
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a21672ba-8157-3645-afa8-e12fce27f1e2.roa
File: a21672ba-8157-3645-afa8-e12fce27f1e2.roa (raw, json)
Hash identifier: BA6T1C5E5yy4XMJnENzrs1sHejlj5rJehJnomBoKPkA=
Subject key identifier: C4:0D:6B:F0:4F:62:62:7E:5D:FB:39:C0:07:54:9A:48:17:FE:04:47
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584EE4234A93AECEEE582476C900
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a21672ba-8157-3645-afa8-e12fce27f1e2.roa
Signing time: Wed 19 Aug 2026 18:03:55 +0000
ROA not before: Wed 19 Aug 2026 18:03:55 +0000
ROA not after: Mon 10 Apr 2028 04:00:00 +0000
asID: 26812
IP address blocks: 209.107.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:23:4a:93:ae:ce:ee:58:24:76:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Aug 19 18:03:55 2026 GMT
Not After : Apr 10 04:00:00 2028 GMT
Subject: CN=51321e0e-fadd-4ffb-8f21-e2c408276399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:be:81:1c:ac:e7:76:94:7e:a5:ef:ae:76:
23:0f:aa:92:e0:a6:4e:ae:96:a5:6c:0d:58:01:8b:
7a:2b:45:a8:e0:8f:70:90:7e:e3:29:ba:52:d6:f5:
3d:bf:81:16:4f:26:30:86:df:aa:de:f5:c9:3a:e2:
fd:36:b8:b4:c4:38:28:cc:c0:a8:fd:d5:66:f5:5c:
0f:11:3e:18:21:de:16:ba:53:72:37:77:c3:1c:87:
33:be:a9:20:ca:71:41:28:20:33:ab:52:cf:8a:56:
83:2c:1d:47:84:1f:0e:42:a7:30:fc:fb:ed:d3:09:
43:ea:ad:70:2d:36:68:e7:07:be:c8:d7:78:ad:1a:
15:08:38:4c:7a:fe:9e:5c:21:01:58:4b:cf:64:43:
69:9d:43:bd:91:33:f5:00:61:d1:bc:b3:aa:7d:03:
f3:8d:db:fa:06:f7:63:d6:b6:ee:93:44:8f:a6:5b:
89:60:24:e0:a3:42:f9:0f:13:c3:81:ae:aa:56:8e:
fc:b7:c3:14:d7:94:e1:64:bd:88:e3:e4:25:5f:9c:
68:93:ba:01:40:76:04:e5:da:19:74:35:6a:40:3f:
2c:83:f5:64:09:89:58:84:ae:1b:3b:57:4d:0f:b1:
72:1a:9b:c2:1c:bc:61:d3:3b:74:10:b4:6c:a1:1b:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0D:6B:F0:4F:62:62:7E:5D:FB:39:C0:07:54:9A:48:17:FE:04:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a21672ba-8157-3645-afa8-e12fce27f1e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:51:b0:aa:be:32:bb:08:12:ed:53:df:db:3d:c1:72:f1:e7:
be:b9:ad:1a:1a:4e:d2:6f:8a:91:d2:91:30:7e:9c:32:ae:fc:
72:78:6d:16:53:07:07:94:d8:37:c1:0c:b3:b3:90:d3:58:db:
c5:41:5f:ab:92:dd:3e:9b:95:76:b8:4c:50:28:ca:a4:e0:83:
68:da:49:8b:c4:7c:89:75:9f:d0:8b:a6:2f:f3:9e:23:c2:13:
54:05:74:a4:2e:d9:27:61:78:e5:88:22:b2:40:88:38:e2:cb:
32:45:73:6b:b5:70:0e:75:11:f5:a4:33:df:c1:79:0b:42:5b:
45:d6:36:fa:80:0f:a4:25:b3:85:86:0f:d4:7a:4f:1b:4b:d4:
b7:12:d1:4f:38:a1:62:d9:e5:02:4d:1a:aa:fa:bf:75:71:0b:
15:b9:ce:c6:ec:1f:a7:44:51:78:a3:98:3d:64:80:77:fb:7b:
f2:02:9c:b4:80:f1:fe:f7:92:b1:07:80:71:c4:b4:49:9c:18:
34:91:dd:63:28:c0:8b:e7:ec:31:0f:d1:47:91:77:c4:01:59:
58:b0:92:89:af:91:c7:74:55:dd:ed:87:01:48:d8:70:7a:b9:
51:ec:e9:94:94:3d:45:cf:61:35:5f:76:47:f0:5d:78:00:af:
ab:46:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:24:25 2026 by rpki-client