
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/dfac43be-96c9-3168-8ce2-5e356aa49ff0.roa
File: dfac43be-96c9-3168-8ce2-5e356aa49ff0.roa (raw, json)
Hash identifier: E51QCdGJmj1qZ/jUbrhJngXjhSlf1cDGkap7/QEZoGo=
Subject key identifier: 1D:A8:59:D1:7C:C9:A2:FE:4F:A6:CB:65:16:4F:35:9B:D6:22:7B:EF
Certificate issuer: /CN=290d06b5-40de-4ade-b707-b5e165af8b33
Certificate serial: 010D0C9F4328584EA788902D003AC5F5E70B3440
Authority key identifier: 6D:61:84:98:4C:41:4F:CD:82:AC:C9:F4:FD:6A:A7:62:2A:69:FB:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/dfac43be-96c9-3168-8ce2-5e356aa49ff0.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16276
IP address blocks: 136.143.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/290d06b5-40de-4ade-b707-b5e165af8b33.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/290d06b5-40de-4ade-b707-b5e165af8b33.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:90:2d:00:3a:c5:f5:e7:0b:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290d06b5-40de-4ade-b707-b5e165af8b33
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3b977188-32d9-41df-a9fc-8f1432062d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:e8:74:d3:75:3a:95:ea:33:3f:16:d3:fd:
88:fb:1c:e5:a0:21:03:36:6f:72:b7:c5:09:44:2e:
32:31:61:b7:64:e9:52:b4:62:05:9c:d7:7e:80:df:
50:ed:b8:1e:d4:94:48:c7:0a:10:bb:ba:66:3f:b7:
7e:b3:2a:40:aa:4b:5a:29:60:5e:18:e3:bc:5f:14:
df:b3:4b:67:1b:42:d1:a1:9f:02:96:d8:c7:3c:66:
aa:0e:98:be:e0:e7:c9:9f:45:db:69:1e:ce:70:9e:
77:6c:cc:80:12:fc:13:89:0f:d6:5a:1f:d5:a6:a9:
f9:22:a6:89:e8:b0:14:37:6b:e6:07:50:87:3b:1b:
e8:f1:57:66:8f:43:9b:f9:da:8c:7b:20:c5:14:ab:
70:d3:1e:55:1a:97:1f:90:04:15:57:bb:aa:f9:64:
9d:4f:38:dd:e7:47:7c:d8:90:52:1d:ad:4f:4e:92:
c7:c6:e2:7a:1e:b2:19:9f:4c:1e:1c:99:7a:08:cc:
bc:5e:64:83:6f:1f:fc:ed:44:ac:ee:95:34:7e:76:
6a:cd:c9:f6:29:9b:03:ca:a1:45:f5:d8:b5:7e:26:
59:45:18:d1:1b:c3:4b:06:8e:29:7f:25:18:98:c1:
e0:d1:df:c5:0f:29:cf:79:55:8d:af:91:64:94:c4:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A8:59:D1:7C:C9:A2:FE:4F:A6:CB:65:16:4F:35:9B:D6:22:7B:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/dfac43be-96c9-3168-8ce2-5e356aa49ff0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/290d06b5-40de-4ade-b707-b5e165af8b33.crl
X509v3 Authority Key Identifier:
keyid:6D:61:84:98:4C:41:4F:CD:82:AC:C9:F4:FD:6A:A7:62:2A:69:FB:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33.cer
sbgp-ipAddrBlock: critical
IPv4:
136.143.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:da:db:9d:7f:36:83:a2:0e:af:03:1d:8f:ae:ec:66:db:b6:
69:77:a1:67:37:5a:a0:2a:75:0c:46:7e:e9:70:a4:d6:c2:fe:
ff:38:7f:75:75:11:73:e6:7b:ff:15:24:2f:65:06:9e:6f:5a:
5c:e0:60:95:8f:f5:8a:36:ce:9f:85:1c:cc:55:9b:bc:a1:f8:
12:32:f0:bb:dc:05:21:d1:7c:b5:63:d9:36:91:ab:ea:4c:47:
26:40:7e:9b:01:ba:f4:2c:7b:7e:37:cc:8d:fe:9a:00:10:3d:
56:a2:0c:ad:16:d2:74:4d:e9:80:5a:df:96:7a:e6:02:c4:ce:
e5:51:e1:6e:88:25:e6:f1:a3:f0:2d:ad:19:38:a8:13:da:12:
e2:1d:b0:90:a1:0d:89:0e:56:ee:60:5d:ac:e9:ad:0f:0c:79:
df:eb:52:a6:da:81:aa:df:0a:69:fb:6d:af:de:a0:c2:2c:b4:
ab:0c:95:c5:a1:dd:7d:97:6a:1c:6b:b2:49:66:82:fd:67:17:
4e:42:bc:13:84:64:8e:80:57:d5:a5:fa:17:00:6b:b6:b5:d5:
5d:dc:07:68:58:9e:b3:c3:76:8e:bf:db:86:e8:bf:fd:d4:cc:
1d:6e:d4:67:b6:d1:b5:32:f1:b6:f4:dc:d6:fa:f0:4f:a1:8d:
b7:6e:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:20:17 2026 by rpki-client