
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c238fd06-6a67-34b5-bec5-9385c7c12667.roa
File: c238fd06-6a67-34b5-bec5-9385c7c12667.roa (raw, json)
Hash identifier: hIlJPqz4rX5eppx9BPzk9ifpX94Fh8CLiw5gscGblcg=
Subject key identifier: 78:BC:53:D7:7B:B9:5C:FA:EC:64:DE:D6:D4:74:EE:A8:C8:45:B4:B2
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F4328584F4973EE6D6D9541150FF03D80
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c238fd06-6a67-34b5-bec5-9385c7c12667.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 2381
IP address blocks: 140.189.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:ee:6d:6d:95:41:15:0f:f0:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=c35b6c25-73ce-4f26-bde0-32fdccb577cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:d4:fc:a6:78:19:f2:fb:8c:28:51:7b:50:
f6:23:18:64:b0:0a:5f:fb:ac:8a:47:93:37:af:2f:
5d:3b:14:7a:33:f2:85:1c:77:29:e2:bb:3f:68:6d:
b0:a4:f6:8f:21:7d:41:bc:e8:14:3b:1c:20:62:3d:
97:9e:8c:1c:41:e4:f2:82:8a:b9:fb:71:a2:0f:65:
d0:a9:d0:ad:2e:6e:b2:74:28:c8:b3:56:05:89:8a:
03:98:94:e4:5d:74:6a:b9:86:ec:a8:81:41:9a:fd:
b9:9f:d3:43:2c:dd:28:89:17:2b:ae:37:92:56:b6:
99:41:9c:e4:6d:a2:b0:cc:04:5d:ce:8a:20:30:1d:
f5:3a:5b:ea:a6:50:4c:17:64:e4:34:99:35:3d:03:
71:7f:d5:b9:eb:ce:2d:1a:71:41:e0:21:ac:5f:86:
58:e1:3f:a5:93:99:ff:0c:7f:ee:35:85:3f:b5:d8:
50:b7:de:69:10:57:79:6e:55:9b:d1:b2:26:32:f1:
2f:40:fe:a4:20:b0:4c:cb:3b:ed:af:84:1e:2b:3e:
00:c7:45:3e:f4:ee:1b:b4:e9:65:a6:4d:e5:f6:5e:
33:d3:0a:17:ff:99:ee:1b:6b:2a:54:ba:d0:fc:01:
38:86:b2:d3:29:d2:2e:f3:90:d1:57:bf:0c:1f:95:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BC:53:D7:7B:B9:5C:FA:EC:64:DE:D6:D4:74:EE:A8:C8:45:B4:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c238fd06-6a67-34b5-bec5-9385c7c12667.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
140.189.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:06:18:70:72:33:70:55:c2:26:27:39:c1:8d:67:84:01:30:
c7:1d:fa:d0:f5:62:37:14:f0:2c:dc:29:12:77:ae:5a:0e:0e:
41:30:fc:04:ba:db:04:27:52:2d:e3:44:fc:f2:a7:fb:f2:8a:
09:33:2b:46:6c:36:2c:48:30:12:70:ca:6d:77:32:0d:1a:31:
8c:da:23:6b:cc:3d:7b:2b:17:0c:94:7f:7c:38:a0:ca:d4:b5:
01:36:7f:35:fd:6f:ea:a4:9c:ca:f5:d4:4d:20:6c:51:a1:55:
75:8f:aa:9e:9e:86:6c:91:7b:ca:07:69:89:03:76:7d:2c:bd:
3b:2d:20:4d:6b:f1:0e:84:d0:54:3f:18:13:86:40:e4:4c:de:
6b:47:62:36:7e:ed:e5:c9:ed:7a:45:18:83:f1:95:95:d8:50:
9a:f8:60:93:06:0c:0e:65:3a:a1:6e:71:c0:5f:3f:49:7f:07:
69:00:20:c0:38:cd:9f:59:9f:35:61:a4:88:1e:74:f4:85:dd:
92:e2:1f:ff:9a:9f:3f:e8:c3:d9:b3:91:04:7f:06:14:bc:e8:
74:7a:2b:d8:37:0d:db:92:e0:22:7b:bb:33:7a:23:c0:cb:c0:
4d:f5:fc:1a:99:37:58:18:c7:1d:62:83:0a:8a:5a:8f:47:11:
ce:15:1c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:38:39 2026 by rpki-client