
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/32431604-3def-332d-aa32-3ca7eac2c014.roa
File: 32431604-3def-332d-aa32-3ca7eac2c014.roa (raw, json)
Hash identifier: SwONYAgUUtQksL0TRtxpdVPme3229Ix8m5RfiUjA2Zg=
Subject key identifier: 88:D8:08:79:FA:FF:A7:DB:65:64:E3:E1:59:99:F8:BA:07:13:0F:D2
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584EE42342CD17AFC696364C34C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/32431604-3def-332d-aa32-3ca7eac2c014.roa
Signing time: Wed 19 Aug 2026 18:03:52 +0000
ROA not before: Wed 19 Aug 2026 18:03:52 +0000
ROA not after: Mon 10 Apr 2028 04:00:00 +0000
asID: 11158
IP address blocks: 209.212.228.0/24 maxlen: 24
209.212.229.0/24 maxlen: 24
209.212.232.0/24 maxlen: 24
209.212.233.0/24 maxlen: 24
209.212.234.0/24 maxlen: 24
209.212.235.0/24 maxlen: 24
209.212.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:23:42:cd:17:af:c6:96:36:4c:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Aug 19 18:03:52 2026 GMT
Not After : Apr 10 04:00:00 2028 GMT
Subject: CN=198f15ce-d2ec-476d-968d-75b034d9e62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:dd:2c:6a:8d:57:6e:e5:6e:96:28:3d:a4:
4c:a7:e6:1e:65:c1:21:dd:1b:34:80:53:43:16:8f:
6d:22:48:8f:54:cb:4b:bb:f4:bd:db:58:75:b1:5a:
d6:22:17:82:95:c8:af:f8:ea:bc:7b:25:e1:4a:1a:
64:4b:54:2d:89:e2:bf:d3:43:02:ef:be:59:fc:87:
9b:37:98:ef:94:30:df:98:ba:53:67:39:17:94:fe:
42:92:61:56:bc:a0:63:76:f0:c9:81:58:ee:88:5a:
c8:2e:78:07:72:4c:96:01:70:c6:a1:10:ca:21:36:
9c:75:75:90:e4:85:b8:43:e3:b3:dc:8b:b9:fc:4c:
a7:12:bb:f7:a9:eb:bd:8b:c7:63:13:f0:d5:9f:cf:
a2:13:47:1d:49:18:98:a6:13:73:f8:65:ed:24:46:
93:90:ed:f2:b0:f5:fb:b9:06:95:aa:5d:40:fe:b9:
4f:11:3a:a1:7c:76:4b:1f:48:e5:9b:41:e8:c7:87:
41:88:9d:16:3b:7a:1e:44:38:fb:1a:fc:d0:b7:11:
a5:91:14:00:da:6c:c4:3e:4f:73:64:3f:12:8c:03:
0d:64:5c:23:13:f7:1a:b9:d3:2c:99:4d:35:a8:e5:
dc:88:75:97:fb:f8:09:c1:cc:bb:1a:02:8f:d1:06:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D8:08:79:FA:FF:A7:DB:65:64:E3:E1:59:99:F8:BA:07:13:0F:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/32431604-3def-332d-aa32-3ca7eac2c014.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.212.228.0/23
209.212.232.0-209.212.236.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:96:81:1d:f3:47:98:c8:93:5d:b4:11:93:44:ec:82:e3:c0:
e9:4c:87:bf:80:7b:ab:43:cc:b1:51:cb:8f:fd:cf:1b:05:36:
cb:d2:15:75:ed:f1:ff:4f:6d:59:75:f0:0e:27:90:f4:35:2a:
42:38:22:5f:07:b7:31:79:50:2c:ff:d2:c4:03:3e:66:72:a6:
bc:2b:53:40:fe:3e:44:02:63:bd:7a:96:54:77:3d:12:35:9c:
2f:6b:3d:36:32:7c:10:d2:8d:0a:af:35:f8:b3:7b:27:99:9e:
67:33:42:98:94:08:f6:a5:ca:72:06:54:58:e8:f7:99:24:af:
51:4a:43:a3:43:64:08:b2:5d:40:a0:73:19:b6:c6:ff:43:64:
2d:ed:af:2b:8f:af:d8:35:a9:6a:f3:48:6d:2a:50:10:36:8e:
3a:74:92:b0:a2:ee:73:ff:76:35:5c:50:54:73:de:30:1a:64:
e4:66:73:8b:58:43:60:9a:e9:7e:ed:72:82:64:63:df:02:dd:
8d:09:e8:c1:68:3d:13:46:16:3d:d9:40:54:23:9c:ca:39:a9:
ac:b7:80:3a:bf:c2:0e:d8:66:85:63:c0:50:1a:90:51:5d:08:
42:d8:5b:03:7c:84:19:21:25:64:b0:93:bd:5c:44:a9:1b:3c:
d4:a3:5e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 06:34:27 2026 by rpki-client