
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d1721332-76d6-3103-9282-c8953ddc4b85.roa
File: d1721332-76d6-3103-9282-c8953ddc4b85.roa (raw, json)
Hash identifier: IBM8N0uNcsT1hQKrM1Rh7/KcR5SqiwloYhIB11ynkaA=
Subject key identifier: 7E:7F:7F:BF:57:5A:5F:34:07:95:4A:38:3E:F2:EF:98:74:FC:28:B9
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584F7BB2DE7021BBC88957CC98D6
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d1721332-76d6-3103-9282-c8953ddc4b85.roa
Signing time: Tue 13 Oct 2026 01:00:14 +0000
ROA not before: Tue 13 Oct 2026 01:00:14 +0000
ROA not after: Mon 11 Jan 2027 02:00:14 +0000
asID: 402509
IP address blocks: 16.5.24.0/24 maxlen: 24
16.217.239.0/24 maxlen: 24
192.48.202.0/24 maxlen: 24
192.102.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 30 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7b:b2:de:70:21:bb:c8:89:57:cc:98:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Oct 13 01:00:14 2026 GMT
Not After : Jan 11 02:00:14 2027 GMT
Subject: CN=29c2b8a3-ca3c-4840-a25b-2294001b6036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0c:dc:f8:27:f8:91:2c:ee:fb:1b:ba:52:c7:
d0:ce:2c:87:3c:c9:b4:d4:c8:e8:e4:5a:71:35:03:
48:1a:44:7d:25:c4:03:c2:14:ad:e6:03:94:1e:c8:
5a:71:40:9c:72:a2:4a:29:70:ed:a9:8d:a2:db:66:
a0:2e:a7:55:a5:aa:e0:03:f9:74:fa:27:3a:6f:98:
1e:4c:87:8c:e9:84:10:24:08:e2:9d:f2:9e:73:82:
a9:28:3c:b1:6b:2a:04:8f:62:07:ed:84:78:1b:3b:
e2:31:7a:1a:d4:33:d5:b6:5e:04:d4:63:79:20:ee:
37:4d:25:96:15:75:b2:5a:99:cb:e8:eb:66:d8:49:
c9:60:27:ba:8c:54:06:f3:53:a5:f7:3f:6d:62:de:
29:5c:9a:04:cf:56:41:da:75:1b:88:cd:58:0d:d6:
8d:dd:de:f4:be:a2:c4:0a:bc:36:d1:d6:42:fe:43:
32:61:87:f5:d8:56:8d:f1:81:0a:6c:b0:ff:79:30:
21:39:83:d6:ab:9a:50:eb:c6:fa:fa:f0:17:df:0b:
59:f0:0a:00:c1:d7:08:55:ae:45:d8:31:2f:7f:42:
51:3e:66:be:9d:90:4b:fd:23:75:ed:c1:ea:33:a4:
c0:d0:79:85:ba:82:46:5b:57:db:54:27:01:e6:59:
26:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:7F:BF:57:5A:5F:34:07:95:4A:38:3E:F2:EF:98:74:FC:28:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d1721332-76d6-3103-9282-c8953ddc4b85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.5.24.0/24
16.217.239.0/24
192.48.202.0/24
192.102.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:f4:78:c7:a7:01:65:de:b5:83:d8:2f:7c:25:cc:43:d0:7b:
95:e8:bb:da:f0:14:ad:c3:26:1e:41:48:c6:9b:7d:63:57:a1:
94:0b:f7:cd:98:d3:66:b5:0d:1f:a2:6a:c3:ca:53:fb:0c:84:
4b:5e:e1:3f:3f:dc:c8:45:6c:3c:2d:ad:fa:2c:01:aa:28:57:
2d:43:0d:2d:10:c1:40:e9:f2:a3:cf:c9:c3:82:9e:cc:5b:34:
b2:08:c3:99:06:b8:29:38:ae:e3:b1:c6:36:1b:fe:ab:cb:a7:
3b:f4:fd:7b:79:6e:b9:e2:a8:84:fa:c6:d2:ea:12:54:ab:ca:
26:80:9b:37:e1:3d:1a:cd:5d:3f:87:be:d0:ea:bc:e0:0e:48:
c1:f9:7a:c6:7a:05:29:06:5e:f6:d8:f6:17:1c:9d:d6:23:7a:
7d:6b:9d:78:b6:31:fc:14:a0:5a:99:11:d0:6a:81:aa:36:16:
7b:af:24:05:bf:2c:29:b2:d0:ca:2f:7a:43:92:1f:cf:c6:1f:
a6:d9:8c:1c:6a:77:0a:17:c7:bb:b9:e0:b3:d1:51:54:1b:3d:
7c:6c:06:fa:3a:d7:b2:3f:6f:33:7a:38:87:28:40:75:82:38:
c6:81:82:66:f3:92:2a:56:6b:9a:6b:21:9d:99:bb:9d:37:db:
0d:27:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 23:08:51 2026 by rpki-client