
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa
File: 400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa (raw, json)
Hash identifier: 9elxBMMf+EE0dcpdFdGu2cozDS6yx58YuINXkFxggzM=
Subject key identifier: 41:D1:CC:80:B9:A5:52:28:2D:AC:44:AD:3D:0A:91:5A:37:26:4B:94
Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial: 010D0C9F4328584EA78F655A0B3EEFFC0D8AF940
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 63240
IP address blocks: 192.254.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 15 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8f:65:5a:0b:3e:ef:fc:0d:8a:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3d14f226-30f9-4a2f-ba95-d8a4fb1449df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:56:52:5e:56:e7:86:e5:fd:72:8b:f3:aa:
8b:a8:17:2f:51:9b:47:79:e3:2f:52:12:0b:f2:9e:
c1:cd:5b:9e:9f:d5:ad:ce:45:f5:da:58:37:13:76:
6e:f6:12:1f:05:7f:51:cf:81:29:06:f6:0f:b5:b5:
c1:90:55:1a:93:6a:3d:a8:28:df:e2:56:e9:ab:ec:
56:03:fe:8d:f1:1c:e7:01:d2:b7:da:2c:7e:d8:16:
b0:09:13:4f:25:94:7e:50:35:5c:3c:c2:a6:5b:a7:
67:8f:83:e9:47:45:e3:95:c8:b1:24:9c:61:0f:72:
98:ad:bc:f4:a1:8b:d3:62:46:87:ff:5b:48:b5:09:
cc:86:cf:6c:45:96:86:68:71:e5:39:b7:8d:82:f2:
2f:ba:95:5e:5d:6f:84:4b:77:5c:1a:65:fb:31:f4:
89:ba:31:d4:f1:bc:05:4b:6d:0b:a2:c8:cd:9c:4a:
4e:4e:d8:0c:47:3b:64:da:01:54:cb:8e:83:fe:c3:
7c:62:3f:89:62:7c:b2:35:fb:c9:9c:b5:bb:1e:32:
3f:d4:ce:65:22:c2:f1:8f:f6:d5:23:6c:eb:f2:e4:
a2:90:ce:8a:16:f7:a7:f3:46:6e:ec:a0:82:68:7d:
30:e1:dc:de:23:d9:1b:2d:3c:45:a9:58:cd:81:54:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D1:CC:80:B9:A5:52:28:2D:AC:44:AD:3D:0A:91:5A:37:26:4B:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
X509v3 Authority Key Identifier:
keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.254.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:ec:64:06:6a:6f:16:ca:50:2b:55:e0:c3:24:0a:aa:c6:40:
7a:24:2d:ed:75:e4:a4:3b:bb:ff:a7:71:29:ad:bc:fb:cc:ef:
38:9f:2e:17:e6:03:e8:6d:3d:27:34:6b:d1:ff:cf:1c:17:dc:
00:c3:3f:5c:ab:03:04:fe:6e:82:35:d4:91:3c:d7:e5:20:ac:
95:8c:07:79:52:14:56:33:66:3c:17:a4:63:70:43:a8:a1:02:
5b:bf:41:39:bd:0f:ea:18:b4:3c:f0:4d:99:b9:4e:fa:1f:25:
a4:3b:1e:0e:ef:b6:7d:ae:7d:84:24:f1:25:3d:4e:c0:e3:e8:
52:6e:e3:3b:05:df:9d:de:26:2a:40:8c:9f:22:b0:89:73:9b:
96:86:72:c8:ee:bf:9a:71:fb:10:c5:bd:61:0a:cc:9f:b2:41:
08:91:60:39:29:e8:d6:93:32:06:8e:59:6f:f3:de:f0:f3:10:
c5:74:e3:2f:43:d9:16:67:5e:13:55:54:ec:24:a4:ae:de:9c:
10:f9:8d:64:c2:0b:77:a1:22:35:8b:65:f3:4f:78:e4:60:f6:
e9:c7:04:8c:9e:b2:d4:65:20:fa:78:de:3c:3f:b7:06:d4:cc:
12:5f:20:89:63:88:e2:e9:92:bb:da:72:29:e9:f0:15:e2:b3:
32:86:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 20:47:17 2026 by rpki-client