
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45180ba6-c36f-3dcf-92e4-ff504978e611.roa
File: 45180ba6-c36f-3dcf-92e4-ff504978e611.roa (raw, json)
Hash identifier: aJ4q9AcyMUIyalDycEHt3Vgjk0nrdncuM+GI02m4qpA=
Subject key identifier: 9F:31:64:0C:CC:0B:5B:B4:AB:80:70:E1:27:40:C9:C9:FA:F1:89:66
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584F00DCC77C7F9EB15ADF29A4F0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45180ba6-c36f-3dcf-92e4-ff504978e611.roa
Signing time: Sun 30 Aug 2026 01:00:12 +0000
ROA not before: Sun 30 Aug 2026 01:00:12 +0000
ROA not after: Sat 28 Nov 2026 02:00:12 +0000
asID: 207550
IP address blocks: 140.174.104.0/21 maxlen: 24
157.238.192.0/21 maxlen: 24
192.204.80.0/20 maxlen: 24
198.65.192.0/21 maxlen: 24
199.237.64.0/19 maxlen: 24
199.237.104.0/21 maxlen: 24
206.163.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:00:dc:c7:7c:7f:9e:b1:5a:df:29:a4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Aug 30 01:00:12 2026 GMT
Not After : Nov 28 02:00:12 2026 GMT
Subject: CN=e8038daa-4ec5-4b52-b171-aff8ce35821c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:6c:e1:c7:5c:d1:78:50:2c:71:3d:03:cd:
14:13:4a:53:f5:85:5e:3a:82:34:52:36:9d:07:f2:
59:e9:c0:f6:65:49:e0:f9:36:ec:99:47:ba:a8:81:
38:7b:48:63:41:21:89:1f:a6:ed:56:33:57:e6:c7:
43:60:7f:e8:d2:ce:92:f1:d1:fb:8a:cf:e9:24:1a:
02:60:a8:e0:8e:3b:c7:cf:8f:18:79:eb:a4:bd:c8:
23:c2:23:fc:58:6a:b3:c3:b6:35:b8:e7:09:58:8c:
99:d8:06:c3:78:9b:29:a9:b3:05:6a:78:35:f7:a9:
da:a2:a4:23:23:46:48:e0:f0:ce:54:41:7e:7f:bd:
9e:6f:d2:45:c3:7f:2b:b8:f5:1d:c5:2b:58:10:4e:
b3:83:9e:13:38:d0:6a:42:2e:85:a6:65:a2:3f:45:
37:20:a8:04:4e:88:a6:91:b6:76:f7:60:4d:e7:5f:
5e:98:06:f3:d4:b5:be:eb:be:45:2c:cd:35:1a:7e:
cc:a7:ab:2f:31:63:c7:ff:1c:d1:c6:31:31:82:e1:
19:97:f0:f4:c5:aa:12:46:e1:a5:5d:7e:73:d6:5c:
4e:91:6c:ae:75:d8:9a:c5:f5:17:fb:09:24:84:19:
93:ce:85:da:f4:67:ac:82:16:16:19:2d:0b:3c:52:
9d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:31:64:0C:CC:0B:5B:B4:AB:80:70:E1:27:40:C9:C9:FA:F1:89:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45180ba6-c36f-3dcf-92e4-ff504978e611.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.174.104.0/21
157.238.192.0/21
192.204.80.0/20
198.65.192.0/21
199.237.64.0/19
199.237.104.0/21
206.163.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:2b:0f:50:df:32:73:1f:ee:67:c4:d7:99:98:35:17:43:52:
63:ea:eb:01:e2:6d:69:c1:bc:74:6a:b4:73:31:65:d7:9e:79:
a7:a8:d4:17:43:0a:f5:60:6e:77:e5:b4:95:2b:00:1a:62:59:
fa:ae:a0:99:81:1a:a3:da:25:0b:51:74:5d:6e:02:c6:c1:2d:
8f:ef:7c:25:d5:0c:00:cc:6c:ad:46:f3:76:bc:ed:83:43:9a:
3a:23:be:ea:9c:ec:8a:8d:68:cc:42:5d:c6:8b:d2:e3:e1:74:
94:52:c2:8b:6e:1c:b9:e7:73:cd:66:a1:c6:9a:80:dc:ac:23:
8c:92:df:52:52:5e:06:e8:9d:a7:d4:de:ad:c3:d5:e7:02:9e:
06:23:a0:19:2d:18:4b:5d:33:2f:f4:a1:79:56:a1:25:8b:6a:
4d:c6:33:a6:11:94:fc:01:6e:9e:d5:d7:c7:ec:b6:ee:10:c5:
6e:12:e9:c4:48:1a:9a:41:5b:2e:75:e7:5e:1c:ef:70:63:79:
59:df:7a:36:54:26:e8:14:36:78:65:d9:0b:1b:d3:bf:88:de:
33:cc:7c:1d:b5:78:8b:45:79:dc:74:55:b8:d6:95:bd:69:ae:
ed:45:3b:60:b8:f1:61:17:f4:b7:50:97:53:b7:f6:22:5f:f1:
e7:dc:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:29:40 2026 by rpki-client