
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa
File: d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa (raw, json)
Hash identifier: xWq6fI5H1xfNAbsWA2aminDaCtltMqA+YUjdGiGsVlo=
Subject key identifier: 55:64:B5:06:14:80:BB:A5:80:7C:DD:2C:FE:40:D3:83:91:A9:9A:67
Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
Certificate serial: 010D0C9F4328584E6DD4C5A23673ACE96699EC00
Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa
Signing time: Wed 08 Jul 2026 09:00:12 +0000
ROA not before: Wed 08 Jul 2026 09:00:12 +0000
ROA not after: Tue 06 Oct 2026 09:00:12 +0000
asID: 133462
IP address blocks: 192.91.108.0/24 maxlen: 24
192.91.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6d:d4:c5:a2:36:73:ac:e9:66:99:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
Validity
Not Before: Jul 8 09:00:12 2026 GMT
Not After : Oct 6 09:00:12 2026 GMT
Subject: CN=4e2901e4-e38b-4a78-b635-d975eaa8050d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:57:c5:43:75:2b:55:dc:b9:72:f0:27:c7:
ed:19:89:f2:e1:18:de:84:1e:8e:57:5c:77:fb:dc:
27:99:14:70:94:f5:68:62:a4:cc:35:ab:29:35:cc:
9d:d5:27:3f:c2:d4:b6:6d:5d:95:23:68:82:1e:b1:
4f:37:58:fa:23:4d:25:e6:03:34:80:77:1d:8a:20:
64:15:c4:89:e6:8f:d8:cb:66:5e:5e:cf:b7:12:67:
4c:ac:40:0a:b2:38:fd:83:4d:5a:8a:26:f5:6e:ef:
18:ea:23:89:81:ea:bb:1f:71:5f:7c:cf:9c:2c:ca:
dd:1a:54:8f:f4:71:29:75:4f:77:c9:b3:9e:ed:1b:
68:21:b8:07:2b:85:e4:ae:ba:be:be:b7:8a:68:cb:
f4:bc:b8:0f:0e:f8:63:4b:3c:c0:ec:cc:d1:09:7b:
4d:89:e0:c2:fa:30:17:e1:d8:42:b3:7b:a9:9d:0b:
d3:6d:e9:34:2b:4e:f6:d9:d7:b7:61:cd:85:15:dc:
da:7c:ac:81:08:5a:b0:7e:9f:67:d4:1d:41:87:7f:
14:a2:a2:7d:7e:7c:e3:9a:9c:e0:f7:f0:f3:10:6a:
2c:a6:3d:8b:16:d1:af:bd:77:03:cf:0f:78:40:4f:
d4:b2:9f:d4:85:07:ee:e1:c1:ef:a5:ec:31:12:e3:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:64:B5:06:14:80:BB:A5:80:7C:DD:2C:FE:40:D3:83:91:A9:9A:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl
X509v3 Authority Key Identifier:
keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
sbgp-ipAddrBlock: critical
IPv4:
192.91.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:74:5e:0b:c6:e2:19:ed:e5:7e:6e:fe:ba:5f:f6:8a:d2:d2:
e7:6a:6a:46:15:09:68:66:2b:ed:44:74:60:f8:46:77:a4:7a:
21:da:7f:1c:52:55:13:37:cd:1b:70:85:c2:fd:30:db:64:ab:
ee:7b:3b:73:6e:40:ac:3d:a7:3c:b3:ea:5e:63:42:5b:86:0d:
cf:41:5e:7f:93:6c:6c:fa:2e:a4:c9:31:aa:1d:6e:4b:ba:96:
e7:1f:07:f4:87:6a:f7:29:47:5d:c0:4c:2e:75:18:3e:04:82:
b0:f6:af:19:a0:56:45:c3:d9:a0:3d:34:0d:73:23:13:bd:de:
8b:02:37:67:99:97:c8:f1:30:33:fd:08:d5:b1:ef:5f:9f:34:
66:cb:3f:d1:a4:65:1c:42:17:6b:dd:02:fd:c6:eb:c7:2b:bc:
45:86:5a:95:44:f4:e0:8f:e1:6a:13:dd:29:8d:ec:db:27:18:
98:75:25:84:23:ae:a6:31:0c:de:96:e8:c6:4e:0b:9b:03:ab:
fc:66:c8:db:0a:d3:5a:20:38:4d:c9:cb:77:58:be:cd:4e:7e:
ee:43:00:17:de:e9:15:c7:7e:15:b6:d3:1b:2d:b2:9c:c6:eb:
b1:4c:25:2d:b7:57:4c:bf:ee:92:b3:4c:b2:d7:9c:7f:43:3b:
8d:3d:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:17:52 2026 by rpki-client