
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4b291332-e8b7-3071-9078-2c5477a2c866.roa
File: 4b291332-e8b7-3071-9078-2c5477a2c866.roa (raw, json)
Hash identifier: 9BQreQ0c/ehctr0UXwjdG3HKIloErs6yLu0AInVuEn8=
Subject key identifier: 21:93:F0:33:D4:D1:14:BB:A3:FE:32:82:70:BC:FB:2B:93:43:A1:9E
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584EFE122289DA45026719B3DA00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4b291332-e8b7-3071-9078-2c5477a2c866.roa
Signing time: Sat 29 Aug 2026 01:00:12 +0000
ROA not before: Sat 29 Aug 2026 01:00:12 +0000
ROA not after: Fri 27 Nov 2026 02:00:12 +0000
asID: 20940
IP address blocks: 2001:418:1401:6a::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fe:12:22:89:da:45:02:67:19:b3:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Aug 29 01:00:12 2026 GMT
Not After : Nov 27 02:00:12 2026 GMT
Subject: CN=5473e366-26f5-4893-890a-4810cca29f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:6a:a8:ad:db:3b:4b:c6:3b:8a:d6:55:56:
13:da:0f:32:40:1a:59:ab:1f:09:b8:e2:36:16:67:
97:0b:0b:86:d8:d9:f5:8b:9b:0f:83:a8:de:ee:19:
5a:e1:ca:82:35:95:46:6a:6d:af:3c:03:d9:f6:a5:
19:51:95:2e:23:10:61:e4:97:fe:b9:57:b7:2c:30:
22:4b:ef:a4:da:ce:61:7a:de:ef:89:fb:88:d0:fc:
20:6b:da:e3:f9:8c:f8:c8:f9:75:01:88:6c:eb:06:
30:92:b5:5d:94:ee:08:ee:b4:0d:a5:ff:70:a1:8d:
1b:8d:66:cb:db:f6:62:0f:e8:93:48:e2:fc:78:d3:
a6:fe:fb:87:ac:49:a8:af:3d:fe:0d:b1:9d:61:9b:
91:f4:ef:16:f1:cf:aa:b3:75:41:7c:eb:ba:42:40:
f0:7f:92:7f:6e:08:94:77:6f:af:f4:02:52:58:00:
8d:6a:e2:89:a1:15:2f:de:71:45:e8:b3:ac:fb:95:
5d:04:83:30:89:84:40:7a:c0:a3:38:dd:8f:79:77:
65:06:2e:52:6a:3b:63:22:2e:a0:a3:a1:5c:24:de:
45:31:d5:ea:ca:d5:d0:90:11:75:26:45:5e:42:9f:
4e:36:5f:e1:f8:be:b2:da:de:7e:9b:f6:1c:08:6f:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:93:F0:33:D4:D1:14:BB:A3:FE:32:82:70:BC:FB:2B:93:43:A1:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4b291332-e8b7-3071-9078-2c5477a2c866.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:1401:6a::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:2e:d5:db:42:d4:b5:3f:f1:72:c3:30:d1:a4:b7:41:d2:ee:
54:5a:ab:bd:57:48:91:eb:32:e9:84:d4:11:de:9e:87:8c:9a:
b1:42:99:f0:50:6e:48:63:86:d1:11:2f:a9:52:49:92:2b:26:
34:26:ad:e4:9d:30:bb:e7:5c:b9:f2:ef:9f:4b:7c:c2:22:f4:
1f:eb:90:63:8d:b6:a2:a4:7c:18:e0:57:07:40:14:5d:7f:ed:
b1:80:7e:42:d5:2e:d2:a0:c6:6e:91:7b:6e:c4:4c:45:54:b0:
e5:3f:64:96:1a:07:b8:16:07:24:61:8d:85:13:f2:53:66:0e:
67:9d:fe:81:15:b6:f6:ed:29:a2:bc:aa:56:99:8e:49:c2:8f:
46:5f:7b:81:5d:5c:61:03:ea:ee:8f:91:be:55:20:2f:4c:81:
74:a2:0c:7a:4d:41:43:55:70:10:2a:9e:88:22:f1:09:9f:4a:
b9:e6:1b:c8:94:cf:f7:a3:79:64:9c:1d:79:a5:07:35:39:dc:
07:d3:d7:39:b8:33:23:0f:30:da:f9:a2:20:bc:eb:3d:a9:dc:
9f:d5:15:d3:ff:7d:81:a4:32:e3:fb:f3:5d:ff:2e:61:32:65:
53:10:e4:5b:23:74:b2:06:16:d0:08:0a:ef:2d:eb:ba:ed:c8:
34:e6:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:46 2026 by rpki-client