
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d34eb871-32de-3081-9e5a-b6fccae76bc9.roa
File: d34eb871-32de-3081-9e5a-b6fccae76bc9.roa (raw, json)
Hash identifier: diLk1G/lb7+cHGdANaeHA3V2DqRey3F4PoE0M/QhXRE=
Subject key identifier: 2C:84:05:5B:9B:73:70:69:CF:7C:A8:5E:2E:64:68:EC:EE:94:27:3A
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584EE42341449BB344A8F036DA40
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d34eb871-32de-3081-9e5a-b6fccae76bc9.roa
Signing time: Wed 19 Aug 2026 18:03:51 +0000
ROA not before: Wed 19 Aug 2026 18:03:51 +0000
ROA not after: Mon 10 Apr 2028 04:00:00 +0000
asID: 2914
IP address blocks: 165.254.159.128/25 maxlen: 25
2001:418:1444::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:23:41:44:9b:b3:44:a8:f0:36:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Aug 19 18:03:51 2026 GMT
Not After : Apr 10 04:00:00 2028 GMT
Subject: CN=67631d7d-80e8-4cc8-aaae-a46173a97700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:f9:63:a0:11:f9:ea:f2:55:ed:78:12:2c:
a1:d3:a6:ac:8c:a3:98:1a:15:9d:f0:8a:dd:51:81:
15:87:e1:d8:95:89:ac:66:a4:51:1a:50:a6:ca:8a:
53:9b:f3:d0:02:ba:a6:1d:2a:b9:6b:aa:79:3f:8a:
f9:08:15:31:34:e1:b7:2b:aa:01:64:0c:9a:9b:31:
aa:a7:4a:b3:39:1b:02:da:53:ac:90:f6:2f:a3:28:
14:5b:cb:a5:fe:f9:c3:07:58:06:51:dd:05:eb:c5:
82:da:bf:d8:d0:58:b5:98:14:ab:22:fa:a9:29:18:
9a:ad:4f:ff:14:2f:f8:90:a9:c8:9d:59:20:48:dd:
4d:53:1a:d1:8a:05:a3:fa:5b:15:d9:c9:b0:81:78:
b3:c3:69:a0:04:a4:01:5e:d3:49:42:70:84:b7:2f:
d4:ef:85:57:3c:25:50:a9:b0:77:a9:ad:3a:44:a5:
7f:8c:10:1d:5a:ae:db:8a:9f:c1:bf:b6:5f:59:92:
8e:e2:ab:6b:8a:d5:c9:09:62:ba:b4:a3:e9:53:74:
c9:18:86:86:a6:43:48:5a:b7:5f:f3:1c:cf:1d:0d:
24:47:e1:23:a7:b8:84:07:31:42:81:b1:dd:f4:d4:
78:9d:63:0c:52:91:ab:56:49:02:f3:92:10:db:56:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:84:05:5B:9B:73:70:69:CF:7C:A8:5E:2E:64:68:EC:EE:94:27:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d34eb871-32de-3081-9e5a-b6fccae76bc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.159.128/25
IPv6:
2001:418:1444::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:16:cc:a7:9a:40:4a:89:ce:f2:39:b1:b0:43:d7:a5:bc:3f:
89:ee:71:ae:cd:3d:e0:8b:4b:6a:19:52:f7:0c:cc:19:57:7b:
72:33:b0:26:9e:7d:2b:b3:ea:c8:21:a3:a0:98:4d:99:65:c5:
60:04:f4:43:5c:3c:42:2e:cf:4e:8d:cf:2a:ee:eb:27:85:8c:
c7:3f:7e:93:5b:95:67:5c:93:99:74:fa:6a:28:ca:32:ea:28:
8e:8c:85:43:83:7e:c6:57:49:bc:07:e4:c4:51:f2:0b:f7:25:
74:3e:87:f6:61:e2:d1:94:32:7c:99:6a:ff:64:bb:36:d0:0e:
11:0e:cb:be:2d:91:49:c7:3d:41:9d:47:37:ab:62:16:2a:f7:
48:46:a1:3b:33:9d:f0:8d:d0:b2:40:7a:2e:16:dd:a6:b7:00:
59:cb:a3:44:c2:51:36:31:ef:38:6b:31:cd:d2:8f:60:e3:7c:
41:80:af:88:50:c0:b6:eb:40:29:5f:36:d0:c6:d0:23:02:32:
12:ca:31:f8:61:da:c1:f9:0b:ba:e0:fa:68:44:1e:77:65:cf:
29:34:b7:b3:6a:2f:8e:cc:b7:5f:1a:7e:a3:c4:f1:76:46:2f:
1b:87:4c:f0:90:d9:0b:24:1e:6e:70:80:5f:bf:35:02:b1:1b:
3c:61:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:33:20 2026 by rpki-client