
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa
File: afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa (raw, json)
Hash identifier: rs7Ie9pXpO1jDakHrw/G4fuN+WBSQluWqAQLt9jU7Fo=
Subject key identifier: 81:FC:7C:93:BD:8D:8A:F9:5D:60:CA:C4:26:37:7E:8C:C7:53:2C:41
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584ED431F14EDC98F28C70736B80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 62775
IP address blocks: 163.253.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:31:f1:4e:dc:98:f2:8c:70:73:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=d4ada91e-e349-4e15-a4a8-a1f867f165fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:c6:e7:19:38:2e:55:32:d4:85:eb:d3:ab:
e1:23:50:7a:9f:07:d5:d7:cc:ca:31:aa:35:9c:67:
47:b3:42:60:bf:13:cb:db:1b:22:80:2a:07:9b:52:
7e:d9:f6:7a:ff:2b:fd:35:0e:da:9f:65:36:10:e5:
2e:8d:11:ee:50:08:79:e1:8e:4c:d4:f4:2d:c6:3d:
ed:48:3d:8d:30:e0:df:94:c5:3c:3e:50:92:18:31:
7d:67:88:04:5f:8e:82:a4:a5:29:2b:76:0c:c0:79:
21:d3:b6:d6:e8:e2:57:e7:2c:35:9f:df:c4:ee:9e:
8a:93:7a:e3:cc:46:70:0e:c0:d6:54:de:df:0a:03:
66:2d:aa:46:36:b0:15:68:79:52:51:4f:b6:48:2b:
01:a3:7c:31:b8:80:ad:e2:56:23:43:fd:7d:a4:ab:
8d:a2:14:a3:41:76:99:f6:23:b9:72:75:1f:2c:3e:
dc:61:4e:f2:1f:38:af:33:11:c5:12:73:67:ab:24:
e3:c3:c5:25:69:4e:2a:3e:93:b2:bf:db:88:73:5d:
fc:38:20:60:95:ac:08:43:0f:6d:5c:1c:c6:29:f2:
17:27:40:b0:c0:37:d1:f4:a8:52:38:33:f3:15:bc:
8f:7b:a0:0b:d7:f3:70:60:6b:7a:a3:cd:19:ab:4d:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FC:7C:93:BD:8D:8A:F9:5D:60:CA:C4:26:37:7E:8C:C7:53:2C:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:3c:a7:75:7d:5b:92:70:82:bd:b2:d9:9d:ae:03:38:4e:f4:
bf:5e:9e:a0:6d:8e:e3:6a:2c:0f:d6:59:cb:bf:92:1f:41:76:
45:55:32:5c:5d:69:7e:fa:cd:54:77:d2:f0:1e:3d:3c:2b:4a:
bd:f9:7c:fd:2e:eb:86:68:94:e1:d0:fb:1c:d0:a8:a2:b9:c8:
99:20:6f:5e:47:e2:d9:59:f7:7b:73:ea:9e:a2:7f:b4:ba:ee:
fa:d5:c2:5a:93:0f:31:92:18:7d:aa:05:81:88:02:12:b2:d9:
61:07:b4:91:1f:d3:5e:1a:8b:2e:e3:c6:99:77:de:84:3f:92:
be:1e:21:8d:86:a4:c9:9a:0c:57:26:88:66:6a:21:9d:9f:99:
a7:47:c6:cc:41:fa:8a:e7:53:cc:67:c4:1b:68:e9:66:02:59:
1e:23:8a:2f:bb:34:cd:a2:41:76:0e:0a:df:cb:6d:35:4d:e7:
4a:b9:34:97:ad:fe:2c:73:d2:60:cb:3b:1b:59:19:ea:ae:85:
e8:cc:18:97:3d:a5:4a:50:16:03:b6:68:4a:b3:94:25:97:8d:
cf:2e:fd:21:12:da:d1:0e:16:f0:64:34:a5:a9:3d:4e:b8:98:
80:9f:c7:0d:23:36:69:3e:07:d5:05:74:40:b2:37:47:a2:54:
e5:8b:49:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:04:17 2026 by rpki-client