
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a1eccb2-6337-379e-af93-90386ea48fc1.roa
File: 8a1eccb2-6337-379e-af93-90386ea48fc1.roa (raw, json)
Hash identifier: FW85oT7BSAdsMlzYIVlO9793hb8oyyPBk2G0Kwj8UXE=
Subject key identifier: CB:1E:31:C1:C2:8C:29:5F:11:D0:77:31:11:16:83:22:5C:47:21:B1
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584EE42343670B465E623412EC00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a1eccb2-6337-379e-af93-90386ea48fc1.roa
Signing time: Wed 19 Aug 2026 18:03:52 +0000
ROA not before: Wed 19 Aug 2026 18:03:52 +0000
ROA not after: Mon 10 Apr 2028 04:00:00 +0000
asID: 174
IP address blocks: 199.239.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:23:43:67:0b:46:5e:62:34:12:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Aug 19 18:03:52 2026 GMT
Not After : Apr 10 04:00:00 2028 GMT
Subject: CN=e15332b1-8e60-45d2-b1c5-b15253cdf2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:fa:94:99:6d:38:b9:5d:f6:c0:14:01:4e:
51:cc:14:6e:1b:05:03:61:5b:3c:ef:65:99:a0:ae:
3a:e7:33:6a:c6:0a:66:45:23:6e:de:ce:d9:c9:d8:
c6:b9:fb:d9:96:56:23:d8:a7:54:16:7e:bf:73:47:
97:0c:43:3f:5b:f4:61:6f:ef:7e:e4:fa:66:77:05:
f0:27:07:5b:9e:f8:a0:b1:6e:f9:9a:32:3b:e4:dd:
90:72:c2:71:3e:65:38:60:8a:16:6c:72:39:4e:31:
f1:20:f1:c5:83:16:7f:62:93:84:88:35:7a:6e:79:
c6:07:80:c2:9a:97:fd:62:17:72:d8:e2:29:5a:43:
db:be:4c:bf:d7:61:6c:c4:28:c7:88:66:82:01:18:
6f:f5:6b:d3:6d:54:31:d2:a8:d9:65:a6:ab:f4:78:
60:05:40:4a:da:47:92:02:e7:cc:bc:d3:dd:58:82:
0e:a7:0d:2f:2e:66:f3:60:31:6b:fd:4f:7f:d2:83:
e8:bc:36:c0:5a:09:44:2c:f3:83:f6:83:c4:f8:15:
24:74:a7:9d:00:bf:c5:4b:62:b2:32:0b:f3:9f:14:
99:fd:87:b2:c3:6b:42:6c:78:30:c8:13:7a:9d:73:
c8:a4:39:40:f1:57:37:3e:94:42:b8:ed:9e:63:3e:
2e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1E:31:C1:C2:8C:29:5F:11:D0:77:31:11:16:83:22:5C:47:21:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a1eccb2-6337-379e-af93-90386ea48fc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
199.239.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:b2:00:7a:f1:29:59:cc:09:00:fd:d1:6a:24:28:88:86:12:
48:ef:2b:7a:8b:c1:5a:c5:8e:0b:d4:57:2d:25:d1:55:34:2b:
7d:85:1f:76:a8:4e:e9:68:1c:92:df:f9:0f:54:40:3f:b3:d0:
24:ec:01:34:56:4f:44:35:f0:79:26:86:8c:33:33:f7:14:22:
a2:c9:4c:64:53:e7:e7:b5:03:4a:7b:9c:dc:69:23:42:8b:c4:
0e:7e:51:20:f4:2e:41:76:81:58:c3:b8:eb:f7:d1:70:61:12:
64:cd:5b:0e:6c:e1:02:21:34:24:14:87:af:f7:ff:8e:7f:66:
a2:d4:8f:13:ca:5d:0a:a7:a6:ad:71:56:f2:3e:0d:3a:45:77:
42:b2:c1:fe:6d:f7:f0:50:71:f6:73:f2:4b:ce:6b:f6:73:39:
da:64:05:6d:f3:87:0a:85:33:03:63:c7:bf:92:ad:1a:b5:6a:
03:ff:2e:93:ad:98:ea:ff:61:c2:05:8f:c3:29:6f:f4:df:62:
df:ae:49:f7:cf:5c:20:f8:59:4e:a3:d8:78:dd:68:a3:c5:29:
be:de:ea:67:32:c7:8a:52:b5:1a:74:27:a0:c7:0e:8c:2f:4e:
ca:6e:2a:c8:b5:e6:4b:5d:d0:41:09:75:13:d9:91:a4:ea:3f:
cf:43:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:46:34 2026 by rpki-client