
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/600283ff-d1c9-3253-9924-f5ece3bd7839.roa
File: 600283ff-d1c9-3253-9924-f5ece3bd7839.roa (raw, json)
Hash identifier: 2CdbxKJmi9eaOVuDbjkP70p6LBXhjSGGHc9vVBHmGmM=
Subject key identifier: 15:D4:4C:E7:9B:6C:E2:AA:A0:84:DB:A5:44:C2:1C:09:47:28:46:26
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584EFF7774C3C717A42221BE8280
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/600283ff-d1c9-3253-9924-f5ece3bd7839.roa
Signing time: Sat 29 Aug 2026 13:00:12 +0000
ROA not before: Sat 29 Aug 2026 13:00:12 +0000
ROA not after: Fri 27 Nov 2026 14:00:12 +0000
asID: 3257
IP address blocks: 161.58.0.0/16 maxlen: 24
198.65.128.0/18 maxlen: 24
198.65.224.0/19 maxlen: 24
199.240.0.0/16 maxlen: 24
206.58.0.0/16 maxlen: 24
206.86.0.0/16 maxlen: 24
207.21.128.0/18 maxlen: 24
207.22.64.0/18 maxlen: 24
207.31.192.0/18 maxlen: 24
207.32.64.0/18 maxlen: 24
207.33.0.0/16 maxlen: 24
207.97.0.0/17 maxlen: 24
207.150.0.0/17 maxlen: 24
207.153.128.0/18 maxlen: 24
207.153.192.0/18 maxlen: 24
207.158.192.0/18 maxlen: 24
207.159.0.0/18 maxlen: 24
207.196.0.0/17 maxlen: 24
207.197.128.0/17 maxlen: 24
207.199.0.0/17 maxlen: 24
207.206.0.0/17 maxlen: 24
209.69.0.0/16 maxlen: 24
209.75.0.0/16 maxlen: 24
209.130.0.0/17 maxlen: 24
209.157.0.0/16 maxlen: 24
209.238.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ff:77:74:c3:c7:17:a4:22:21:be:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Aug 29 13:00:12 2026 GMT
Not After : Nov 27 14:00:12 2026 GMT
Subject: CN=02449c20-9b1a-4bba-aeb6-a3bdb9104c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:9a:83:29:aa:fa:69:40:79:0c:1e:0d:43:
79:13:c6:7d:75:f8:61:0c:31:27:d4:72:e9:f2:ab:
d9:d8:b8:28:93:71:58:2f:17:2a:c2:be:00:03:61:
e3:f4:74:62:62:b1:59:17:dd:f4:61:11:d6:43:49:
50:e1:14:fb:d0:03:43:ba:94:94:f5:8d:19:a2:48:
e3:20:2a:15:91:b1:61:b1:61:c9:92:9c:1e:5b:76:
2d:4f:91:06:50:83:27:0c:bd:fc:f0:b3:0b:55:a1:
6f:d0:37:1f:53:41:b3:c6:0c:b1:00:fb:55:45:f8:
1f:43:aa:f3:ce:77:27:06:08:71:7d:67:ba:37:14:
50:3c:5a:13:68:27:61:09:85:bf:48:57:40:f1:7a:
69:8d:17:3d:5b:2f:38:d1:2f:22:86:e3:16:2b:00:
5f:04:6d:e8:d3:70:11:4f:4b:af:f6:41:86:5f:85:
32:66:a2:1b:39:8e:5b:4e:8d:46:6a:bf:12:85:d4:
01:9f:ef:33:e9:14:ef:91:d8:e2:8a:4c:88:32:16:
e8:69:1b:bb:68:57:e3:25:de:62:47:82:96:6f:22:
58:51:d0:ab:ee:1b:0c:be:45:4d:5c:13:5a:cb:cd:
ba:70:65:73:52:9a:10:f5:e3:fc:e9:a7:63:54:9c:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D4:4C:E7:9B:6C:E2:AA:A0:84:DB:A5:44:C2:1C:09:47:28:46:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/600283ff-d1c9-3253-9924-f5ece3bd7839.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
161.58.0.0/16
198.65.128.0/18
198.65.224.0/19
199.240.0.0/16
206.58.0.0/16
206.86.0.0/16
207.21.128.0/18
207.22.64.0/18
207.31.192.0/18
207.32.64.0/18
207.33.0.0/16
207.97.0.0/17
207.150.0.0/17
207.153.128.0/17
207.158.192.0-207.159.63.255
207.196.0.0/17
207.197.128.0/17
207.199.0.0/17
207.206.0.0/17
209.69.0.0/16
209.75.0.0/16
209.130.0.0/17
209.157.0.0/16
209.238.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:49:87:31:52:5d:56:a0:bc:ae:ba:d1:aa:70:34:0a:29:2a:
db:31:99:b9:7b:0a:b1:58:f5:8b:a2:ad:3a:88:80:4b:8e:f5:
c0:5e:f0:76:ee:f6:c1:0b:c5:83:b7:cf:68:ed:ee:f7:8f:76:
c8:2f:0c:cc:af:49:38:de:fb:8d:43:0e:55:b9:37:0a:dc:df:
c4:c2:b4:fd:67:72:45:2e:5c:13:7b:a2:ea:d8:ad:e9:ce:33:
4c:0d:b3:07:3d:06:23:1f:cc:b9:cd:5b:6f:b1:b9:d7:5b:03:
86:82:b5:ac:3b:28:72:0d:70:82:3a:8d:83:1a:0a:5f:27:d8:
c6:3c:c4:72:a2:f2:10:a6:59:7d:1a:f1:60:fa:3e:a6:d2:03:
01:92:b5:2d:12:5d:db:f7:16:75:63:b8:2e:67:d4:76:5f:94:
aa:91:61:26:40:da:9e:7a:e0:de:86:13:f6:4a:9c:92:57:77:
66:b1:6c:8c:53:bf:5d:3d:8d:a8:56:47:48:a5:fa:af:5d:e5:
8c:16:0f:32:89:fe:ea:50:98:46:25:0e:70:a1:d9:86:76:9e:
0a:97:a0:20:6d:e2:84:03:95:fe:c8:cb:a2:de:e9:d9:81:89:
14:64:0d:32:23:9c:f0:74:05:21:0c:71:0c:ec:dc:6b:e2:6c:
a5:c9:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:31:44 2026 by rpki-client