:4e:02:cc:6d:65:65:4c:79:29:6d:93:57:a8:ae:4d:
e0:50:3a:ce:7d:b0:1b:ce:8a:a5:95:b2:81:2d:07:2c:67:54:
dc:35:1a:d5:85:94:fa:15:08:1a:c4:b8:32:25:ef:f7:b2:76:
b1:58:1a:ab:05:e2:9e:37:42:00:d3:7c:ff:fd:e0:b1:95:af:
ed:7b:96:e3:ad:74:4d:b1:fb:b4:f1:b2:27:ce:dc:09:d5:0c:
9f:18:5a:ee:a1:7d:6b:8c:eb:e5:ca:37:bb:10:b6:df:f8:11:
77:3e:f2:bb:0e:90:77:42:05:dc:6e:3b:cd:df:5d:0f:bb:b7:
95:e0:19:74:fb:60:4c:ec:c0:a6:b1:81:dd:fd:ae:54:e3:ea:
b1:58:eb:0b:d7:88:86:e8:1a:64:a0:0d:ff:bb:56:67:b1:a2:
ff:72:7a:52:73:b3:97:d2:62:4c:56:3a:3a:e6:79:05:ed:b3:
55:2f:8b:9b:22:3b:e0:0f:36:06:27:01:39:53:af:55:ee:1e:
9e:5f:de:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 07:34:42 2026 by rpki-client