
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/7434e83b-96da-3967-bc11-e2c68ce3f8b6.roa
File: 7434e83b-96da-3967-bc11-e2c68ce3f8b6.roa (raw, json)
Hash identifier: DqKdnWlFjSaigj/hm1r8DTWqKY5t1eoY4OKl82UVxKo=
Subject key identifier: 44:61:DA:EF:D5:60:74:EF:C7:C2:12:B1:43:8E:D0:C4:5F:7F:16:3C
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F4328584F0ED23440CD4FB23846109040
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/7434e83b-96da-3967-bc11-e2c68ce3f8b6.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 395963
IP address blocks: 205.213.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:34:40:cd:4f:b2:38:46:10:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=51036dbf-943c-44c9-bd2f-3588e2904ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bc:9a:56:6c:7c:55:f4:74:09:c4:b7:f0:28:
48:6e:8c:5e:0d:e9:a1:d8:93:96:98:06:0d:59:1a:
0a:eb:29:9d:4e:1b:30:29:72:1f:d0:fa:1b:81:71:
1e:51:b5:60:a6:e5:b7:6c:8b:9e:a4:4e:ad:05:71:
9c:bd:ea:6f:8e:09:c3:c4:36:b3:7c:3b:6f:67:26:
7f:02:a3:74:89:69:ca:54:c1:69:59:c5:08:72:0f:
ad:0f:c1:c5:a8:fd:3a:a1:c4:36:d3:56:50:fc:31:
b4:da:cd:22:ee:14:00:47:12:4f:8e:82:d7:ae:e8:
a5:18:f2:2d:9d:42:de:f8:94:77:0b:b8:bc:f3:b3:
29:21:1e:e9:59:35:e1:7c:51:cb:f4:6b:cf:7f:46:
a1:be:ab:40:18:04:f5:b0:0b:e0:3d:12:13:1c:9f:
ae:c8:31:3a:24:f4:5e:93:08:b9:2a:30:3f:8d:96:
1c:95:a9:85:ff:b6:de:4c:d4:34:6d:14:11:4b:bf:
c2:f3:85:59:1f:8f:5e:b5:73:39:c8:9b:63:6f:2b:
9d:5d:3f:5d:a4:d1:01:e0:f0:9f:97:eb:c3:66:6a:
89:47:8a:55:db:6c:f3:6c:ae:fa:2f:22:df:79:fb:
73:49:75:4b:6d:05:76:4d:e5:60:86:b6:cc:98:ff:
12:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:61:DA:EF:D5:60:74:EF:C7:C2:12:B1:43:8E:D0:C4:5F:7F:16:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/7434e83b-96da-3967-bc11-e2c68ce3f8b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
205.213.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:9c:66:71:98:1b:14:c0:55:02:52:95:1e:28:36:9c:b2:09:
91:36:bc:40:70:e4:4e:f1:12:8c:62:fb:49:64:23:59:a3:ac:
1f:07:86:8d:50:32:85:95:12:a3:ce:48:4a:ca:71:a2:12:9b:
0d:37:59:29:62:85:a3:84:ce:7b:0c:36:39:e3:35:d2:1a:d8:
60:72:63:eb:66:8c:df:2a:7c:a7:c0:02:47:45:65:d2:aa:18:
4f:a6:c7:65:c6:fb:80:60:5b:04:9e:1c:2c:d2:66:87:7c:19:
f2:5d:07:3f:34:bc:da:d8:78:62:1c:fe:b1:44:cb:da:30:7a:
ec:a3:93:e1:fd:3b:e2:1f:15:0e:8b:f6:a7:93:37:30:bc:d2:
73:b2:65:99:48:1c:eb:0d:26:0c:2c:68:99:67:81:00:9f:fa:
47:a8:83:41:b8:d2:7b:5c:c9:ad:16:79:fa:21:2c:40:d9:d2:
e6:8f:5f:93:cd:61:05:cf:ad:a3:47:90:b4:86:c7:f7:53:81:
3f:5c:c4:ac:47:c2:1d:c9:11:a7:65:21:2f:f4:53:c1:61:19:
cf:04:d5:20:6a:5c:21:b5:3e:24:93:20:6d:5e:81:5a:c8:d2:
20:90:81:2f:bb:8b:9e:8e:18:7a:b3:50:4a:9e:5a:82:8e:bc:
4d:ce:ba:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:03:38 2026 by rpki-client