
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa
File: 131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa (raw, json)
Hash identifier: 6JcPttne0SeEGnH+/VgHZUIPS4GMrUrZRrbxgVyDmjU=
Subject key identifier: 39:93:E2:BE:11:1A:CC:19:F2:31:D0:1F:6D:A9:02:B4:15:D9:5C:21
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584F2D87DBD6CC80258B484DF880
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 63293
IP address blocks: 157.240.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:db:d6:cc:80:25:8b:48:4d:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=3e69c70a-2bd0-478a-98ce-a64bb9a81954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3d:f2:59:3a:51:07:2c:42:31:44:10:59:4f:
fe:3f:8e:85:cf:c5:59:50:fd:07:03:8b:22:1a:65:
48:1f:e6:54:53:9a:75:01:8f:90:ac:20:2b:49:16:
83:b6:fd:63:48:0f:e9:10:5f:01:ee:a3:c0:7a:b7:
90:a1:d9:1d:79:80:a5:68:07:e6:0b:86:50:83:5d:
7c:05:48:b6:2e:9c:52:15:c2:99:5b:cc:ca:05:9c:
c4:74:e2:01:0a:04:58:2c:21:da:6f:7e:7e:13:82:
12:a7:b5:74:d0:55:81:8a:b5:7b:46:ee:b6:a8:ff:
14:f6:91:22:6d:88:b2:ce:fa:59:ac:01:5f:31:26:
e3:bd:76:28:84:e7:12:fc:07:29:4b:fd:5c:8d:a8:
bc:1e:a4:94:a6:ae:60:a3:e6:66:04:f5:1e:af:5a:
1f:43:b6:4f:30:e0:65:94:90:94:9e:f4:7c:b4:58:
9d:c6:17:5d:ff:ef:5f:08:d7:50:7c:c4:a7:60:26:
42:0a:6f:5f:bc:dc:4f:c0:5b:0b:61:f3:df:40:26:
e3:c0:b6:d6:e4:e7:34:22:ca:ac:90:0c:6c:90:5a:
81:57:46:e9:30:ff:88:d5:93:b9:8b:10:b5:56:ac:
ba:b5:7b:f8:3d:ed:bc:72:21:25:85:a7:db:ef:60:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:93:E2:BE:11:1A:CC:19:F2:31:D0:1F:6D:A9:02:B4:15:D9:5C:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
157.240.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:59:43:69:a6:19:1c:1d:ee:19:92:77:2a:27:e2:e6:f3:1c:
0d:1b:8c:9f:69:6c:c7:48:f7:89:96:85:aa:ed:81:17:b5:3c:
32:31:5f:ec:38:ba:74:3f:62:87:39:6a:a7:58:77:76:ad:75:
08:c1:30:ab:b0:3c:ec:09:f4:b6:5f:97:31:e1:5b:ea:d0:6d:
45:d1:04:44:0d:6a:93:ed:41:ae:8b:ca:63:0e:ee:fc:7a:d6:
b1:42:11:ea:ea:db:6f:eb:ec:e4:c8:39:8c:6e:bc:58:89:a8:
c9:d0:ab:72:87:0a:88:a0:be:f7:2e:e2:e7:9f:f8:5f:f7:5a:
b5:f9:d6:d9:61:c0:7c:27:78:b7:10:c0:41:59:8c:4d:d1:de:
7f:95:8a:82:ee:66:0c:8c:ae:63:85:3d:60:8b:f9:ba:14:d8:
55:2d:ae:a3:9e:09:42:a8:54:3f:ad:1b:a6:16:b5:f1:2e:9c:
0b:0b:a4:31:c2:42:83:76:7e:c7:1e:5b:ac:0c:04:13:0c:02:
cb:49:23:33:53:a7:ab:e9:2d:13:ca:fa:64:a4:66:d0:99:8a:
f0:3b:cd:bf:20:7f:0f:9c:97:0c:ce:6a:72:7e:fc:54:f6:8d:
33:f1:4a:4d:76:c6:42:20:56:44:6a:0a:00:3f:83:1a:c9:7b:
a3:eb:ee:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 13:11:20 2026 by rpki-client