
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa
File: fbed4876-7519-30f0-92ed-4f017527a1f1.roa (raw, json)
Hash identifier: 1eAq1hO30sLxE4mLcBxJDi1znkf8sJkYCiXfo0JWypw=
Subject key identifier: 44:42:C5:27:66:87:C0:58:7C:BD:A7:92:08:2F:5D:73:74:4A:DA:64
Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
Certificate serial: 010D0C9F4328584DD4C0717DC2C517CA8BCF2240
Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa
Signing time: Thu 14 May 2026 13:00:31 +0000
ROA not before: Thu 14 May 2026 13:00:31 +0000
ROA not after: Wed 12 Aug 2026 13:00:31 +0000
asID: 399480
IP address blocks: 192.228.64.0/23 maxlen: 23
192.228.64.0/24 maxlen: 24
192.228.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 05 Jun 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d4:c0:71:7d:c2:c5:17:ca:8b:cf:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
Validity
Not Before: May 14 13:00:31 2026 GMT
Not After : Aug 12 13:00:31 2026 GMT
Subject: CN=f0d8635a-a305-4b3b-bf8f-287fb4a028f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:3f:dd:d0:05:47:c7:32:ee:ab:f4:d2:fe:
cd:08:13:3a:8d:e8:03:ee:1a:85:fa:18:d2:45:2e:
22:f5:ba:71:b0:15:42:d7:94:62:18:fe:88:df:39:
b0:03:57:48:d0:2f:85:2c:87:f0:74:a7:82:78:4b:
ae:6b:fa:d1:0a:0c:07:25:7d:09:a5:84:cf:66:b8:
89:fe:87:9d:a6:c5:e1:a9:d1:39:4c:b3:9a:0f:83:
79:39:cd:16:59:83:7e:b3:d9:4c:d7:c5:e6:47:f8:
ef:54:89:c8:df:50:71:c6:66:58:f4:66:19:00:15:
61:e0:4c:c8:3a:95:b1:c6:89:e6:fe:2d:f8:67:30:
4e:b1:52:ac:98:c5:e2:e2:68:72:6a:02:88:7c:68:
e7:f9:03:31:d0:24:29:48:11:c9:c7:52:b8:75:b9:
ae:a7:26:38:52:cf:c1:f0:45:70:8d:cd:59:c9:7f:
fa:e2:98:e9:03:76:ec:33:5d:81:57:dd:ac:aa:1e:
eb:6a:31:36:56:dd:d6:13:7f:90:48:ab:10:5c:0c:
bf:5c:1a:89:4e:30:f5:fe:91:24:08:ed:39:10:61:
f9:30:89:36:0d:0e:f4:11:d1:ea:7d:18:5f:45:50:
21:f3:01:3b:45:e7:9f:82:ef:50:04:fc:1d:40:46:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:42:C5:27:66:87:C0:58:7C:BD:A7:92:08:2F:5D:73:74:4A:DA:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl
X509v3 Authority Key Identifier:
keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
sbgp-ipAddrBlock: critical
IPv4:
192.228.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:dd:ed:2c:fc:54:27:fa:7d:e5:43:eb:05:e0:13:47:05:87:
95:9c:64:6f:21:5a:98:f8:96:b2:36:8e:a8:f8:99:3d:de:32:
0d:af:50:18:b4:39:39:5e:b5:10:f9:50:c6:5e:fc:76:1c:85:
6d:79:7a:3f:f1:d3:9c:8e:21:31:b7:dd:c4:ec:63:48:79:9c:
35:32:cb:92:70:f3:eb:ae:bc:52:38:15:71:19:d1:9e:1e:33:
64:42:85:bd:bd:9c:00:41:73:12:a4:e5:25:ef:49:cc:1d:68:
17:52:f4:0c:8c:fb:22:a0:e8:66:63:c7:16:f3:73:84:6d:d8:
80:d2:61:56:88:d1:aa:ce:2e:a7:6d:f7:f5:4e:35:62:a4:18:
19:58:80:3b:72:61:02:c7:8e:f6:ec:71:b2:da:ff:04:10:f6:
5c:4a:c2:ed:2c:8a:d3:ae:05:92:8d:ee:31:e7:60:99:83:d5:
e3:fc:e1:1e:22:2f:23:92:97:c0:2d:8a:d3:9b:e4:68:27:0b:
d5:6c:00:af:c9:75:73:40:41:9c:0e:e2:c1:3f:c4:3d:d2:a0:
0f:2a:d1:76:ed:44:65:e9:5d:ad:27:0d:2e:d8:db:43:4a:b6:
92:46:76:63:ea:a3:0e:e9:f4:da:70:6a:b4:87:c6:17:17:70:
50:50:78:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:23:06 2026 by rpki-client