
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/09b45f4c-5d60-3d2d-8cd8-7c64e5db8e2a.roa
File: 09b45f4c-5d60-3d2d-8cd8-7c64e5db8e2a.roa (raw, json)
Hash identifier: NwrcwdWSprsjRx+45ug8Vh463k/nOXkgn7RdRsdfyXg=
Subject key identifier: 67:17:88:1E:E0:98:66:C4:AA:E3:5E:7A:D2:C0:79:45:76:3D:69:C6
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584CAE5732EF7DB4C33B42D3EF00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/09b45f4c-5d60-3d2d-8cd8-7c64e5db8e2a.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 14717
IP address blocks: 207.156.217.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:32:ef:7d:b4:c3:3b:42:d3:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=bb2d915f-1854-449d-8f21-0c93cab3db11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:26:27:80:42:da:71:e0:b9:02:4c:7d:c2:
94:8c:1c:0d:54:10:1e:af:4f:62:4e:fd:72:e5:4b:
b9:a4:af:01:3d:5e:dc:1c:5d:9c:1b:9d:8d:02:8c:
f4:55:54:8f:e8:36:ad:ca:3c:e4:9f:0b:c2:d1:3c:
65:0e:05:3a:57:94:c9:a5:d5:b6:d2:11:1e:02:38:
c6:c8:d9:8b:6f:70:b2:a5:44:09:1a:63:16:0e:e9:
2a:d7:29:08:d8:4a:a2:22:44:a7:e2:6c:ae:a1:3c:
60:55:e8:7b:ac:d8:40:29:00:dd:31:48:fa:d1:25:
cc:34:be:76:f8:cc:ee:f2:67:65:00:89:a2:da:1e:
3f:b1:34:e2:c2:01:f9:a2:ab:5d:21:07:64:86:28:
e4:b7:a0:94:c5:9b:ab:3c:4d:64:be:bc:d7:14:8f:
84:bb:8c:c0:ef:e1:d8:27:ee:7f:87:7c:95:24:c5:
c7:41:6e:70:9a:a3:e0:10:c5:8f:3a:5d:60:7a:8e:
f9:ed:d8:54:f0:c0:c2:d2:e2:b7:9b:fb:23:f1:5b:
79:1c:c4:a8:cc:57:06:d3:03:3e:b7:d5:fb:36:d5:
82:06:92:c8:f2:9e:c3:d3:59:9b:d1:63:1d:06:6d:
a8:6f:96:37:de:ea:e1:a2:ed:67:ed:a9:c8:13:1d:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:17:88:1E:E0:98:66:C4:AA:E3:5E:7A:D2:C0:79:45:76:3D:69:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/09b45f4c-5d60-3d2d-8cd8-7c64e5db8e2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
207.156.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:0e:8b:7e:0b:88:7a:98:ea:b7:28:b7:b7:3b:bc:bc:df:61:
61:9c:ab:4e:ab:4f:ea:32:7e:f1:97:1f:cb:7a:62:bc:0e:92:
1f:1d:98:6e:1c:2f:ef:10:a1:45:1d:ef:8f:c1:8b:1f:a3:55:
cc:df:3b:87:ee:7e:15:4c:9f:81:00:f8:a5:7c:10:d9:2c:7a:
4d:0b:9a:3f:0c:4b:f5:db:75:5b:53:42:83:a5:e6:b0:e8:16:
aa:8d:48:ed:b5:0e:df:c5:71:d2:f9:0e:f1:71:ed:5d:5a:95:
25:f5:03:fe:1f:ca:1b:39:19:d9:73:94:ba:7e:c4:c1:8f:36:
ac:dd:47:56:37:cd:90:8c:c4:e3:f9:b0:e8:69:f2:4e:2a:3a:
8b:b6:c0:e3:28:21:6f:14:9e:97:f7:46:99:bc:39:e5:8a:15:
95:ff:f8:d2:83:c0:ca:24:a6:13:ec:60:a9:ee:74:4d:2d:e1:
4c:77:61:ba:ed:03:34:d0:4a:e6:c4:ca:51:a9:ee:e9:a5:81:
30:af:a2:92:a5:d7:c9:73:a9:31:8f:13:42:cd:49:42:68:b9:
6a:de:7b:31:4c:0d:eb:ce:8b:27:2e:0b:65:96:9b:c9:9e:0f:
f5:47:a0:d8:45:ab:b6:df:8b:5a:d7:10:d6:bc:62:f7:70:7c:
5e:ce:dd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 11:52:09 2026 by rpki-client