
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/ed4193b6-de99-3be3-ae70-5a90d912e820.roa
File: ed4193b6-de99-3be3-ae70-5a90d912e820.roa (raw, json)
Hash identifier: SyASTIJ4JEPhtR51PZJXLFy8KoM/PfCkomHtteyzU2Q=
Subject key identifier: D4:73:DE:16:D5:05:20:45:78:A6:59:2B:15:A9:23:54:47:A7:4C:24
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584F80335BD133C0C4BB7A9BD380
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/ed4193b6-de99-3be3-ae70-5a90d912e820.roa
Signing time: Wed 14 Oct 2026 15:42:24 +0000
ROA not before: Wed 14 Oct 2026 15:42:24 +0000
ROA not after: Fri 08 Jan 2027 02:00:13 +0000
asID: 4766
IP address blocks: 16.216.128.0/23 maxlen: 24
192.48.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:80:33:5b:d1:33:c0:c4:bb:7a:9b:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Oct 14 15:42:24 2026 GMT
Not After : Jan 8 02:00:13 2027 GMT
Subject: CN=fb1533b5-2d50-48d6-ad78-82ec9fe3624c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:70:0d:d1:ff:28:2e:db:0b:99:78:03:56:
f9:d6:90:33:1d:a7:a9:32:86:c0:d2:b4:a9:de:85:
17:d9:e7:46:ac:d4:8a:7c:3b:06:58:64:ab:68:0f:
f4:da:94:b3:8d:e2:60:27:1d:55:1a:fa:5b:cc:91:
0c:b6:99:b5:df:f2:59:77:1c:5c:9c:51:27:d9:65:
de:23:eb:a4:33:d7:8b:c5:5b:5d:c0:fe:e4:5d:24:
46:39:16:1b:5f:cd:70:75:54:78:0c:c0:4e:0b:3c:
bc:c7:5d:87:f0:7e:e7:1d:10:d1:68:1e:6c:23:38:
1c:7f:34:77:cb:ac:fb:08:6c:9e:ed:ce:62:ff:0a:
8c:e4:59:87:ec:21:d2:de:87:c9:2e:f5:ee:22:c1:
b9:b1:93:c5:9f:68:dc:24:0a:79:10:3f:66:db:86:
c9:86:74:36:67:ae:17:ee:d3:b8:79:d9:49:09:4d:
f1:2a:0e:3c:9a:a4:38:85:f6:d0:b4:e0:01:13:c6:
e8:7a:f7:35:5f:f0:b7:11:5e:4b:6d:7b:9d:e1:48:
33:16:13:21:ee:a8:9a:a9:c0:08:ce:be:32:55:5e:
b6:90:08:6c:48:c5:06:c5:03:fb:a7:dd:96:d5:49:
7d:fc:e4:24:4b:bf:28:03:bb:22:0b:17:64:e3:52:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:73:DE:16:D5:05:20:45:78:A6:59:2B:15:A9:23:54:47:A7:4C:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/ed4193b6-de99-3be3-ae70-5a90d912e820.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.216.128.0/23
192.48.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:76:3a:f6:33:a1:a6:e6:b6:11:e1:19:9a:cf:e9:0d:58:b4:
85:48:6d:17:50:2f:9f:96:fc:fc:b6:76:49:35:5e:3d:d2:37:
52:14:3a:fe:6c:4f:b3:29:14:9a:67:98:02:8c:4a:a4:39:b4:
68:96:4a:9d:9d:4a:9b:e0:ac:f7:19:9d:ab:b3:a5:1e:d4:b2:
58:2e:e2:df:75:78:be:7d:0a:d6:8b:4d:f3:44:61:27:42:56:
39:36:c9:b8:c4:dd:d1:c2:de:77:bb:58:70:59:2d:99:56:82:
16:99:92:98:70:17:0c:c4:5b:9f:04:78:33:2d:b0:8e:0a:3b:
22:9b:7c:ab:84:cd:e9:c7:52:ec:08:59:58:13:3c:52:9d:bc:
86:2f:35:bc:d6:9f:a4:b9:cd:3c:83:84:9c:bf:68:65:49:e1:
b1:79:35:f6:63:6e:9f:6d:d2:fa:1c:4f:21:a7:23:a2:90:23:
60:2b:85:ca:88:f5:fb:01:14:c4:29:ce:f1:c9:69:1b:36:c6:
3e:e0:da:79:4b:6c:fa:c9:62:6e:9b:c7:90:83:87:de:52:3e:
38:e9:42:87:ed:28:17:ae:8e:34:34:ad:0b:51:5b:6b:f1:84:
b1:b7:e7:eb:b6:a7:e0:d0:c7:e4:a4:e1:a0:c8:e2:34:21:5e:
b1:47:26:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:09:35 2026 by rpki-client