
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aec7afbd-ae0a-3cd9-935a-afaf161cb307.roa
File: aec7afbd-ae0a-3cd9-935a-afaf161cb307.roa (raw, json)
Hash identifier: rq6Xool5irrE3215FyJd063gaUsYrZpR5yL6gh96WF8=
Subject key identifier: 12:A6:A1:92:BB:00:A0:C0:25:28:19:69:FB:24:ED:78:BF:61:3F:2F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584E43F62485C8BEAF67A9259B80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aec7afbd-ae0a-3cd9-935a-afaf161cb307.roa
Signing time: Tue 23 Jun 2026 09:03:37 +0000
ROA not before: Tue 23 Jun 2026 09:03:37 +0000
ROA not after: Mon 21 Sep 2026 09:03:37 +0000
asID: 402133
IP address blocks: 192.253.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:43:f6:24:85:c8:be:af:67:a9:25:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jun 23 09:03:37 2026 GMT
Not After : Sep 21 09:03:37 2026 GMT
Subject: CN=103d6a5b-8365-4d62-8a40-b5c823e4a423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:92:aa:00:06:53:82:51:dc:d0:93:49:32:
9a:19:af:ac:6e:ae:de:02:c6:c1:4a:ac:f8:84:63:
83:08:31:ba:54:ab:26:e4:81:0b:45:39:0a:06:ef:
a1:8e:69:84:50:1a:08:45:5d:d1:6f:4a:68:2d:48:
16:e9:96:98:2c:d9:b6:04:ab:80:48:0e:26:44:ce:
a7:42:79:44:94:56:8f:58:c0:eb:97:86:10:5c:78:
0e:ce:08:c9:14:bb:fe:d2:3b:74:57:c1:30:5e:46:
a3:3f:1b:34:9c:e8:ed:d7:6c:fb:85:e6:60:54:ee:
28:92:e4:39:e5:bc:66:ea:63:6b:7d:6b:50:1e:14:
13:88:c2:d0:be:b4:41:78:68:e0:96:81:9f:04:fc:
28:8a:a2:3b:77:5e:87:96:2e:16:91:ff:86:d4:19:
c2:4f:5c:6c:14:22:35:11:e0:e8:e3:c1:6f:6d:74:
ad:4b:13:c5:23:eb:e8:4e:ec:75:ba:5c:37:b0:95:
ab:b0:7a:44:08:fb:03:54:a3:40:6d:76:8f:fe:8f:
10:19:02:69:9d:73:28:34:d1:17:c1:dd:fa:77:35:
53:7e:9f:8b:60:a0:05:b2:7d:0a:79:65:fd:06:45:
84:e3:ef:71:ca:7d:2c:5c:61:eb:68:2c:66:9b:7c:
f8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:A1:92:BB:00:A0:C0:25:28:19:69:FB:24:ED:78:BF:61:3F:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aec7afbd-ae0a-3cd9-935a-afaf161cb307.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.253.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:3b:e8:7c:98:1b:57:0e:52:f2:03:a2:e4:d3:eb:82:a8:b0:
79:8d:df:b4:10:68:fc:db:a9:1a:f7:c0:41:7a:fe:f8:01:91:
dc:b4:63:60:df:0d:f8:30:ae:f8:4f:ee:c2:0d:42:c8:16:d0:
39:aa:90:cc:e7:28:f5:ad:7b:04:61:fd:50:40:bf:af:92:0a:
39:93:e4:f1:ef:b5:f9:9c:10:ce:68:c7:0d:b1:38:89:ec:15:
80:07:67:73:6b:d0:7a:e3:7c:54:3a:35:41:86:11:75:e3:70:
ca:d9:c7:48:d6:f7:43:5c:d7:ab:6d:1d:06:7b:65:48:c4:12:
b7:38:87:e4:d7:49:0a:c3:43:7e:f2:41:e6:03:4e:ac:5a:49:
4c:92:6d:9f:26:fa:c9:0b:d3:4b:47:de:79:6f:42:64:6c:f3:
06:dd:13:e3:58:89:72:a3:2a:32:17:f2:65:dc:7d:2a:f8:5f:
19:22:63:55:a7:96:dd:58:00:c6:29:6d:7b:ed:06:56:b7:da:
00:eb:c3:72:e5:e9:95:7a:2c:16:dd:fc:69:41:78:b8:88:8f:
43:bc:d6:04:69:de:75:49:5b:17:68:3b:4d:20:4e:6c:10:15:
23:c8:e7:69:46:42:1f:9a:c4:4a:08:ad:24:87:63:82:07:1b:
25:59:67:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:36 2026 by rpki-client