
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/18c2ca4e-bd14-382d-a99c-d7cf96ee3658.roa
File: 18c2ca4e-bd14-382d-a99c-d7cf96ee3658.roa (raw, json)
Hash identifier: PlFuCRLB+Yxfft1sFMCXTAdSQV75I3mqVuYS7yxTcO0=
Subject key identifier: 67:3C:2C:7F:81:18:7E:19:38:9A:46:82:30:8C:33:05:10:51:07:89
Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial: 010D0C9F4328584EF6A356C50584E92D35862680
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/18c2ca4e-bd14-382d-a99c-d7cf96ee3658.roa
Signing time: Wed 26 Aug 2026 09:06:28 +0000
ROA not before: Wed 26 Aug 2026 09:06:28 +0000
ROA not after: Tue 24 Nov 2026 10:06:28 +0000
asID: 35847
IP address blocks: 136.244.0.0/18 maxlen: 24
143.109.96.0/19 maxlen: 24
149.106.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f6:a3:56:c5:05:84:e9:2d:35:86:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Validity
Not Before: Aug 26 09:06:28 2026 GMT
Not After : Nov 24 10:06:28 2026 GMT
Subject: CN=5d09b5bc-5e33-4a74-8656-31c75fae705c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:23:99:21:f5:b8:a4:45:3a:95:b3:e6:a9:
93:cd:b8:1d:3b:45:f4:1b:19:fa:1e:8d:57:7e:2b:
31:ba:28:fb:71:e2:92:3a:3b:bf:6c:51:d9:8d:b2:
f5:af:7d:cb:2b:12:50:b8:10:43:0b:f2:ec:d7:f7:
be:0c:4f:e8:3b:66:2d:d3:75:8f:cb:16:dc:26:a6:
a7:f5:cb:25:c2:7d:c6:67:00:84:e9:6d:bf:1a:9a:
fa:3c:0f:97:20:2b:7a:1a:d0:87:85:e6:bf:55:d7:
e5:05:21:cd:93:da:cb:cd:c4:a5:59:19:31:13:47:
64:62:6f:37:fb:88:fd:7e:60:ff:a6:ce:d0:38:50:
f6:7e:42:e5:44:e7:e4:54:88:de:c4:29:25:99:b2:
2c:ff:06:51:e8:f8:2e:b8:0e:fc:98:af:2c:51:5a:
ca:c9:ff:74:23:49:62:c8:87:73:2c:38:63:e8:63:
94:4a:37:4d:9b:16:96:ed:66:1d:8f:3b:a8:9c:77:
70:3f:6a:91:4b:95:53:54:13:9c:b5:fd:ca:c8:a0:
d1:8a:96:8e:6e:06:ff:b9:9f:70:fb:9d:a7:b0:6b:
cc:15:be:fb:22:bc:22:72:92:39:34:ce:05:26:bc:
15:2a:48:98:d0:e6:77:8d:c6:f1:27:46:99:a5:51:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3C:2C:7F:81:18:7E:19:38:9A:46:82:30:8C:33:05:10:51:07:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/18c2ca4e-bd14-382d-a99c-d7cf96ee3658.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
X509v3 Authority Key Identifier:
keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
sbgp-ipAddrBlock: critical
IPv4:
136.244.0.0/18
143.109.96.0/19
149.106.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:dd:79:55:13:d8:42:30:b4:e8:03:1b:91:88:85:6b:03:6b:
bd:20:c0:97:fc:b0:6f:68:67:b2:0b:9a:bb:bc:f6:03:48:2a:
51:22:4b:b5:07:b1:14:29:07:ee:13:25:c0:05:14:5a:71:c7:
47:5c:9b:5a:8f:cd:92:a3:83:44:60:a1:36:b2:e7:6c:da:2c:
6c:19:b0:3c:ab:c7:7d:6b:a6:85:11:92:10:8d:4d:2d:34:63:
e5:8d:3f:f3:4b:98:80:ca:10:29:f8:ff:0b:6a:bc:37:a5:5d:
a2:6f:cc:50:e0:04:70:02:e9:94:08:10:2b:3f:82:62:da:e0:
af:0b:b5:bf:37:20:92:33:f1:f9:c1:b9:b5:1a:17:da:3e:e8:
3b:c3:b2:6d:69:96:dd:b3:f9:0d:40:38:50:ee:d2:4c:bc:ae:
28:23:4c:bb:1a:b1:44:c4:d1:47:ce:f2:1f:b0:28:b5:54:92:
b5:ac:09:e8:da:66:9b:ec:8a:d0:b2:f5:dd:25:35:0f:77:0a:
4f:be:16:5e:af:12:cf:e1:d6:03:ce:28:6e:bc:38:fb:81:3c:
72:96:b5:b9:84:68:0f:f4:58:d2:8d:59:81:0c:b3:59:85:f0:
dd:c9:c9:b1:8f:23:7e:1c:33:88:89:2f:03:77:ae:b1:9a:55:
78:8f:5d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:26 2026 by rpki-client