
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa
File: 6f3608bf-3d7e-3946-adc4-5ab836814644.roa (raw, json)
Hash identifier: uY1IWt2TY7wJFQ0TUbbOLIi/4HazPj3j80p0RziIKe0=
Subject key identifier: C7:58:9A:5F:0D:C0:67:35:95:ED:10:A7:B2:95:BC:25:AB:CE:5C:64
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584F225D06BD22DDA46EE02A1780
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa
Signing time: Fri 11 Sep 2026 01:00:12 +0000
ROA not before: Fri 11 Sep 2026 01:00:12 +0000
ROA not after: Thu 10 Dec 2026 02:00:12 +0000
asID: 8635
IP address blocks: 16.1.38.0/24 maxlen: 24
16.240.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:22:5d:06:bd:22:dd:a4:6e:e0:2a:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Sep 11 01:00:12 2026 GMT
Not After : Dec 10 02:00:12 2026 GMT
Subject: CN=88d45f87-ad90-497a-ae2c-fa506991a2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:a1:c3:cb:f2:57:80:40:03:ca:19:f2:5e:
50:91:b3:88:8e:03:ea:61:ea:8c:47:d1:4a:d0:b2:
76:2e:40:e9:26:83:59:79:85:b3:4c:7a:c8:f0:08:
1f:f7:c1:f0:ed:15:d7:46:ed:a8:3b:63:af:a2:0c:
f8:7b:6c:9a:f0:e1:2c:82:5c:2e:7d:51:a7:74:91:
1d:02:70:39:60:5f:28:5f:25:9f:1f:0a:5d:11:63:
3f:ee:ee:f1:04:c9:ba:97:fa:e5:25:85:b5:51:12:
aa:13:b3:26:86:f2:80:fb:84:fb:58:bb:c7:73:90:
2a:4d:d9:08:c7:34:8d:17:a3:a0:23:13:a6:7b:39:
f0:90:18:e5:1d:2f:59:45:c0:da:c2:5b:aa:80:01:
eb:d7:bf:47:77:a0:40:b5:5e:71:24:fe:af:96:62:
10:48:94:50:ea:da:7c:86:e2:73:51:af:e1:82:1d:
31:20:84:a5:27:4e:87:70:cc:48:b7:09:04:69:62:
91:83:3d:1f:c2:6f:d6:82:f5:b8:f0:b5:e3:e0:5e:
b7:85:7c:3a:cc:7f:92:81:70:f4:66:fb:86:e7:07:
05:8b:f1:4e:54:99:9b:ee:a5:43:07:62:c0:4c:c3:
b2:d3:10:e4:36:98:7e:0b:cf:3a:14:2a:f7:cb:65:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:58:9A:5F:0D:C0:67:35:95:ED:10:A7:B2:95:BC:25:AB:CE:5C:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.1.38.0/24
16.240.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:99:69:83:13:80:c0:e4:7d:eb:63:bf:07:98:b9:94:66:51:
3f:dd:48:eb:9a:b1:4b:85:e0:fe:54:71:6e:fe:0a:59:d4:b3:
e0:0f:35:ab:07:e4:73:c7:fe:76:aa:c9:54:14:d7:5d:cf:ed:
52:15:27:00:14:f0:c9:ae:14:d2:1b:88:c1:69:e4:4b:1e:23:
59:be:d9:97:d0:90:74:eb:14:a0:4e:38:c7:24:a6:62:c1:1d:
7e:a0:43:45:c1:6f:b3:ed:ef:fa:f6:59:fe:1b:83:f9:38:18:
fe:27:83:97:ec:d8:89:76:49:4b:e8:af:dd:05:25:1b:f6:90:
c6:02:96:77:87:37:47:72:b5:9d:67:40:64:36:11:21:f4:f7:
53:08:3f:95:38:57:44:8b:2e:de:82:8d:d7:90:c6:9d:f2:3a:
2f:42:c2:58:19:eb:65:38:53:57:69:59:5e:84:09:5d:c1:77:
c0:f7:b5:19:a8:3d:0a:b7:c7:8f:eb:b4:60:93:d5:4c:e6:cf:
13:cf:ee:fb:41:71:9b:1b:32:e2:0b:05:95:4c:1f:f0:cb:17:
a0:2f:d9:39:7c:21:b3:35:87:7e:21:75:24:a7:34:ea:f8:dc:
50:ae:6c:bd:cb:f9:2a:1c:ec:c5:4c:05:a8:2d:e9:3d:a9:ef:
b2:49:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 07:06:55 2026 by rpki-client