
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8be58f88-515e-3747-a0d7-c69bf7f623ec.roa
File: 8be58f88-515e-3747-a0d7-c69bf7f623ec.roa (raw, json)
Hash identifier: 3YLxel2lvMKL0Wy7R0xa23Zr85fmFpeQL0AvTeXF3W4=
Subject key identifier: 42:68:12:46:0A:C9:F6:2F:7E:77:F3:B8:EB:F8:87:0C:EA:C7:0F:2C
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584E4395C06DAFAD07E8C4DB1F80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8be58f88-515e-3747-a0d7-c69bf7f623ec.roa
Signing time: Tue 23 Jun 2026 05:49:24 +0000
ROA not before: Tue 23 Jun 2026 05:49:24 +0000
ROA not after: Mon 21 Sep 2026 05:49:24 +0000
asID: 11537
IP address blocks: 163.253.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 30 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:43:95:c0:6d:af:ad:07:e8:c4:db:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Jun 23 05:49:24 2026 GMT
Not After : Sep 21 05:49:24 2026 GMT
Subject: CN=1c04c631-3091-4f42-ab1c-e9c0ab8901ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4f:41:44:f4:fc:cf:76:3e:99:4d:0a:dd:af:
11:b7:a8:97:9e:d1:db:e4:69:de:d5:ec:3c:df:59:
cc:55:b8:51:fb:8a:35:07:73:01:cf:c3:09:17:df:
d2:b8:5b:d2:3d:1d:38:ab:4b:24:c9:14:b1:a7:26:
dc:86:62:fd:27:7c:77:cc:24:e2:69:5e:b0:51:43:
a2:c9:6c:6c:c6:cb:db:c4:a9:57:9f:74:4d:58:63:
a6:b1:a5:ec:a2:ea:cf:61:6d:ff:ab:7b:3e:ee:1b:
2c:01:45:17:58:15:28:85:44:57:72:45:66:d2:ad:
f0:c3:0a:ba:1d:74:76:81:45:30:e7:bd:2c:e0:d8:
48:99:91:e9:d4:e6:6c:a6:c5:d2:5e:2a:06:06:ac:
63:25:a6:d2:76:1d:0b:cd:f9:e3:b0:87:11:b8:cc:
85:fb:8f:8c:fc:5f:8b:cf:65:79:2f:7e:f8:1a:73:
a9:ed:82:5d:0e:97:d9:8f:d5:43:4a:df:f5:46:ea:
de:84:12:c0:c2:08:00:59:b7:42:77:8d:09:e6:18:
7b:83:52:48:17:91:b6:95:af:36:30:c8:d9:cf:1a:
c6:02:7b:bb:a1:17:12:6e:76:0d:5c:90:1a:15:df:
c5:69:8d:be:73:67:2e:10:76:21:b2:bb:7c:63:99:
b0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:68:12:46:0A:C9:F6:2F:7E:77:F3:B8:EB:F8:87:0C:EA:C7:0F:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8be58f88-515e-3747-a0d7-c69bf7f623ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:ba:08:dc:76:82:5f:b9:2d:2f:b9:55:a8:a2:f7:6c:30:44:
c2:fb:31:00:c0:eb:05:a1:91:00:84:79:08:20:bd:6e:53:55:
2b:09:5e:b6:42:55:ce:d1:31:31:fa:99:ca:5e:c1:24:5f:0c:
50:ed:88:42:d4:c1:ca:1d:19:e0:3f:ab:3a:f9:87:86:a5:4b:
a4:ac:41:8c:1b:fa:29:c1:a9:d9:53:e3:01:e9:5a:e6:67:a2:
b0:76:6d:50:dc:ff:6a:e4:8c:11:78:b0:b8:0c:42:5d:dd:43:
5d:f6:be:66:90:05:62:e9:d2:0f:de:b5:7f:7f:9f:43:c3:09:
40:9e:22:cd:a2:56:97:64:65:17:b0:87:37:81:53:a9:bb:73:
90:7f:02:f0:67:1b:f2:85:a6:3f:19:00:cd:ed:54:d8:44:00:
50:f4:e5:58:86:8c:2f:ca:e5:f3:ec:6c:36:0f:bd:fb:36:2e:
0a:1d:32:e7:1c:ba:2c:21:da:4d:94:97:3a:6f:71:a8:81:28:
ce:c1:6f:51:a4:ee:b8:a5:72:3c:ca:15:0e:10:06:61:fd:2a:
e7:83:38:d4:a6:ec:ee:9b:dc:28:57:e2:46:e6:9e:35:2d:9d:
7e:b3:3c:fc:07:69:1d:55:fa:33:79:f9:4c:42:3b:53:89:7f:
f2:a0:98:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 23:13:05 2026 by rpki-client