
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/0c3f5430-239f-317b-b59b-582d1725d1e6.roa
File: 0c3f5430-239f-317b-b59b-582d1725d1e6.roa (raw, json)
Hash identifier: DXb2r4Xm4Aw9HD2LudxgNqhCvkySHs+q7NGDu1q3qnQ=
Subject key identifier: F7:1F:F4:79:56:56:35:45:B0:BD:DB:96:81:7F:F1:7E:6D:D5:2D:BA
Certificate issuer: /CN=581a8b49-a06e-4497-972f-fd8792bfe9dd
Certificate serial: 010D0C9F4328584F119CF114402796133C2A8700
Authority key identifier: 70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/0c3f5430-239f-317b-b59b-582d1725d1e6.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 14618
IP address blocks: 141.193.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9c:f1:14:40:27:96:13:3c:2a:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581a8b49-a06e-4497-972f-fd8792bfe9dd
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=8a347fa6-383e-45fd-b6dd-02adfce65927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:12:b3:94:72:05:5e:f0:6b:ef:89:92:73:
6b:1a:3c:b9:24:76:b1:37:b3:46:2f:3b:8a:0d:ed:
ca:3a:9c:92:05:d3:66:8f:b9:2b:ba:a8:8e:08:01:
62:c8:13:4a:c5:ca:bf:38:38:23:ef:cb:fa:ea:4c:
bd:dd:25:00:15:ea:4e:5b:97:0d:4d:13:7f:f5:02:
ee:44:dd:43:a0:6b:24:75:89:8a:33:72:d8:d5:5f:
8d:18:84:88:db:8f:2b:93:38:89:a7:78:71:89:d6:
28:5c:59:57:bf:fc:e7:ab:cc:ea:d1:06:f0:12:61:
0e:24:54:1b:8f:d3:e4:e0:c1:d2:58:3b:82:be:06:
b1:96:91:7b:42:6d:88:8b:06:5c:d3:6f:f1:b0:8b:
a6:fe:7c:ec:8b:c3:0a:2b:ed:b5:03:89:17:a2:a5:
35:b6:9e:88:38:0d:be:ff:ba:d8:62:a9:72:36:1a:
b1:fa:94:a1:ac:dc:55:bc:66:9d:35:7e:07:5d:9f:
17:a2:81:8a:47:fa:dd:78:ea:b2:00:80:a3:b1:b1:
89:de:8c:6f:ac:7f:23:30:6a:ca:63:c0:48:3f:91:
3c:e1:76:54:9f:a3:86:ab:59:32:91:96:8f:63:71:
b5:2d:6a:9d:65:fa:ec:33:9a:53:76:1c:1e:96:47:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1F:F4:79:56:56:35:45:B0:BD:DB:96:81:7F:F1:7E:6D:D5:2D:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/0c3f5430-239f-317b-b59b-582d1725d1e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl
X509v3 Authority Key Identifier:
keyid:70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:49:85:58:9c:f8:74:d2:8b:75:c3:61:67:df:56:84:a4:0d:
19:f2:62:fa:94:05:eb:f1:b8:25:71:a2:75:be:d2:1e:dd:5f:
4c:2a:f4:d9:88:d1:7d:ab:ce:6f:0b:a2:3a:7f:16:06:2c:29:
29:5d:9a:7c:1a:63:7c:63:cb:b5:7e:53:a9:68:57:7d:d0:a2:
a1:f6:0f:20:65:cf:3b:aa:4e:ae:49:b9:d0:01:5f:a4:41:40:
60:f4:01:75:dd:c5:d8:78:b2:03:e1:c2:47:73:c0:0a:f1:4e:
cc:1d:93:b4:e6:f3:7b:13:85:16:d4:88:ec:24:12:5f:ba:ce:
36:47:88:1c:bc:2e:fc:58:91:e6:14:c0:a8:99:8b:ee:d2:55:
71:de:2a:ec:2b:9e:e7:95:81:7e:50:a5:09:2d:2a:c0:4d:0c:
15:cd:f3:bc:c7:df:52:cd:f7:06:6f:97:3a:dc:89:df:98:9d:
ce:70:3c:79:5d:14:05:b4:78:2b:e0:c2:ff:71:f8:ec:8f:2b:
79:06:27:37:7d:cb:a7:de:72:b2:06:95:99:0f:1d:10:b1:10:
07:1a:93:a1:5e:f4:a6:e7:ca:db:72:d2:1b:82:21:87:67:e4:
ae:e0:b3:9e:6a:7a:47:7d:6d:74:18:81:32:9e:43:a4:c5:53:
8f:1c:b9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:21:31 2026 by rpki-client