
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa
File: dfef9103-b23c-342c-83da-159fd5780ea7.roa (raw, json)
Hash identifier: unk1rXKH02Nf6MRm6ur/1z9HJo9dOU4dDhkIvTXguZE=
Subject key identifier: 83:91:11:F3:8C:01:05:09:05:A8:EB:F3:0C:ED:DB:72:B8:BD:AF:84
Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial: 010D0C9F4328584ED001F245FBAC2454916D3B80
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa
Signing time: Wed 12 Aug 2026 13:00:12 +0000
ROA not before: Wed 12 Aug 2026 13:00:12 +0000
ROA not after: Tue 10 Nov 2026 14:00:12 +0000
asID: 13638
IP address blocks: 65.254.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d0:01:f2:45:fb:ac:24:54:91:6d:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
Validity
Not Before: Aug 12 13:00:12 2026 GMT
Not After : Nov 10 14:00:12 2026 GMT
Subject: CN=9fe318f9-1b1c-41b1-9419-b0daec5961fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:1e:ac:00:e6:48:da:7b:e5:70:2b:48:cc:
e0:f7:7b:73:6c:51:2f:99:62:0a:6b:f4:f1:c0:ed:
dc:05:ba:be:45:34:33:6a:bf:5f:1c:84:13:50:a0:
fe:01:b8:e6:e1:b9:2e:ed:c4:5b:ed:96:ca:66:45:
e5:1b:94:6d:11:11:35:31:b3:e4:2e:86:b2:9a:8d:
7f:96:0f:64:f8:43:ce:ec:79:b8:9a:4f:29:96:dd:
49:48:eb:01:d5:10:cb:6c:c1:21:43:5f:9b:1a:3e:
77:c2:a4:dc:ef:1a:f5:93:51:10:c4:6d:24:a4:46:
44:86:a1:6b:73:27:20:03:07:55:74:db:1e:59:af:
bc:90:3d:49:9d:16:51:8d:e3:02:c0:b3:2b:d9:a5:
ef:70:b0:2e:cc:a1:ac:d0:87:c5:c1:22:95:24:45:
13:17:42:c7:5b:3d:de:c6:c6:cf:a2:29:a5:34:78:
be:14:f3:53:c0:2c:a4:78:cb:b0:e3:9a:15:66:cb:
4a:8b:bd:8b:73:7b:af:d7:aa:bc:56:85:dd:05:33:
d3:92:19:da:9a:85:1f:94:f1:be:79:1a:f2:00:fb:
01:78:7c:da:eb:8b:1e:b3:50:d6:5d:69:7c:a0:e7:
14:f6:33:58:48:6e:26:40:35:38:00:f7:63:70:36:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:91:11:F3:8C:01:05:09:05:A8:EB:F3:0C:ED:DB:72:B8:BD:AF:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
X509v3 Authority Key Identifier:
keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
sbgp-ipAddrBlock: critical
IPv4:
65.254.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:81:99:f3:7b:8a:23:a9:58:6f:d7:58:5a:59:24:ba:52:a0:
0a:92:86:ee:8b:57:d2:72:45:9c:66:b4:3b:02:42:3a:62:5b:
94:c2:55:7e:ba:ab:59:1d:b0:b2:f4:9c:70:6f:62:3e:de:90:
fa:4c:14:45:0f:fd:8a:5b:25:7a:f1:47:b0:8b:25:b4:70:f6:
29:29:58:96:16:19:d8:d8:94:10:90:49:f8:ce:0f:fc:0e:5f:
8f:2e:16:69:d3:86:35:0e:94:fd:bd:a6:27:c4:61:e9:22:15:
5e:a3:40:d5:03:63:09:33:48:05:7c:d6:28:cb:24:6f:1e:70:
cb:03:f4:1f:27:9d:c2:18:45:f8:2f:e5:ee:64:3f:06:24:52:
64:eb:13:b9:01:c6:dd:20:30:63:00:6e:19:e0:da:1d:f3:9b:
cd:b2:b4:f3:34:da:20:fd:04:b0:72:cc:5f:43:88:97:0c:fb:
a6:21:1a:f1:3f:ea:8e:b6:8c:b5:a7:11:6d:56:64:86:1d:4d:
36:27:9d:ba:fe:44:ef:eb:b8:21:89:3d:10:c8:6a:fb:48:fa:
33:18:21:bd:2f:ff:d2:91:ec:20:df:3d:de:cb:5f:00:9c:30:
3e:19:fb:84:06:07:13:55:85:46:ce:41:1e:03:b1:0d:cd:29:
bf:af:d7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:54:33 2026 by rpki-client