
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/a818896b-7daf-37f6-b3fb-21abf321d2b7.roa
File: a818896b-7daf-37f6-b3fb-21abf321d2b7.roa (raw, json)
Hash identifier: bmwPrWK/yZcg4E77rQ8dymBkcvYvyFs5jd6ao3bfG7Y=
Subject key identifier: C0:79:75:75:91:2E:27:42:37:E7:34:6A:5A:58:E0:43:59:1C:B1:C6
Certificate issuer: /CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
Certificate serial: 010D0C9F4328584F497576B264BC5D06BFFBA5A0
Authority key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/a818896b-7daf-37f6-b3fb-21abf321d2b7.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 55079
IP address blocks: 162.208.108.0/22 maxlen: 24
2604:ab80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:76:b2:64:bc:5d:06:bf:fb:a5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=043bafb8-5b44-4533-877b-f574d3724d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:0e:03:22:a4:58:13:d7:e1:d2:12:50:ab:
34:16:f8:fa:ea:b9:12:a7:c0:6b:12:f8:0b:f1:8c:
c0:85:00:3f:52:ac:ea:56:5d:5a:69:b6:3d:28:64:
81:13:16:b7:59:cc:a5:4c:64:96:66:d3:f9:54:ca:
0f:a3:6c:f3:58:c4:a0:d1:1e:ad:fb:93:36:a7:b2:
c6:30:15:4b:49:0e:7e:9a:e9:0f:9a:09:76:78:59:
a9:ec:5a:5c:4b:bc:17:29:b5:8e:df:fe:cc:4d:35:
b2:a1:ba:18:e0:56:2c:81:1d:a1:2e:94:fa:46:b3:
b0:59:c7:81:e0:3b:75:81:bf:a2:9b:55:f0:ce:41:
44:2c:f1:a4:0c:01:d0:ff:98:2b:e2:1c:fb:15:ca:
67:56:f9:f3:26:47:c0:7c:5c:0e:e2:62:fb:a1:b6:
8c:16:f3:34:e1:94:ca:7f:59:94:34:4b:f7:68:78:
86:32:7d:a8:b9:2b:24:a5:5b:33:08:9a:19:25:e5:
41:cb:37:68:02:46:71:b1:2e:d7:0d:b4:b4:fe:c8:
85:6b:4e:ec:17:3f:05:9f:25:62:0b:b6:bc:2d:e8:
55:81:20:66:c9:bc:8b:04:a3:2b:7c:14:e2:de:45:
12:08:10:8b:08:a2:8a:ec:f0:a4:0d:84:1c:95:28:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:79:75:75:91:2E:27:42:37:E7:34:6A:5A:58:E0:43:59:1C:B1:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/a818896b-7daf-37f6-b3fb-21abf321d2b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl
X509v3 Authority Key Identifier:
keyid:58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
sbgp-ipAddrBlock: critical
IPv4:
162.208.108.0/22
IPv6:
2604:ab80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:19:07:06:cc:a4:14:d7:9f:ba:78:b9:a8:1f:fb:58:14:f9:
18:0d:ed:69:53:a5:00:20:3a:7b:9a:84:99:f8:cf:9a:69:f4:
5c:34:85:f6:14:d9:e5:98:e6:a0:91:d0:82:5c:92:66:a8:18:
3a:f2:94:7b:e4:63:60:77:1a:16:44:d4:8c:54:16:bd:18:e7:
69:9a:6f:a6:42:81:66:55:25:3e:8d:84:fe:a1:1f:bf:2d:b1:
11:9c:6b:9d:18:56:51:de:1c:d7:5f:37:73:29:7d:82:ce:09:
fe:4d:0d:bc:63:d8:75:c7:1b:f3:80:6a:31:d7:1e:b8:e8:27:
7e:5f:69:fd:37:2e:c9:f0:67:a2:90:b7:1d:73:2c:d5:c6:ab:
18:a9:24:58:97:17:cb:6d:b0:3f:73:e3:11:07:36:4a:32:34:
85:e6:d5:cd:72:f8:38:13:1e:32:6b:c0:ef:1f:1a:86:8c:54:
89:1f:a9:81:ae:a3:f6:54:be:f4:3a:11:52:94:fb:b6:5a:ab:
cc:bb:cc:e5:95:47:9b:2d:7d:55:59:95:ff:32:78:f5:e5:83:
98:57:82:30:a2:68:a5:40:b2:d1:77:24:58:da:f3:9d:27:ae:
b3:8b:37:02:9a:7c:fa:12:87:0d:9a:4f:ec:19:4e:35:69:8e:
91:c8:2c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:36:33 2026 by rpki-client