
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa
File: b9903dfd-ddbe-3fba-9d99-deda5659260c.roa (raw, json)
Hash identifier: x8JIRqI4zFqSDFmCUjuWAwmO7LjLJAXeorlhS9aiV/U=
Subject key identifier: EB:CF:9E:82:3D:31:B6:CF:2B:61:A1:BF:65:C0:9F:9B:D5:49:3D:6B
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584D0D426A507692015F1118FE00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 11537
IP address blocks: 163.253.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:6a:50:76:92:01:5f:11:18:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=bd7a7542-90cb-409b-bf22-8027ddb7e5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a0:86:e6:03:92:5b:fb:cb:f4:19:53:d7:42:
ce:c7:fa:17:15:f5:04:f0:03:dc:2f:10:9f:ac:19:
c8:25:27:ac:11:a5:ee:86:ae:1f:9a:95:aa:13:36:
c5:e1:18:ba:44:d4:16:a2:ce:5d:24:20:af:10:26:
ea:68:63:f9:1c:6b:51:e0:65:dc:c2:55:a1:e2:f5:
02:c2:26:60:e6:15:0d:12:05:34:2b:53:9a:37:29:
0a:d7:a2:3d:96:92:2f:84:63:65:5d:f7:34:00:d7:
b6:38:76:e6:42:09:3f:71:b0:7b:10:17:c1:c8:57:
c6:d4:08:30:5e:22:10:db:dc:38:52:32:de:ab:40:
b6:73:b5:51:b4:e6:7e:8f:24:84:f2:7e:db:07:75:
76:b1:f0:74:a0:e0:3b:47:71:ff:5e:c3:04:3f:09:
fe:12:2f:b3:59:2e:50:b3:42:0d:36:ec:34:06:d9:
90:b6:60:23:f9:16:cf:c1:2a:c0:de:aa:b9:89:94:
60:d8:56:e8:55:a2:6e:51:67:b5:c6:5f:4e:6e:be:
94:2e:16:eb:26:df:07:75:2b:0a:63:cb:1d:44:ff:
5c:bf:c8:c0:08:e2:45:c9:d3:1c:15:85:23:7e:5a:
93:27:39:ee:af:46:cd:e2:c5:6c:63:12:84:14:cf:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CF:9E:82:3D:31:B6:CF:2B:61:A1:BF:65:C0:9F:9B:D5:49:3D:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:7d:1b:84:d2:b5:a6:7d:c1:be:8f:5b:7b:d9:75:2d:bd:7d:
51:5d:f9:6b:3a:18:d1:87:d4:cd:8f:21:c7:51:61:12:5e:3a:
41:19:84:9e:80:fd:6c:25:18:ea:a4:bf:c4:de:81:e2:d2:bc:
48:89:7d:af:38:74:00:c8:b1:90:5a:40:95:da:e0:e0:90:fa:
25:0f:ed:92:5a:43:f5:1f:74:93:a4:3e:ae:48:f0:b9:59:70:
58:95:ce:4a:93:d6:5f:cb:f2:15:fd:e2:54:ff:36:f2:8d:ff:
67:f6:9a:45:fb:3a:ab:1d:fe:8f:58:73:6a:4f:1a:15:f5:60:
f9:a7:30:5a:89:af:f4:cd:16:39:56:33:ac:d0:95:77:af:d0:
e7:41:f6:7f:79:b9:2f:b6:e5:a2:5a:4c:dc:9c:96:64:a6:ff:
d4:6f:f8:fa:aa:32:fe:2c:58:8c:ec:2e:44:e0:ed:96:4c:a8:
e6:65:5e:26:88:ae:76:7e:e5:59:6a:6b:a0:99:ec:fc:fd:87:
7c:9a:00:df:b5:8c:4d:32:50:d6:4e:4d:bc:4a:c1:ca:c9:74:
c4:65:d5:97:79:ed:7d:02:9a:a5:96:84:e0:57:7f:c4:61:fa:
69:9f:7d:13:37:b0:ad:d1:97:c5:63:30:c4:d3:8d:42:e6:de:
a5:19:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:14:06 2026 by rpki-client