
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9561e7b7-5c93-3717-8a2b-8dff9753fbc7.roa
File: 9561e7b7-5c93-3717-8a2b-8dff9753fbc7.roa (raw, json)
Hash identifier: T0BF02Esw+A9VWATe69EA6wddC3bm0/lcB3gBpI5/N0=
Subject key identifier: 5A:88:22:1B:0F:9C:5A:67:19:1F:BB:33:8F:E8:4C:3B:06:5B:34:A1
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584F51D2BFA0EAE09F3D827B0480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9561e7b7-5c93-3717-8a2b-8dff9753fbc7.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 397196
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:bf:a0:ea:e0:9f:3d:82:7b:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=7964f6d8-eb32-4028-991d-22601a1ccd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:74:ec:50:b5:cc:75:2e:1d:29:48:ea:3a:
58:5e:99:3b:49:ec:e7:8c:34:eb:41:25:7c:13:95:
ca:f2:8c:ab:10:7a:0e:4e:06:a2:f2:00:c3:2c:63:
4f:39:9b:d2:9c:e6:4e:e2:8e:cf:9f:44:9a:1c:f7:
9c:a0:c7:f1:8e:ee:1a:d8:a3:6c:07:e1:b9:ba:2d:
e4:fb:4f:91:0b:52:e2:39:de:df:b0:db:5a:e1:43:
a5:c8:4d:e6:46:ee:ae:5f:1c:dc:06:24:18:68:d2:
26:bd:5d:74:8e:07:dc:de:d9:a7:a0:e9:66:3e:a3:
d1:4f:e9:e4:07:cf:fa:a1:6c:8c:11:e7:8c:98:0a:
19:a9:30:db:20:2e:74:5a:a8:80:28:a6:c1:ef:61:
32:ed:ea:3a:8e:2a:83:0e:8c:6c:6f:f0:67:6f:c3:
eb:83:d9:c1:85:bd:d0:ae:a0:3e:c2:50:71:de:e5:
f9:f6:11:d7:41:b9:db:ea:1b:b7:b0:2c:78:39:8e:
c2:4c:04:b2:df:48:50:8f:3a:8e:3f:43:6a:71:5d:
a3:13:6f:2b:46:0d:94:eb:d7:d8:d9:8c:8e:ed:73:
7b:a3:bf:0e:80:4a:8f:da:cf:e8:c3:d0:85:6c:4a:
b9:bb:d5:36:93:c5:11:8f:7d:64:1e:04:f8:be:e3:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:88:22:1B:0F:9C:5A:67:19:1F:BB:33:8F:E8:4C:3B:06:5B:34:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9561e7b7-5c93-3717-8a2b-8dff9753fbc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:57:71:2e:2b:96:d5:42:55:1e:f8:06:aa:c4:6a:b2:03:ee:
58:99:d3:7f:01:8a:dc:db:84:67:25:ba:71:ad:1b:73:4f:ff:
b9:34:60:07:55:62:be:d5:7f:77:0a:cd:6d:48:c3:8b:e4:b4:
12:de:fb:c5:9e:75:78:00:0d:85:25:87:55:7a:84:2a:0e:4f:
b4:f1:36:a1:af:40:e4:67:b7:c7:57:50:b0:66:f8:85:87:8a:
85:95:72:e9:f8:4a:06:c6:b2:14:89:9a:96:17:92:9e:fb:bf:
ad:95:33:df:fe:90:6e:19:bf:f6:19:7c:76:dc:bc:73:0c:ae:
4f:1e:02:30:b5:d3:99:6f:15:d2:ed:da:6a:33:c1:05:ad:eb:
eb:d2:85:ef:fb:3b:0d:6b:a5:96:7d:f3:6b:d6:5d:82:91:cc:
63:22:35:6a:e1:f9:b5:9f:32:96:cf:82:05:28:33:a0:fd:9f:
dc:41:54:81:0d:b9:10:1c:c3:bd:24:06:14:f0:f3:fd:bd:48:
36:37:11:9f:a9:d9:3a:2a:b5:d8:63:a2:2a:2e:83:25:38:4b:
70:16:a6:f5:0d:ff:ae:9f:09:ef:cf:ba:13:a7:7c:45:95:6b:
75:eb:66:11:2e:af:da:fe:76:4a:46:d0:b9:cf:f2:18:b4:b1:
37:ce:d4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:03:10 2026 by rpki-client