
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d282ba9-02c4-3677-858e-30f49b92f230.roa
File: 5d282ba9-02c4-3677-858e-30f49b92f230.roa (raw, json)
Hash identifier: ECu/pE+NBXFksCOsXANQkxVOy9i7a0OIiJR9wss8JFE=
Subject key identifier: 96:4C:59:CA:10:C0:D3:49:A3:A7:00:84:57:66:C5:D9:B8:81:BA:3E
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584EE423437E59AA5108748913C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d282ba9-02c4-3677-858e-30f49b92f230.roa
Signing time: Wed 19 Aug 2026 18:03:52 +0000
ROA not before: Wed 19 Aug 2026 18:03:52 +0000
ROA not after: Mon 10 Apr 2028 04:00:00 +0000
asID: 2914
IP address blocks: 207.152.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:23:43:7e:59:aa:51:08:74:89:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Aug 19 18:03:52 2026 GMT
Not After : Apr 10 04:00:00 2028 GMT
Subject: CN=ff01600d-5e4b-4636-a46a-a8884f7c29fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:4f:97:3e:25:35:9e:7e:a2:7c:ce:28:4b:
08:c3:5b:e8:b1:0a:b9:a8:04:cd:6a:72:cf:9c:1b:
2e:68:98:f7:98:08:7d:94:d6:d9:69:b7:48:3b:78:
04:6f:a6:3f:be:3e:de:1e:76:19:98:bc:8f:d9:9a:
7b:fd:93:54:c4:00:61:b8:e1:5b:d8:36:f3:05:e6:
fd:3c:64:91:4e:d1:24:70:81:35:12:55:e0:c3:b9:
93:fa:58:62:be:fd:51:9b:ff:ed:e7:61:ea:90:9f:
d6:cb:b0:f4:34:1c:0f:3f:fa:90:f0:a8:43:dd:08:
5f:e4:57:1b:70:43:28:21:a0:7a:44:cc:fb:69:6f:
35:3e:73:23:ab:78:84:77:f2:21:55:4b:ea:eb:78:
cb:06:d9:a8:7d:b2:64:18:fe:84:9e:b2:db:ca:74:
c0:b1:f0:73:03:f5:a4:48:cd:f7:f3:39:36:12:98:
ce:28:7a:11:de:5b:e2:ba:40:a3:5a:88:6e:df:5f:
0c:d1:7e:fd:1b:29:3a:3b:f0:2c:fc:7a:3c:74:25:
37:f8:92:18:b3:e3:6d:b0:60:ad:58:78:45:0e:4b:
74:bd:fa:76:c0:78:8b:da:2d:42:52:1c:a8:38:09:
92:4b:a6:7c:40:5d:2c:f3:0e:42:ea:8d:2a:4b:7d:
46:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4C:59:CA:10:C0:D3:49:A3:A7:00:84:57:66:C5:D9:B8:81:BA:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d282ba9-02c4-3677-858e-30f49b92f230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
207.152.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:d5:52:8b:bd:28:f3:9b:9e:45:4d:58:7a:40:9d:23:c5:c1:
68:70:a4:ca:c0:54:dc:32:a4:76:c7:80:e1:d6:f4:d7:8e:a7:
c0:6e:bd:44:b4:69:45:5a:97:58:55:a3:11:22:cd:b3:3f:09:
fe:07:2a:09:93:0c:3b:68:7a:d4:ce:f6:53:7a:13:9f:17:08:
95:ae:46:e8:81:94:f7:11:a7:87:30:00:6e:21:41:16:04:a6:
5b:36:3e:66:29:8c:3b:a9:08:16:0a:a7:e2:36:2c:eb:ee:48:
81:04:1b:14:80:e6:ef:3b:0f:b7:b8:6c:3e:bc:e3:f5:2b:7e:
63:a4:26:0d:da:4e:2a:07:1f:b6:18:44:e0:0b:34:1d:5c:70:
f8:66:31:33:f8:6c:e7:20:e1:e1:85:dd:cc:51:f6:42:d6:4e:
35:a1:1e:0f:4d:28:15:61:fd:54:9c:23:0c:12:22:aa:43:19:
f0:ac:49:9d:69:97:82:2e:85:57:23:6b:b1:f6:da:ea:be:4b:
db:c8:53:b5:ff:ac:c2:c8:59:a1:b1:a5:5e:e4:50:d6:3c:25:
60:5a:97:34:78:0d:e3:b2:49:de:00:46:a5:20:8a:09:52:de:
f8:42:a6:50:b1:eb:f0:6b:4e:98:72:42:e5:0f:95:2d:75:e3:
95:5d:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:33:58 2026 by rpki-client