
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/3e223fd6-e6be-376b-be27-58334385989f.roa
File: 3e223fd6-e6be-376b-be27-58334385989f.roa (raw, json)
Hash identifier: 1bpiSOH678Mvaq6Z2yf67STMmbt+zmx9Pif5gv+YBK0=
Subject key identifier: EA:A4:19:C4:F9:C6:3A:C0:20:BE:20:1F:7E:EA:05:F2:E3:84:75:1C
Certificate issuer: /CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6
Certificate serial: 010D0C9F4328584F1CC79F21053F8A18E9E69A00
Authority key identifier: CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/3e223fd6-e6be-376b-be27-58334385989f.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 14618
IP address blocks: 45.45.214.0/24 maxlen: 24
136.175.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:9f:21:05:3f:8a:18:e9:e6:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=4ba81808-c943-4a88-ad19-339434dc783b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:1d:70:55:c8:d6:c4:19:03:56:1c:1e:78:
7e:86:ff:9d:97:00:19:9e:40:1f:be:cf:1c:f9:c0:
13:aa:97:cd:d3:02:4a:9d:6f:28:d9:ac:e6:fc:50:
30:04:a4:99:50:0f:35:9e:24:c1:cb:6a:fe:8d:9f:
73:30:06:fd:5d:1a:14:02:05:70:6f:07:22:50:c1:
9f:d4:0a:db:52:0c:59:7f:48:28:40:d6:f5:b0:be:
ab:ed:74:6a:63:94:b3:c5:1d:9e:42:3b:0d:8f:bd:
c6:02:b7:3d:90:56:f7:5d:e0:69:73:41:53:b7:0b:
6f:7d:6c:c8:c1:4c:06:05:2d:78:b2:fd:c2:4e:30:
c8:74:51:d5:48:ef:a5:15:9d:b9:18:74:9f:8a:e2:
36:34:82:73:1c:42:63:ef:76:43:02:cc:9f:f2:18:
78:54:28:6a:69:5a:20:8e:6f:b0:cf:3f:ef:06:cb:
74:ee:fd:40:c9:76:dd:79:13:cb:7c:26:16:9a:ed:
e3:37:71:a2:79:7c:f3:a9:2a:9a:fb:83:f0:a4:31:
3d:c2:94:73:ca:f2:69:1e:05:5c:04:5e:3e:2f:f0:
32:a0:aa:50:1a:d9:8f:70:ae:0a:74:95:0a:cc:d5:
ab:49:9b:56:91:39:7e:ba:7a:67:f7:63:56:38:ab:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A4:19:C4:F9:C6:3A:C0:20:BE:20:1F:7E:EA:05:F2:E3:84:75:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/3e223fd6-e6be-376b-be27-58334385989f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl
X509v3 Authority Key Identifier:
keyid:CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.214.0/24
136.175.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:47:97:26:d2:0e:2b:5d:a8:04:0e:07:98:b0:84:4c:90:de:
71:da:fe:07:eb:18:fa:d8:af:2f:c9:f2:d7:2e:15:f7:7b:df:
73:2c:85:00:2b:9b:e5:ba:94:54:ad:6e:3e:95:bf:ac:f1:47:
02:29:f2:33:c3:d2:6c:07:06:16:6d:f0:b2:3d:25:d7:74:6b:
3d:90:5d:b1:cb:96:d9:66:85:62:4b:82:6c:fa:e8:d9:24:3a:
10:6d:7a:b7:fe:23:ab:80:a4:92:c5:1c:11:30:5a:8e:84:e8:
6c:91:d8:cb:23:0e:cf:82:9b:34:6c:e4:f1:1e:77:d5:6b:8e:
70:85:a4:b4:ec:5e:4e:cd:5e:7b:2c:aa:0a:66:18:58:c7:0c:
17:d6:a9:62:8e:09:9a:a8:f4:21:c3:49:ba:ff:19:c7:aa:13:
22:ca:7b:8a:07:1c:cb:2b:ce:20:08:b2:af:07:a7:85:57:b7:
74:be:2b:cb:c5:ba:2e:18:4e:80:ea:97:7c:42:ca:31:8e:6b:
f2:00:7b:5b:86:5c:a2:34:83:2a:4c:d4:a9:72:93:3b:ce:f9:
12:cc:03:d6:a0:42:c8:20:f6:ca:ae:be:d6:f8:99:81:c9:e5:
f8:1e:90:8e:dc:18:66:fc:46:ab:dd:07:da:ef:77:86:08:40:
60:09:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:34:16 2026 by rpki-client