
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa
File: 33981a11-ee98-3be8-afd7-464452a032db.roa (raw, json)
Hash identifier: j2xQfCrV8x7dwkQgrXojQspikKDLOKoZqfHOWPNeZdM=
Subject key identifier: 78:17:9C:F2:74:EE:DD:04:E9:A9:92:7F:4A:2A:9F:68:2F:FA:3E:CF
Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial: 010D0C9F4328584FA42DCE6AB696BFF38FB7CC00
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa
Signing time: Tue 27 Oct 2026 13:00:13 +0000
ROA not before: Tue 27 Oct 2026 13:00:13 +0000
ROA not after: Mon 25 Jan 2027 14:00:13 +0000
asID: 5050
IP address blocks: 147.73.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:a4:2d:ce:6a:b6:96:bf:f3:8f:b7:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Validity
Not Before: Oct 27 13:00:13 2026 GMT
Not After : Jan 25 14:00:13 2027 GMT
Subject: CN=b4008292-1b8e-4419-8f8f-4cf14708629c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:b6:4b:aa:70:02:be:6b:a7:2f:90:be:52:
fd:8b:08:24:7a:2f:ca:45:ae:ee:73:85:30:0f:81:
9f:3d:b5:a8:ef:1a:d5:82:09:9b:a4:07:dc:ee:10:
b0:d8:ae:6b:84:0b:4e:59:92:97:a6:b0:d4:3a:ab:
f4:e5:33:6d:99:e1:82:c0:61:9b:f8:2e:04:15:e0:
75:d3:ea:75:35:01:1a:4c:b7:4c:39:f1:a7:08:76:
90:4c:d8:65:c1:38:81:17:06:cf:74:2f:19:0b:7f:
c4:c7:84:9c:74:ef:04:f7:a2:19:f2:1f:8c:11:de:
f3:c9:18:c8:19:a6:fe:1a:8b:7e:7c:31:a6:f6:f9:
67:06:10:fb:7a:32:5a:32:9e:7f:3a:88:b3:ff:06:
bc:7a:27:88:8d:37:9b:93:cf:38:59:4f:36:9d:d7:
8c:7a:a9:7a:20:1e:05:ff:ee:9b:0a:f6:d7:84:c1:
5c:8a:9e:87:fe:93:c4:b4:01:83:cf:8b:00:e8:74:
04:43:3f:db:ef:08:9f:0b:a7:04:bf:8f:45:49:be:
0e:69:a8:68:d4:e8:eb:0c:b3:1f:25:7b:45:ce:1b:
e0:61:0a:59:73:3c:a8:3b:d5:f3:10:a7:95:0f:e9:
ae:26:02:04:3a:f1:a2:8f:67:d0:25:eb:ae:c6:fa:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:17:9C:F2:74:EE:DD:04:E9:A9:92:7F:4A:2A:9F:68:2F:FA:3E:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
X509v3 Authority Key Identifier:
keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
sbgp-ipAddrBlock: critical
IPv4:
147.73.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:86:62:da:f7:02:3c:d2:77:17:db:d0:b5:cf:56:94:3b:cf:
79:08:3a:bd:4c:12:71:d9:11:57:4e:a7:51:e4:24:7e:97:24:
91:91:71:79:73:6e:7f:3a:aa:fd:41:35:73:29:83:ee:53:20:
7c:3c:67:0b:a9:26:44:1c:e3:b2:49:84:4c:94:49:f7:f9:54:
2e:9b:d8:cc:ed:cf:cc:a0:4f:83:17:cc:a5:cf:87:43:74:68:
c1:96:0e:8a:e5:4a:58:04:fc:27:ed:f3:bf:b0:19:00:f0:cc:
92:88:14:00:e1:c7:93:ad:47:ff:c2:d2:b5:eb:48:2a:6d:37:
1d:5a:28:d5:78:44:d6:0c:76:83:15:92:0a:0f:b3:0e:3b:f5:
fd:4f:3f:c8:36:c7:5a:36:c4:ca:48:59:21:6e:2e:1a:dd:60:
33:63:c1:44:18:19:4d:39:1f:5f:9e:c2:19:44:e8:88:8f:e1:
57:d7:b8:ff:0e:4d:18:46:e2:73:35:16:74:23:f9:9d:e1:78:
e8:2c:ea:ac:1a:a0:a7:ab:7f:7e:3d:0f:95:05:5a:ac:64:61:
fb:b7:a9:ae:6d:85:ed:75:d7:21:38:ff:42:6d:e4:27:50:91:
c6:80:5f:2a:a9:a4:84:e2:12:fd:f6:ea:64:56:c1:c8:49:b7:
a7:4f:5c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:07:36 2026 by rpki-client