
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52abd704-7d26-3ccc-a7b9-2185dae7e68e.roa
File: 52abd704-7d26-3ccc-a7b9-2185dae7e68e.roa (raw, json)
Hash identifier: HjKTzMM3aHIWecV1m7c4X09R0zsX/GAZZzfGjEZtyRQ=
Subject key identifier: 69:75:EB:C2:C0:4A:C5:13:43:7B:88:A0:77:12:AD:A1:F4:C4:51:34
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584EE4232CB191F76A20DA83F500
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52abd704-7d26-3ccc-a7b9-2185dae7e68e.roa
Signing time: Wed 19 Aug 2026 18:03:41 +0000
ROA not before: Wed 19 Aug 2026 18:03:41 +0000
ROA not after: Mon 10 Apr 2028 04:00:00 +0000
asID: 2914
IP address blocks: 128.241.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:23:2c:b1:91:f7:6a:20:da:83:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Aug 19 18:03:41 2026 GMT
Not After : Apr 10 04:00:00 2028 GMT
Subject: CN=f8767102-065b-43b5-add3-7399c4512b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:20:83:d0:16:57:78:74:13:60:97:ce:21:
31:f2:f8:2d:a6:b9:ee:89:6f:d4:40:b8:db:d6:6f:
2e:61:dc:93:7a:f0:d5:e0:a9:c0:62:17:a8:a1:34:
be:b9:39:b6:86:80:fb:15:b3:5e:d0:46:e6:21:5d:
d3:89:5c:19:c2:ec:58:31:3f:79:51:b7:b2:ed:0d:
f4:a0:65:12:cd:eb:68:0f:42:c6:13:66:b6:5b:af:
65:88:c1:e5:58:be:2a:1a:d4:3d:c8:3f:4f:6c:41:
03:db:4f:f3:1c:6d:32:4a:77:30:de:9b:0a:72:24:
9e:df:1a:20:dd:f2:a7:94:05:82:3f:e1:72:e1:3f:
58:df:97:4f:5c:d3:26:38:69:03:c5:44:bc:67:25:
1e:b0:20:b1:da:58:99:25:01:e6:57:fc:17:6b:d5:
29:8c:eb:a3:76:b2:da:f6:8e:1b:c5:47:1a:89:e5:
50:40:84:ac:bd:61:db:d7:ea:f9:c2:e5:f4:6e:29:
df:a3:44:b6:f1:ef:96:64:fa:cc:92:17:a1:95:7c:
88:68:0c:b7:98:c3:f1:f0:4f:75:2c:6c:07:83:29:
4b:2d:25:2d:f9:cf:b1:5c:ad:98:ae:99:f9:14:c1:
25:d8:1a:08:93:38:44:db:f4:84:49:94:4c:fc:75:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:75:EB:C2:C0:4A:C5:13:43:7B:88:A0:77:12:AD:A1:F4:C4:51:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52abd704-7d26-3ccc-a7b9-2185dae7e68e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.241.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:be:df:f1:fc:64:14:8a:40:a9:63:9f:a4:10:86:16:50:e1:
b8:a0:c5:2f:09:be:d8:3d:42:32:ff:2f:f1:a2:c5:92:bc:8d:
2c:86:b3:9f:b4:4e:1c:4b:bb:28:10:0c:ff:bb:52:a3:d1:fa:
6a:70:db:67:c0:35:92:87:be:d5:92:0a:05:60:95:7e:9e:ed:
28:40:0c:ab:bb:5d:ed:3d:df:36:b9:7f:74:b8:89:97:66:a8:
c2:53:fc:73:a2:93:eb:ed:e4:12:71:db:20:7a:e9:57:63:8f:
d7:e1:cb:19:80:70:ab:86:35:1e:1f:b0:c7:07:1c:4f:93:68:
3e:22:7e:d8:84:a2:06:bc:8d:20:38:0e:02:67:63:02:19:83:
48:51:c2:da:a8:1a:96:2b:09:14:5f:d6:ca:ea:9b:d0:a9:22:
c8:09:64:b3:bc:d8:17:7b:16:0a:d5:fa:ff:af:93:90:69:b9:
8e:fc:14:ab:d1:20:a4:b8:75:06:09:ad:93:4b:9b:8b:0e:62:
6e:a1:5a:f1:6b:7b:b3:99:a9:04:56:d7:03:dc:5b:37:88:a9:
6d:e9:31:34:5c:09:aa:71:ff:2e:ff:4e:4f:8b:df:97:d1:82:
e7:b2:7e:ff:40:b3:24:91:5a:ed:d6:d1:86:b7:32:79:39:b6:
c6:ef:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:05:13 2026 by rpki-client