
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa
File: 831e684b-3865-3f29-a227-911e4062b52f.roa (raw, json)
Hash identifier: tQsdVYeWWlk4lhSMg30x/+uOkTD2WiMZhERPFIqHmlQ=
Subject key identifier: 54:A1:64:8F:42:61:3B:6E:38:C6:31:25:7A:5D:89:27:99:26:FB:5F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584F03A78EC5EC3F98663C2F5480
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 9009
IP address blocks: 172.111.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:8e:c5:ec:3f:98:66:3c:2f:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=8fbc393e-60ea-4c50-992f-5692cb920967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:1d:d3:48:db:03:f8:dd:d7:08:a2:09:5d:
35:e7:2c:04:56:96:6f:27:a5:08:46:e3:b6:41:06:
ed:8b:76:a7:bd:24:69:cb:de:a2:34:32:b0:2e:64:
da:a9:79:a8:91:6b:19:55:23:0a:98:0b:2f:60:53:
01:2d:d9:c7:ea:9f:be:7b:ea:81:f1:2d:34:c3:ab:
21:31:fb:fc:1f:a2:cf:ae:aa:22:86:99:27:0b:d2:
12:04:ce:ff:fd:79:c2:55:82:28:a1:4f:ba:02:15:
0c:ed:8a:c1:e2:bc:42:06:d5:b6:42:f3:af:e6:00:
3a:0d:c7:72:a3:d7:c8:9d:70:38:ff:cf:c4:18:19:
47:65:36:ca:2f:31:09:53:4c:97:0d:9d:d8:59:1d:
09:c1:27:26:71:d8:d9:8e:7d:69:22:9a:73:b6:a8:
ed:0b:19:c3:ac:4a:88:72:d2:5e:49:63:f2:cc:77:
b3:0c:da:12:55:ee:dd:5c:c9:8d:88:55:4e:7f:ac:
e3:ea:eb:2e:61:f5:54:53:d5:86:c2:5d:3b:6f:18:
aa:5d:3d:f0:c6:3d:cc:d2:1a:61:50:8a:7a:34:b7:
01:0b:57:74:f0:80:cd:86:cf:5c:00:82:21:8d:58:
10:c7:48:5e:fb:6e:27:0f:47:7e:25:a5:ed:ca:e3:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A1:64:8F:42:61:3B:6E:38:C6:31:25:7A:5D:89:27:99:26:FB:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:1d:dc:6f:ad:a7:83:ce:92:c6:c3:c1:40:86:89:10:3f:99:
b9:6b:e2:c4:c5:9f:79:67:03:07:69:3f:1a:05:93:df:f8:87:
40:6d:08:4c:33:6c:d4:79:b5:f3:ed:25:3e:7e:46:91:43:e3:
b5:f6:6d:ff:7e:3b:03:8d:40:09:0d:89:0d:b2:25:a4:b2:6d:
99:da:c4:80:d7:ef:aa:6c:c3:33:62:a4:85:2e:47:84:5a:41:
02:e4:67:ab:83:dd:80:35:11:5e:ce:3f:ab:36:20:ff:b9:7c:
64:1b:6f:12:fd:9b:a9:78:26:99:42:67:44:47:0d:38:0d:9d:
4a:02:40:14:31:63:f6:72:6c:3c:fe:18:ba:25:db:f9:cf:f4:
2e:72:15:c5:33:d8:f1:f9:fd:6d:ea:ec:b0:5b:43:f0:d8:2c:
0d:b1:54:90:48:21:0d:0c:be:88:8a:ad:2a:62:43:f3:d7:25:
9a:82:1a:d8:44:0d:a8:d2:56:54:85:69:44:9a:0c:ba:20:89:
ea:28:ee:7b:e4:d2:a6:00:39:29:bb:26:17:4d:99:89:3c:4b:
b9:fa:20:01:f9:45:5f:88:92:b0:f2:fd:07:0b:ef:ee:32:3f:
f6:a5:17:08:ef:61:10:e9:c7:f8:a3:ba:7e:88:7f:78:32:59:
67:7c:6b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:22:59 2026 by rpki-client