
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa
File: f5ac55ac-f810-3544-90b5-8f6795c65f87.roa (raw, json)
Hash identifier: Ed6ZdH42XWIy+uigLSeMp1ojr8HsQTrm9kobNG91s1M=
Subject key identifier: BB:F2:56:AC:08:0D:80:DB:0A:62:FB:B6:98:3A:26:3F:9B:8B:F5:9D
Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial: 010D0C9F4328584EFCACBF9F9E4B21788A2E75C0
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa
Signing time: Fri 28 Aug 2026 13:00:12 +0000
ROA not before: Fri 28 Aug 2026 13:00:12 +0000
ROA not after: Thu 26 Nov 2026 14:00:12 +0000
asID: 262287
IP address blocks: 172.111.12.0/22 maxlen: 24
204.9.36.0/23 maxlen: 24
204.9.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fc:ac:bf:9f:9e:4b:21:78:8a:2e:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
Validity
Not Before: Aug 28 13:00:12 2026 GMT
Not After : Nov 26 14:00:12 2026 GMT
Subject: CN=2284c04f-f161-42aa-8bc4-7ef48d6f6a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bd:5e:a0:7a:d7:f0:0c:ee:85:ee:50:0d:ac:
53:13:f2:1c:b9:45:4c:17:58:f2:eb:e4:a6:ab:08:
50:3a:1d:92:3a:2d:90:d9:90:98:0b:76:3c:2e:13:
d0:f1:fa:8e:5e:c5:04:bb:52:15:a3:1d:45:3f:25:
8b:2d:82:12:5d:39:78:75:82:ae:4a:3c:33:ec:88:
01:ad:10:15:50:50:a7:b6:17:c0:77:0c:a0:49:6b:
da:98:ae:56:ea:22:63:53:12:bd:33:d5:05:aa:c2:
c8:84:72:c2:ce:6d:00:1f:f6:f5:b1:7c:2c:ae:0f:
bf:3b:b3:7c:4e:05:08:36:ec:df:df:03:27:76:e4:
be:7f:e8:e4:f3:55:89:2c:41:da:cf:f7:bb:e9:51:
4e:eb:7e:d3:f7:3f:e6:34:c8:57:c3:ea:ea:f1:60:
21:25:41:91:ef:37:1d:b5:44:13:c2:a5:2e:36:d6:
c4:c1:34:d2:02:e1:f2:f4:79:6d:bd:35:ed:fa:7e:
bb:17:55:cf:c2:fe:9d:73:24:29:a1:4b:38:09:8e:
a0:eb:bc:ed:e7:79:4f:52:f4:a0:e5:02:43:c2:a8:
9a:62:a1:27:49:0d:c7:d6:95:c5:7e:6a:60:1e:6a:
42:32:96:b4:a1:aa:9e:24:fa:7e:2e:97:8f:88:ba:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F2:56:AC:08:0D:80:DB:0A:62:FB:B6:98:3A:26:3F:9B:8B:F5:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
X509v3 Authority Key Identifier:
keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.12.0/22
204.9.36.0-204.9.38.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:50:25:f4:d3:29:f7:f8:56:e3:11:43:9c:8b:de:0f:2a:ae:
29:94:59:c1:b8:68:e8:68:f7:8f:63:c1:39:fb:51:63:94:9c:
8a:54:85:cb:5b:21:24:bb:8e:82:20:2e:7f:e2:a3:47:be:d1:
22:61:02:f4:bb:c2:ee:0d:58:c4:43:e8:ab:b9:3c:45:e3:b8:
6a:e1:2a:93:15:21:95:37:c7:f6:df:20:e7:16:da:80:ee:3d:
01:a0:0e:57:c0:28:fc:83:b0:35:dc:c7:1e:0a:f5:0a:91:96:
39:ae:03:17:0c:11:73:d1:7b:d4:4f:6e:d5:38:fa:16:20:1e:
b9:e5:33:69:e4:b6:ee:48:7c:9f:a3:46:f2:05:ca:27:37:36:
ac:0e:18:4e:33:fe:e1:e1:c8:7b:6b:2b:84:b0:3e:3f:25:76:
3a:18:3c:4e:84:78:33:ac:5c:b4:67:e1:f8:36:be:58:29:6b:
7a:6d:a0:85:e2:11:6d:62:c8:61:cd:14:25:4c:70:aa:bc:4b:
ae:87:73:08:5f:db:f8:fe:06:9b:f1:6a:8f:f4:4d:7c:33:b9:
41:2d:65:7d:a3:8b:fd:48:e1:71:d9:a2:2a:25:9f:ab:cc:6a:
8d:44:60:8f:5b:b5:41:28:50:f9:4d:60:c0:7e:4c:43:50:0e:
91:2b:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:46:13 2026 by rpki-client