
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/faa04ed6-bca4-33ed-9842-dfa60644e992.roa
File: faa04ed6-bca4-33ed-9842-dfa60644e992.roa (raw, json)
Hash identifier: FXX+RdwmDOR86mLvgnnVpxbz0qPfqhT54bsXIlG5L6Y=
Subject key identifier: 23:A9:67:4D:C2:B2:3B:14:5C:64:E3:59:36:68:78:78:3D:45:E1:44
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584E34339426C112926410399F00
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/faa04ed6-bca4-33ed-9842-dfa60644e992.roa
Signing time: Wed 17 Jun 2026 17:34:28 +0000
ROA not before: Wed 17 Jun 2026 17:34:28 +0000
ROA not after: Tue 15 Sep 2026 17:34:28 +0000
asID: 36352
IP address blocks: 16.217.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:34:33:94:26:c1:12:92:64:10:39:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Jun 17 17:34:28 2026 GMT
Not After : Sep 15 17:34:28 2026 GMT
Subject: CN=4a2ad7c5-c060-4ca8-b23f-338d568daff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c5:0e:1a:6f:a2:e9:71:48:5a:90:95:29:71:
99:94:db:e6:ab:cf:cc:57:ba:60:7f:09:63:e6:a1:
6e:94:05:c3:8e:16:32:96:db:64:18:6d:cf:ca:6d:
dd:63:42:f3:89:0f:2a:67:d2:a1:a7:bd:dd:a6:66:
d9:ad:70:00:ee:d8:6e:66:24:ff:c2:88:79:d2:c1:
38:99:e5:44:7f:59:f0:76:8a:f3:01:43:93:45:4f:
08:64:aa:aa:0f:7d:c2:f2:44:b5:f8:47:8a:00:b2:
62:29:10:16:c4:55:84:12:4d:3c:4a:59:50:07:61:
3f:33:f5:bd:11:32:fa:79:23:7c:37:f0:50:47:82:
80:cc:f3:84:38:04:24:50:5d:c7:d5:66:99:9c:c2:
3e:62:db:b3:3b:19:8c:3f:ac:79:81:ad:cf:72:0e:
81:db:16:6b:43:28:3d:63:85:cc:b7:92:98:ad:70:
bc:84:60:a1:35:17:04:f0:ad:8b:01:b7:46:53:7b:
34:04:2b:18:86:72:8b:50:a2:44:7a:b4:ec:9c:1b:
04:bd:8c:92:4a:2b:da:7c:74:52:da:48:3e:e5:75:
a1:0b:3a:e2:0c:67:5c:80:2c:dc:8c:90:b8:6a:de:
0d:49:8d:a8:81:55:0b:39:25:73:7b:74:a5:48:1f:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A9:67:4D:C2:B2:3B:14:5C:64:E3:59:36:68:78:78:3D:45:E1:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/faa04ed6-bca4-33ed-9842-dfa60644e992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.217.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:f7:fe:56:48:0f:26:71:d5:a3:48:13:8d:44:c7:7c:54:cb:
4f:1d:bc:fa:f7:6c:75:68:c7:16:26:0b:82:96:0c:e1:5c:e4:
ca:b9:6c:8c:5f:71:b4:f1:66:2c:10:13:9b:50:e9:73:77:c1:
ba:bd:01:bb:a4:5c:b2:60:b1:3c:d9:2b:35:71:95:ca:86:68:
5f:a4:95:2e:64:2e:b1:a9:62:8c:c4:b5:8b:c6:9f:c7:a6:44:
25:49:96:8a:50:88:5a:71:d6:fa:4d:65:b1:bf:97:ae:21:78:
11:04:7e:6c:fa:42:28:d0:5a:a4:d3:4f:af:5f:22:4f:71:92:
b2:b2:6b:3b:88:76:e4:1d:e1:e4:4f:f7:1c:9e:80:aa:a2:85:
88:03:7d:f5:99:87:d4:d3:af:c8:d7:af:9d:f9:4a:7f:16:29:
90:17:fd:78:45:dc:a2:3a:7d:8a:bf:43:bd:ef:3a:40:a3:87:
84:77:fc:ca:58:2a:d7:5f:13:e3:af:e4:13:9a:c8:1c:71:76:
b7:ce:a6:e7:5f:d0:fa:d4:8e:5f:86:f7:c1:1f:61:8c:52:ee:
b3:65:11:95:fd:dc:d2:f3:d2:61:77:a9:14:98:ec:ef:75:a7:
02:58:2a:e2:3b:2f:0c:9c:bb:58:7f:29:dc:c3:6c:4a:df:3d:
ea:85:d3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 02:52:17 2026 by rpki-client