
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0b354c56-b1c1-3be3-852d-2a607348a71d.roa
File: 0b354c56-b1c1-3be3-852d-2a607348a71d.roa (raw, json)
Hash identifier: XiM7EOIJ4p/GC4z89ITl1J15EWD/RYmEnFlIonENRBc=
Subject key identifier: 84:2C:11:29:06:96:ED:4E:BC:CB:6D:1D:78:39:ED:E5:8D:71:53:45
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584F093CE9A206045947782E73C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0b354c56-b1c1-3be3-852d-2a607348a71d.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 3939
IP address blocks: 165.254.1.0/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:e9:a2:06:04:59:47:78:2e:73:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=d64a9dc5-af6f-4784-a15c-f9320e55675d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:74:7a:1e:83:87:95:79:93:da:42:73:eb:e3:
b5:13:e7:c5:fa:78:1a:e7:2b:29:54:fa:ba:7f:a6:
e4:c6:63:9a:a4:07:ed:ca:a4:70:12:64:17:46:f2:
cd:d9:84:82:68:06:1b:99:c0:2e:1f:7f:fd:04:bc:
03:51:2e:03:f0:dc:e0:55:d3:4e:f0:8c:58:2a:b9:
74:77:d9:7e:ab:f1:76:68:60:35:81:5a:b0:02:ab:
20:ba:2a:fc:3f:77:95:bc:d5:8d:3f:0c:6f:28:09:
54:ef:08:8c:74:01:d4:86:a7:05:b4:ab:2a:ef:d1:
c1:46:31:e7:7e:61:1f:f0:22:a9:5c:12:98:48:57:
0c:23:28:88:e6:87:2c:7d:ab:95:56:1c:3b:f5:b4:
5e:59:e8:ea:21:d8:66:be:47:4a:07:b5:04:02:e3:
8c:3c:5a:4c:91:81:55:30:e5:19:a2:6e:17:01:95:
46:21:d8:19:b7:e2:a0:77:58:5d:c4:df:ee:e1:60:
cb:2a:13:c4:a5:4b:60:74:4c:a2:b3:28:b4:bb:b5:
03:39:3e:00:62:a4:3d:08:33:bf:37:b5:54:e6:8d:
9a:2e:07:3c:07:2f:74:44:df:b6:cc:13:c7:cc:13:
e2:e1:17:f6:9d:7e:7d:08:b1:06:ef:9c:d1:27:54:
a9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2C:11:29:06:96:ED:4E:BC:CB:6D:1D:78:39:ED:E5:8D:71:53:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0b354c56-b1c1-3be3-852d-2a607348a71d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.1.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:23:37:45:a1:56:59:02:92:6c:45:db:c4:d4:45:41:82:66:
c4:8c:69:90:4f:8a:99:3b:90:c7:9d:81:c5:81:4a:0d:78:7c:
27:11:44:3c:10:cb:82:12:23:10:b4:12:87:32:cd:69:fe:87:
8d:f3:61:2e:a5:d3:ea:01:8e:e8:16:d5:63:0a:cc:f2:fa:ef:
d5:0e:16:bc:97:3c:13:43:11:db:16:fe:20:d4:e8:cb:89:33:
84:a2:53:77:0a:c9:67:3f:8a:d0:e7:27:f4:51:32:d4:95:d3:
00:30:6b:25:9f:49:fe:df:9b:80:8e:ec:cb:00:92:a9:65:3e:
93:d1:f8:28:27:62:f0:52:b0:f1:f5:ab:e4:8d:32:0c:3a:c3:
94:da:21:29:c2:41:e3:57:b4:08:9e:e9:20:90:61:32:92:5c:
00:5b:e8:47:06:1a:67:c8:03:2a:3f:a7:b8:51:36:dc:b4:c9:
14:af:90:4d:a6:a2:73:f5:47:c2:c8:fb:c5:9d:62:e4:db:6d:
cb:0a:6b:a4:64:5f:8f:67:70:e5:7a:64:a3:3c:63:09:c3:6b:
4b:e9:c3:f7:64:bb:08:e8:fa:17:d9:86:1b:7c:c6:01:b6:61:
cf:a4:81:dd:e0:59:da:3a:e1:66:dc:26:6c:1e:34:9e:5e:01:
3a:30:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:14:12 2026 by rpki-client