
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/308ddf08-1625-3723-bc3f-f820104ef5a6.roa
File: 308ddf08-1625-3723-bc3f-f820104ef5a6.roa (raw, json)
Hash identifier: 6GyhFn4Z7MBvfgw/4/nkLq44Hw8Zo4L4CYruDS3+Nq8=
Subject key identifier: 1B:36:88:2C:5F:6C:28:84:22:8F:72:D9:B7:39:52:DA:24:4F:20:01
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584ED861DC5A5145D8611FD23780
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/308ddf08-1625-3723-bc3f-f820104ef5a6.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 396955
IP address blocks: 163.253.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:61:dc:5a:51:45:d8:61:1f:d2:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=77e60db6-c082-4ca4-9fc4-18cc3352e3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:3c:a0:f9:84:15:af:e8:4b:61:0b:d9:48:
d6:4b:fe:f7:3a:e5:a5:37:89:92:c4:df:df:5f:7f:
4c:f0:c2:70:bb:a4:df:4d:f5:c4:87:0c:3a:c7:3c:
a8:1c:44:6c:72:00:4d:5e:63:19:2e:da:51:40:7e:
e2:bf:8b:28:68:91:73:e8:e6:64:ea:dc:e9:f6:3d:
1a:92:98:7c:b1:06:63:af:b6:e9:8e:07:27:0b:92:
e9:ff:2e:4f:09:c8:78:db:0e:07:9f:bb:d3:04:c6:
59:c6:1e:f6:67:d5:6a:d0:ea:38:11:97:7e:a0:ce:
e7:d6:fe:d8:99:1d:2b:01:9e:9c:08:2a:b6:dd:ca:
84:b2:dc:c0:e0:80:99:38:5f:09:ec:71:45:ec:9e:
d7:99:18:6c:21:4a:af:7e:dd:57:61:30:25:be:1f:
65:b9:72:21:ed:76:ee:fe:b1:47:ec:20:bc:90:0c:
d7:05:7b:e5:37:49:66:4e:32:a3:c3:07:c2:d1:e6:
1e:bf:4e:8f:bf:82:d9:c8:c5:d3:bc:0f:ab:de:ec:
04:06:a8:9e:00:df:2e:96:42:4c:c6:bd:42:ec:59:
61:b3:8c:d3:77:e5:68:79:1f:59:08:fb:c7:5e:32:
76:bc:17:c4:fc:dc:ee:8f:6f:24:7b:37:60:6e:46:
97:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:36:88:2C:5F:6C:28:84:22:8F:72:D9:B7:39:52:DA:24:4F:20:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/308ddf08-1625-3723-bc3f-f820104ef5a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:61:40:16:12:de:62:db:08:87:bc:1d:9f:44:3f:07:54:94:
5f:6d:a7:d8:ae:04:18:2b:f3:95:86:b1:17:c0:13:a1:1e:81:
7b:96:fe:8d:41:46:a3:e1:8f:f0:41:c0:9a:97:89:76:db:9e:
3f:83:3e:59:64:76:f1:80:28:f6:95:89:da:ae:0a:cb:1c:95:
d5:d1:80:53:bf:13:db:94:e9:bb:62:fc:bc:45:26:c3:a2:af:
e3:bc:8c:62:a4:66:e5:af:67:b0:67:04:00:ab:fa:da:09:e1:
f5:44:0d:3d:16:3d:fa:1e:da:a2:39:00:ed:15:45:91:d5:77:
a4:16:28:ef:7f:53:54:39:e8:df:73:cc:8c:8e:73:25:fb:5e:
d9:a8:19:d5:4a:c1:54:b0:09:0e:68:b8:de:83:76:11:93:44:
d8:db:48:39:ce:19:34:52:1f:0e:59:41:35:17:7a:a4:e2:c8:
61:62:d2:eb:bd:31:4b:11:4c:51:4b:ce:be:9b:63:dc:5f:2d:
3d:62:08:bd:76:f7:da:37:6d:97:ac:d8:aa:aa:c9:b5:05:f8:
88:3d:99:a7:a7:a5:b0:fe:88:2f:30:6d:21:c3:df:c6:48:b5:
22:1f:e8:9e:15:12:01:43:68:e6:59:3a:6d:07:ce:ac:72:c5:
98:e2:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:21:00 2026 by rpki-client