
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2ca4807f-f8f6-3640-8ef3-356b0a165378.roa
File: 2ca4807f-f8f6-3640-8ef3-356b0a165378.roa (raw, json)
Hash identifier: k+3PQQyVbReiEhT9FGVI/eNsUCjC3VR2zKtiK5ouGDo=
Subject key identifier: CA:51:2B:B5:83:E6:1F:C3:17:FE:4E:27:7F:28:73:55:4E:CB:CF:DA
Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial: 010D0C9F4328584EE7BC9B21BE259007FE9B1480
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2ca4807f-f8f6-3640-8ef3-356b0a165378.roa
Signing time: Fri 21 Aug 2026 01:00:12 +0000
ROA not before: Fri 21 Aug 2026 01:00:12 +0000
ROA not after: Thu 19 Nov 2026 02:00:12 +0000
asID: 16509
IP address blocks: 216.198.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e7:bc:9b:21:be:25:90:07:fe:9b:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Validity
Not Before: Aug 21 01:00:12 2026 GMT
Not After : Nov 19 02:00:12 2026 GMT
Subject: CN=d6aecddd-e934-4d2e-acef-ccbeeed3e08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:d0:4b:c1:da:5b:1d:c5:cc:c1:bc:c1:bf:
13:7a:07:77:1e:4a:8e:da:32:38:63:d2:59:bd:88:
6c:1b:66:2f:72:81:1c:5f:f3:32:66:5d:c9:4c:53:
6f:51:2a:e6:15:78:3f:cc:23:74:e3:7b:ed:f4:f8:
0e:1d:07:f3:c5:d0:48:e0:d4:5b:1a:35:bb:5d:50:
38:b0:df:e8:f9:37:0e:69:b2:d5:78:10:ff:1d:ed:
de:e5:b0:d4:61:d4:2d:43:02:51:4d:b3:5d:fc:51:
ad:2c:39:8b:ba:c3:20:88:62:27:f0:e8:22:fe:0a:
9c:1e:d4:bf:fc:59:03:b6:0c:3e:4d:78:84:5a:c9:
f0:a5:59:38:71:10:b4:c4:d6:df:5b:58:2d:e5:9c:
8a:44:52:1c:9a:86:f8:5c:f7:53:c5:08:ed:ae:9e:
8c:19:e3:ef:c9:41:37:76:59:c9:b1:72:e7:24:7a:
59:7d:22:52:ad:8b:42:97:a3:1f:dc:f2:e4:0d:c4:
0c:29:bf:97:98:0b:c6:42:b6:46:be:1e:63:6b:32:
97:62:19:33:c6:ad:88:14:55:22:2e:9a:d3:27:45:
86:a0:92:1c:30:35:37:0d:60:5d:aa:2b:17:74:aa:
e0:33:71:c5:f4:73:ba:a9:51:e6:23:11:93:1e:61:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:51:2B:B5:83:E6:1F:C3:17:FE:4E:27:7F:28:73:55:4E:CB:CF:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2ca4807f-f8f6-3640-8ef3-356b0a165378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
X509v3 Authority Key Identifier:
keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
sbgp-ipAddrBlock: critical
IPv4:
216.198.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:16:78:e4:b6:65:ed:c3:70:2b:bc:66:1f:fa:2d:93:ee:7c:
e7:2b:36:09:1e:2d:fe:48:df:48:77:1b:26:f1:aa:f7:b3:a3:
53:2c:21:85:e3:e6:d6:e1:b7:35:04:93:96:85:62:dc:d7:a4:
da:c2:b0:c9:12:7f:2c:8d:9b:ff:a3:49:71:b6:b5:fe:a9:30:
5c:6f:b8:db:c8:15:5a:9a:c6:6a:98:44:2d:44:2e:9b:64:38:
b2:ca:77:83:de:f6:d4:cd:04:02:65:43:65:7b:f2:d8:4b:87:
84:52:f1:f8:95:60:5c:30:78:6c:c9:62:d8:a5:d4:ce:ff:5d:
2b:a6:f7:48:2a:d8:83:e2:07:48:75:f8:6c:4a:9c:c4:90:95:
51:d6:87:7b:17:00:66:d5:ee:3c:bb:74:c6:34:69:fd:e0:92:
a6:29:bd:14:d8:53:e0:3e:6a:f8:6a:70:3d:01:9d:ec:54:6c:
27:f2:9b:dd:f5:40:d9:29:d7:3a:57:0c:c9:a5:2d:08:7a:24:
92:df:1f:e5:7e:12:3e:df:f5:7c:71:d0:92:84:5a:9c:ef:88:
98:b4:2c:9e:e4:db:d1:94:73:c7:a9:ef:4c:8f:59:52:b5:63:
3a:63:52:7c:de:be:5b:79:63:ed:f6:eb:74:ec:ea:f4:2a:18:
04:d4:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:02:34 2026 by rpki-client