
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/be026098-3cc3-3871-9331-643a49d077e3.roa
File: be026098-3cc3-3871-9331-643a49d077e3.roa (raw, json)
Hash identifier: JBtPOp+Qe2NA+COg2eaNRCtGZ/tWTz7OtYnbe/RkI+8=
Subject key identifier: CC:76:07:92:30:B6:BE:8D:29:87:76:DA:FC:A0:B9:25:C8:9A:65:C3
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F4328584F9BCE0015832F62EE0AF53120
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/be026098-3cc3-3871-9331-643a49d077e3.roa
Signing time: Sat 24 Oct 2026 13:00:12 +0000
ROA not before: Sat 24 Oct 2026 13:00:12 +0000
ROA not after: Fri 22 Jan 2027 14:00:12 +0000
asID: 3561
IP address blocks: 208.138.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 30 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:9b:ce:00:15:83:2f:62:ee:0a:f5:31:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Oct 24 13:00:12 2026 GMT
Not After : Jan 22 14:00:12 2027 GMT
Subject: CN=7d9a0bdd-cbef-485a-a38a-c036b46065e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:99:c3:1f:18:97:15:d2:c4:68:3e:7f:3d:a3:
79:38:ec:ea:5b:86:6d:a0:82:b0:8b:49:c1:e6:37:
8e:49:de:80:d3:e5:a9:da:22:f9:ba:2e:ad:03:0f:
de:b2:8d:cf:7b:0f:07:02:94:93:b8:91:60:86:4f:
ae:99:03:de:09:84:9f:5d:3f:c3:58:e7:80:72:6d:
b8:a5:9e:45:e3:97:f9:88:70:04:d5:cd:61:f4:80:
0c:76:80:f3:79:6e:6b:43:bc:65:7b:9b:55:7f:c4:
26:49:ca:60:9b:e9:94:db:e8:f6:ca:8b:a7:b2:d7:
8c:c1:36:8a:57:dc:d1:67:82:37:52:7c:7c:6e:69:
9a:78:18:6b:20:2c:d6:d3:db:84:69:7a:1a:6a:74:
ea:51:94:4a:4b:60:ca:80:ba:64:9e:9d:de:ea:c1:
c7:f3:49:02:9b:57:4f:c2:e8:5e:44:bd:57:f8:f2:
bf:b0:aa:20:3f:3f:b1:29:8e:d1:ca:1d:fd:79:b3:
1d:1a:96:2c:93:37:cd:b5:c5:b4:25:df:80:f1:46:
24:d6:52:59:ba:0c:79:4d:0f:07:16:b6:f1:5d:58:
87:62:4a:73:83:b9:0b:fd:66:90:d0:31:92:f0:d0:
f5:13:da:37:9e:35:7c:bd:c2:87:07:a8:b4:6e:e1:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:76:07:92:30:B6:BE:8D:29:87:76:DA:FC:A0:B9:25:C8:9A:65:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/be026098-3cc3-3871-9331-643a49d077e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
208.138.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:02:13:78:a6:12:8a:79:7f:12:10:b5:0a:1f:ea:3f:7a:b1:
1f:e8:84:48:10:43:dd:86:b8:b0:bf:0a:ff:eb:a4:e4:0b:46:
83:7a:7c:34:65:f9:26:c7:85:26:86:c0:df:7a:d8:67:58:86:
7a:04:19:cd:28:0e:00:e7:9e:08:16:81:08:d9:06:1a:ea:f9:
20:52:9d:fe:b7:b6:05:7c:e2:99:ed:7b:d9:37:b1:3e:8f:36:
0a:95:95:8e:93:57:5a:cf:b4:30:5f:62:2f:b0:a1:ef:ae:50:
75:14:04:a9:e7:ee:e3:76:c9:b5:e3:f3:79:31:66:4d:a4:ce:
c8:bf:f5:b6:6b:74:1b:ef:6e:2c:ce:15:76:a1:f9:8b:1c:a0:
54:c3:3d:e7:7b:62:55:c7:3d:76:56:ca:46:7c:55:4f:48:cf:
bc:70:73:c4:ba:f5:eb:27:3b:31:59:7d:81:19:9e:32:64:0e:
34:0e:ea:ce:76:7c:99:ca:f0:d2:a8:7b:80:f5:69:81:37:16:
5f:e6:cd:d6:05:01:f1:33:fd:8d:8b:1a:15:63:a6:39:6c:7e:
70:71:ac:b7:39:24:6d:e1:37:a2:08:74:5c:34:4b:34:d6:71:
8f:3e:f6:d1:56:4f:43:f9:12:dc:d6:31:5e:60:99:32:6d:c0:
18:6c:3a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:24:34 2026 by rpki-client