
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa
File: 85936ab9-681e-3063-9c40-0a46025e36e9.roa (raw, json)
Hash identifier: ZouGt320lg21cSFkQZu8u3zvxSkee/S+Y4PoJ7mNQCk=
Subject key identifier: 45:65:8B:41:A5:72:26:3B:F0:38:F7:79:99:A1:97:18:9D:DC:70:C0
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F4328584F0ED234CCAF672E0795B3EC00
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 64243
IP address blocks: 205.213.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:34:cc:af:67:2e:07:95:b3:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=95cade22-308f-4b96-b748-222b70c64568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ea:71:9f:3b:35:1a:3b:ff:c3:c2:8c:46:89:
db:58:c6:da:ff:a9:88:80:e0:c5:ae:38:42:56:1c:
4a:69:83:d3:53:b0:61:00:01:84:8e:92:44:e8:80:
04:bb:35:04:76:b3:9d:08:15:d6:ce:0e:c4:bf:1d:
2e:fd:4a:e8:e5:2a:27:76:55:58:4b:1a:5d:ed:a6:
c6:dd:74:45:26:81:66:20:00:d3:bc:a5:7e:ed:7d:
22:23:93:8f:7a:00:d2:78:2b:47:4d:84:0f:4a:55:
fd:a9:56:33:c4:43:2d:95:4b:ad:da:a9:25:c8:73:
7a:7a:d1:2a:17:f6:71:86:9d:c2:bf:d6:b6:45:b4:
7d:ee:23:97:60:44:04:25:04:3f:78:a5:08:c3:5e:
e3:bd:ba:4f:13:ac:af:5b:93:3c:aa:46:e7:95:30:
ec:ae:b2:9b:ac:88:32:e0:f1:cf:3a:9b:24:b7:17:
7c:84:ad:06:09:78:1e:a1:32:f5:52:a6:51:56:2f:
aa:3d:10:7a:a0:38:ea:cb:2a:b4:5b:18:1c:fa:40:
9f:46:22:93:c3:50:a1:15:83:d5:fb:5f:0e:cf:17:
37:59:36:87:c7:60:25:4f:31:60:2d:32:f4:5a:ed:
32:4b:4c:a9:cc:4f:c8:b1:cf:92:b0:7b:4c:db:74:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:65:8B:41:A5:72:26:3B:F0:38:F7:79:99:A1:97:18:9D:DC:70:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
205.213.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:a8:3b:3a:20:03:8f:13:ed:c2:c2:ee:f9:62:db:8d:b7:09:
b9:60:68:c6:c5:5f:48:f1:3b:4c:b9:da:f1:32:f5:94:13:83:
ff:65:c9:b5:35:11:ba:dc:6c:83:6e:7c:83:77:ba:24:4a:ab:
dc:48:a3:4d:5f:05:a1:7e:e1:f1:c7:39:7b:27:85:e2:a0:05:
e6:ca:87:9a:1a:07:0f:1e:a8:51:74:84:91:75:89:30:5b:b8:
cb:22:eb:ca:b5:55:f6:39:24:9a:27:7c:8d:32:08:76:5a:0d:
21:e1:96:1a:1e:46:9c:1c:94:50:44:dd:af:a8:71:8a:d2:c6:
83:38:00:11:40:70:1a:46:df:16:49:da:7b:07:72:ea:1e:1b:
eb:cf:fc:c0:9b:92:50:32:2c:cd:d8:59:b5:94:e0:85:eb:4c:
18:44:16:43:36:e4:b2:fe:75:9f:df:5c:8f:16:58:7d:3f:18:
ed:76:76:01:a4:9a:ec:e6:1e:d8:e0:b0:4c:9e:9e:d1:29:d4:
1f:6e:55:62:1b:2a:47:e4:8d:a1:88:0a:0c:d7:80:d4:86:8c:
0c:84:9c:5a:7d:52:c1:c5:f5:16:8a:b9:9f:50:22:89:ce:29:
ac:f1:09:68:3e:9c:f6:9c:32:2c:c5:1f:18:54:41:d2:b5:53:
2e:4c:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:51:44 2026 by rpki-client