
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/877ed874-f632-348c-a5fa-d8d210bc9847.roa
File: 877ed874-f632-348c-a5fa-d8d210bc9847.roa (raw, json)
Hash identifier: iQluFAw+reH8PSE7VmUudT3ObPh5R/w8ZWLUUQS8oAI=
Subject key identifier: DE:9D:51:F2:4D:20:A1:26:5E:BC:B1:D3:6E:49:79:65:A9:2F:FE:30
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F4328584F3CE2A144FBC0A0CB469BB0C0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/877ed874-f632-348c-a5fa-d8d210bc9847.roa
Signing time: Sun 20 Sep 2026 13:00:12 +0000
ROA not before: Sun 20 Sep 2026 13:00:12 +0000
ROA not after: Sat 19 Dec 2026 14:00:12 +0000
asID: 16509
IP address blocks: 136.245.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3c:e2:a1:44:fb:c0:a0:cb:46:9b:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Sep 20 13:00:12 2026 GMT
Not After : Dec 19 14:00:12 2026 GMT
Subject: CN=3a01e06d-7520-4023-9975-2e44838bbe92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bf:4a:b6:e7:22:6b:b2:d7:fc:ee:cc:92:76:
ac:c1:9a:12:97:44:37:73:0c:61:a6:05:e9:8a:7c:
9c:45:07:0f:b4:ec:d2:b5:57:c0:c0:c4:a6:68:b1:
0e:15:39:6a:ed:62:19:56:7a:6b:1b:47:5c:44:a7:
53:9e:94:1d:6b:e3:47:19:56:dd:89:0b:aa:19:b0:
8d:be:3c:ee:6f:d0:1b:13:de:0d:88:11:f9:1d:19:
b1:f2:21:46:08:86:92:09:ba:ea:24:8c:32:57:93:
73:df:b2:b9:a9:8f:17:37:ac:a1:1b:d9:ae:65:e8:
10:08:14:3c:e1:bc:c9:90:c4:25:39:0b:70:3a:62:
48:ec:f5:03:a8:d3:d0:e6:d7:e8:5b:1c:1d:ef:4a:
c5:ce:b9:b9:ca:b3:0a:1f:37:94:80:a6:df:32:2b:
9a:db:11:7a:26:ba:a8:f9:f8:a7:23:f4:f2:b3:f6:
1b:5f:5c:96:e1:d1:3a:8f:ed:c8:d5:70:72:66:ee:
10:1c:57:2e:38:39:9e:93:15:cb:f6:f6:70:5e:e2:
69:3b:83:24:67:fa:5a:e7:77:c3:93:36:c8:95:ac:
35:0c:33:05:20:29:7b:f7:f0:2d:f1:24:35:77:7d:
fb:7a:1c:5a:cd:fd:49:34:21:de:25:89:71:d8:05:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9D:51:F2:4D:20:A1:26:5E:BC:B1:D3:6E:49:79:65:A9:2F:FE:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/877ed874-f632-348c-a5fa-d8d210bc9847.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
136.245.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:7a:e2:30:14:43:7c:c7:8c:54:b9:88:c6:0c:c1:e3:db:7d:
2f:18:64:38:99:13:43:03:15:ef:9a:8b:71:7a:3a:c0:96:73:
44:20:e9:a6:11:4c:b6:99:23:8d:a4:df:a0:eb:8e:62:32:6c:
a5:af:dd:20:b1:dc:22:84:3d:52:a7:ae:df:e7:5b:a3:3b:f2:
cd:06:e2:62:33:5a:ee:43:d9:9e:41:ad:d0:52:25:fc:f7:f8:
3a:02:ab:b2:33:92:19:1b:8b:25:96:b1:77:28:77:c0:38:ed:
c5:af:a6:8c:fc:24:86:74:f5:92:93:25:69:5d:8c:17:a5:b3:
29:ab:69:cd:ad:94:eb:ab:84:42:a1:15:5b:69:fc:83:2d:54:
03:89:0e:f8:bf:90:3a:6b:d9:c4:62:d8:a0:07:dd:a4:9a:39:
0d:e6:af:53:0b:d7:c6:0d:ca:a0:5e:d8:05:2c:e0:72:ad:88:
7f:dc:51:29:71:07:78:23:b9:1e:b7:3a:dd:14:b1:69:89:64:
51:43:e7:55:35:16:3c:1d:f7:4a:5c:2f:ec:b1:37:2d:4b:6f:
21:14:9e:13:84:44:2d:b3:a8:20:95:91:76:c5:c0:e4:5a:92:
15:1c:8d:f6:1c:a3:ef:e3:85:ed:c0:7c:23:5d:30:f9:2a:8e:
82:28:be:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:23:36 2026 by rpki-client