
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/688750a1-01bd-3329-a0ec-8c8b9809bb42.roa
File: 688750a1-01bd-3329-a0ec-8c8b9809bb42.roa (raw, json)
Hash identifier: Fi8zxgAGhfMkMSnk2PuOdHgAawB90uT6h69GKQ+pyj0=
Subject key identifier: CD:32:CB:12:E9:B5:54:92:9D:D2:4B:D5:BB:13:4E:03:BB:4B:95:BA
Certificate issuer: /CN=ce4ba42c-24c8-4d79-9038-d06832a2d447
Certificate serial: 010D0C9F4328584EF197CBB5F6FEE5D8800E2E00
Authority key identifier: B9:5F:80:01:69:B3:FC:2E:A5:CA:C1:E6:18:52:68:80:1F:B5:EC:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/688750a1-01bd-3329-a0ec-8c8b9809bb42.roa
Signing time: Mon 24 Aug 2026 13:44:10 +0000
ROA not before: Mon 24 Aug 2026 13:44:10 +0000
ROA not after: Sun 22 Nov 2026 14:44:10 +0000
asID: 394330
IP address blocks: 199.167.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/ce4ba42c-24c8-4d79-9038-d06832a2d447.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/ce4ba42c-24c8-4d79-9038-d06832a2d447.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f1:97:cb:b5:f6:fe:e5:d8:80:0e:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4ba42c-24c8-4d79-9038-d06832a2d447
Validity
Not Before: Aug 24 13:44:10 2026 GMT
Not After : Nov 22 14:44:10 2026 GMT
Subject: CN=0781124b-eb28-4224-858d-46ba71b72872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:e2:38:e0:53:b2:5a:1f:94:f3:86:24:19:
e3:52:54:32:68:1f:d1:42:97:ee:4f:61:39:b8:74:
41:94:2d:7c:87:5e:9e:61:2c:80:eb:81:ac:9c:30:
03:eb:43:18:cd:af:d7:2f:62:10:9f:b8:8b:d2:17:
0a:5a:26:1b:66:3c:04:21:e9:8e:96:86:e4:27:62:
31:4b:ee:c3:f0:1c:84:79:91:f7:67:6d:55:61:a4:
e7:f7:fc:83:23:40:fd:68:02:89:f9:ad:d5:ba:2c:
d1:b9:d2:35:27:1e:f0:53:4b:80:99:4a:39:ae:16:
6c:61:ff:eb:ad:97:18:fd:07:00:09:7d:88:3d:dc:
e0:31:46:2f:c3:7b:6d:1d:f0:ec:1d:cc:50:ae:ab:
70:ff:16:88:b4:95:c4:9b:1d:28:80:88:21:05:7f:
d3:f7:b8:e3:b8:84:8e:19:ef:4f:d1:99:80:c9:5c:
0c:38:6c:33:fa:3a:d9:bd:15:7c:ae:c1:ec:10:02:
09:3a:e1:e9:5e:c4:94:28:55:88:5e:03:b1:d5:99:
79:93:3c:b8:77:10:53:ce:61:56:af:e0:74:aa:c2:
e6:20:b4:1b:4a:0c:7b:00:b5:f3:66:5e:20:42:b0:
81:c6:f7:a7:01:6e:89:b4:3d:da:97:58:5f:9d:0a:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:32:CB:12:E9:B5:54:92:9D:D2:4B:D5:BB:13:4E:03:BB:4B:95:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/688750a1-01bd-3329-a0ec-8c8b9809bb42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/ce4ba42c-24c8-4d79-9038-d06832a2d447.crl
X509v3 Authority Key Identifier:
keyid:B9:5F:80:01:69:B3:FC:2E:A5:CA:C1:E6:18:52:68:80:1F:B5:EC:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:a8:a1:89:d9:af:9c:43:8e:55:36:c1:04:ec:7f:bf:c3:5a:
84:d2:e0:29:bc:ff:d6:32:34:cd:37:db:ac:67:50:d1:97:4b:
c1:1e:56:bb:9c:64:da:77:a9:00:ac:76:33:c1:30:91:5d:a6:
34:5a:f6:f1:26:f3:4d:3d:a9:e3:18:d7:11:0e:f7:04:dc:4f:
e4:27:27:f3:d0:e8:b3:27:40:16:5b:09:1c:68:fe:74:f3:fb:
15:48:49:ed:34:f6:67:32:45:d8:89:ea:5e:d1:5c:dc:01:91:
2e:1b:30:8c:12:5b:9e:c6:08:06:f5:03:19:1a:13:1c:ef:fd:
a9:f5:3b:7c:1d:52:ac:e5:95:13:f8:de:5b:98:41:a9:92:1c:
c5:1b:9d:66:98:b5:34:04:d8:0b:72:45:95:b5:94:a1:96:0a:
3f:4a:b3:93:dd:ec:77:2d:16:28:e9:5c:a7:6c:1c:a8:6b:09:
38:03:38:8f:18:82:bc:e7:b3:27:3e:98:e0:f2:8a:c1:5f:58:
ad:66:0a:68:8b:b0:5f:f7:79:c5:bf:a4:99:10:bb:f7:01:21:
9f:8c:9a:33:3d:4f:d6:85:f9:bf:06:df:39:8e:98:1c:37:c3:
fe:1a:27:2c:cd:92:bc:df:c6:19:25:2a:44:33:09:be:1d:5d:
7c:46:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:51:28 2026 by rpki-client