
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/2f20d648-a11b-3249-b9f6-a2fee3e09f2f.roa
File: 2f20d648-a11b-3249-b9f6-a2fee3e09f2f.roa (raw, json)
Hash identifier: 7EUq2Wdf9GmkEadrH+1O72Y/QrXW5bIZuueZG12AqOM=
Subject key identifier: 2A:93:BE:5A:BF:A7:6E:B4:F8:7A:CB:4B:2F:53:ED:3C:52:3B:9A:C1
Certificate issuer: /CN=c17dbfd2-c39f-4314-88e6-57ca9f713453
Certificate serial: 010D0C9F4328584ECBD1C394124412ACDF5C5980
Authority key identifier: 71:A5:32:04:76:BE:69:12:D7:AE:16:6B:20:6D:15:3C:1E:A8:04:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/2f20d648-a11b-3249-b9f6-a2fee3e09f2f.roa
Signing time: Tue 11 Aug 2026 01:00:11 +0000
ROA not before: Tue 11 Aug 2026 01:00:11 +0000
ROA not after: Mon 09 Nov 2026 02:00:11 +0000
asID: 32150
IP address blocks: 198.49.126.0/24 maxlen: 24
2602:fbef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cb:d1:c3:94:12:44:12:ac:df:5c:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c17dbfd2-c39f-4314-88e6-57ca9f713453
Validity
Not Before: Aug 11 01:00:11 2026 GMT
Not After : Nov 9 02:00:11 2026 GMT
Subject: CN=70d61792-fbeb-4419-9a7f-f9f873727ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:a3:0e:82:e2:31:4c:fd:e2:24:b6:bd:2b:
a7:78:c4:98:c1:77:fe:d3:b8:72:ce:0a:a0:e9:ce:
3c:80:1f:15:f3:49:66:aa:97:ee:57:ce:44:cf:2d:
68:11:5e:43:9d:69:31:8e:0a:b5:a7:28:3c:ba:9b:
2d:bf:39:ab:1e:49:06:e7:f2:11:01:6c:e5:c8:fc:
9f:62:78:9c:cc:fa:e9:02:9e:55:56:ad:1e:20:75:
59:7d:b7:6f:ac:af:85:cd:f0:6f:05:aa:13:dd:67:
4e:af:b5:f6:6c:be:8a:48:7f:1b:20:6c:ee:51:d0:
f6:db:38:8d:e6:4a:85:3b:7b:12:62:97:d2:fa:52:
1a:40:1a:e6:18:a5:d1:1c:55:e4:e7:ec:1a:c5:92:
bb:8a:eb:88:be:23:db:af:d0:d6:7d:66:9f:0e:ff:
6d:b8:32:f6:97:bd:52:96:b6:b9:2c:9c:b8:2c:88:
ae:1e:51:aa:68:3b:f3:f0:2a:1c:41:1e:41:cf:e7:
d5:81:3f:55:c8:d0:a9:89:53:a4:c8:cd:6e:76:30:
b5:6a:4b:34:97:95:79:8f:3d:3a:33:18:91:ba:bd:
c8:73:6f:bf:00:78:04:81:f9:b3:3b:cc:2c:12:c3:
f0:e0:3b:2e:ed:2a:b7:14:9d:46:bb:10:0b:24:23:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:93:BE:5A:BF:A7:6E:B4:F8:7A:CB:4B:2F:53:ED:3C:52:3B:9A:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/2f20d648-a11b-3249-b9f6-a2fee3e09f2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.crl
X509v3 Authority Key Identifier:
keyid:71:A5:32:04:76:BE:69:12:D7:AE:16:6B:20:6D:15:3C:1E:A8:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453.cer
sbgp-ipAddrBlock: critical
IPv4:
198.49.126.0/24
IPv6:
2602:fbef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:04:4e:70:9c:89:0e:27:f1:35:25:95:b1:92:51:61:fb:14:
33:c3:23:d8:81:eb:1c:6c:40:67:d5:c3:33:0f:32:13:01:33:
96:55:8a:6f:ab:ac:aa:37:9d:5b:93:ef:0f:aa:0b:b4:90:be:
5c:8e:c5:1b:ec:f8:bb:e9:7b:9c:62:e1:fe:36:2f:31:c0:e5:
dd:6e:68:49:ac:77:fb:74:85:6c:3d:68:1a:71:22:a3:ca:ad:
53:63:e4:4f:50:b4:45:9a:ab:90:e7:ce:13:27:b9:e7:ca:1c:
78:37:e5:3b:50:c9:3c:f0:2e:83:a2:25:5a:fa:52:04:24:3d:
ad:12:71:46:67:b7:60:23:0c:33:b2:dd:dd:7f:bf:83:2c:b3:
e9:71:fd:aa:31:ea:f5:85:7d:40:b8:27:79:a1:30:ea:7d:e6:
16:9f:6f:20:5a:52:80:ed:7e:a5:25:74:ad:c8:db:6b:f7:8f:
bf:d0:3f:5b:9f:eb:1c:ea:93:72:64:9c:09:52:69:72:f0:b8:
9e:ae:0d:53:b3:81:b2:c4:2e:e9:1f:cf:11:38:bb:c4:7a:80:
26:2b:d4:25:b9:5b:86:e9:39:ea:64:ad:d7:d3:30:ac:54:68:
a1:d4:09:d7:97:6f:6d:94:a7:af:4b:e7:30:95:75:fb:29:c6:
45:28:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:17:11 2026 by rpki-client