
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1fc6ab4e-0fb9-370a-926a-863865d366c1.roa
File: 1fc6ab4e-0fb9-370a-926a-863865d366c1.roa (raw, json)
Hash identifier: o215G576kz9qx1cQ/kD/TbYq90NjYBWG4opCx2RwL/g=
Subject key identifier: 25:39:96:A0:F1:A7:1E:5B:54:CE:59:73:75:DA:69:61:6A:1E:C7:5B
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584EB2B1F4E8F25704A913DF3680
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1fc6ab4e-0fb9-370a-926a-863865d366c1.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 397363
IP address blocks: 16.7.20.0/22 maxlen: 22
16.7.22.0/24 maxlen: 24
16.7.23.0/24 maxlen: 24
16.143.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:f4:e8:f2:57:04:a9:13:df:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=a908b314-8bbb-41ef-ae53-76f0252819d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e0:36:6d:13:e7:3b:2c:77:fb:54:9b:5e:18:
b0:a3:e3:30:47:da:92:7c:77:92:3f:b7:1f:51:3c:
14:53:56:66:76:15:39:36:82:4f:57:f1:8d:18:0b:
39:8e:6c:df:3c:f8:9f:d1:b7:a7:97:52:6f:f2:eb:
be:55:88:77:d5:23:cd:47:14:dd:01:d4:97:5e:79:
f2:86:68:eb:cf:fc:d0:85:3d:d6:44:0c:23:7a:7c:
1e:9b:23:69:a3:f7:eb:64:2d:fe:8e:fb:9b:05:50:
cb:77:b5:10:3b:b0:13:dd:6a:eb:59:b2:e6:cd:67:
c6:6e:b7:ae:73:4a:2a:69:8f:4f:0e:b4:37:c2:22:
4d:1a:4b:63:af:d1:07:fb:a1:39:e2:38:af:ec:eb:
52:88:02:95:85:d2:0d:c2:38:d1:bd:d2:42:26:74:
51:f4:14:35:3b:6c:ea:c0:c6:ee:bf:44:81:75:1a:
36:ed:df:ed:10:48:43:a5:47:90:3e:6c:7f:18:50:
5e:1d:2d:8f:40:e9:91:69:d2:88:57:bc:60:53:00:
d2:40:89:71:29:5e:b7:6e:60:61:f5:ed:8c:f3:b1:
79:7d:78:5c:60:5d:a2:0b:40:50:ed:2a:4f:08:ab:
b1:b9:89:cf:a3:50:1d:37:3b:54:c6:3d:0f:6f:aa:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:39:96:A0:F1:A7:1E:5B:54:CE:59:73:75:DA:69:61:6A:1E:C7:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1fc6ab4e-0fb9-370a-926a-863865d366c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.7.20.0/22
16.143.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:53:99:81:f1:16:35:27:ef:e4:3e:9f:65:34:d5:a7:90:70:
4d:85:79:b9:1e:fb:ab:7f:a0:78:8e:5a:b7:a2:2d:86:a2:fc:
e1:31:a4:9b:85:d4:91:c2:08:fa:e2:c7:dd:18:0a:d5:51:7d:
c4:72:22:f5:f6:2c:75:de:b3:93:b6:74:4e:03:93:b7:2d:a3:
b8:f6:d3:e4:50:25:86:9b:99:d7:22:a5:2f:d6:0b:be:cb:c2:
da:d1:12:fe:42:6b:ac:29:5f:75:e9:e1:8e:44:82:23:20:b3:
fa:0d:6a:0a:e1:02:3d:b9:77:f6:be:5b:83:e7:5a:b8:d3:d0:
9d:94:c3:9e:01:07:33:8a:cb:04:c3:04:19:de:40:af:56:61:
d2:22:80:b2:6d:cc:95:00:52:02:fc:39:f3:59:10:25:98:98:
a8:01:f6:23:c0:0e:92:b3:d6:40:50:f6:59:53:c6:3e:17:ab:
98:c6:8f:a3:19:b0:ed:09:f9:8b:a5:56:f4:a5:de:92:d4:b4:
f3:4f:57:00:10:b6:34:37:17:dd:6c:62:bb:2d:81:d8:ca:9a:
c2:ba:67:b3:29:50:33:87:43:5d:18:e1:43:47:30:a2:09:e6:
49:8f:ba:32:2a:ef:1d:7a:f9:3f:ca:d7:23:22:f5:10:05:ee:
19:b5:0a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 07:53:56 2026 by rpki-client