
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa
File: 429e8e55-3eec-3082-835f-dc4a34d15810.roa (raw, json)
Hash identifier: gMdDF5oEqgKplmIDyXCYXJpEsZpBSKPp8JaT5gc60Ag=
Subject key identifier: 3A:48:89:D1:40:DE:B5:18:17:D3:6C:43:B0:D2:75:5A:AE:7A:60:56
Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial: 010D0C9F4328584ED9C749DB046104343DFF1CA0
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa
Signing time: Sun 16 Aug 2026 01:00:14 +0000
ROA not before: Sun 16 Aug 2026 01:00:14 +0000
ROA not after: Sat 14 Nov 2026 02:00:14 +0000
asID: 54238
IP address blocks: 216.213.104.0/22 maxlen: 24
216.213.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d9:c7:49:db:04:61:04:34:3d:ff:1c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Validity
Not Before: Aug 16 01:00:14 2026 GMT
Not After : Nov 14 02:00:14 2026 GMT
Subject: CN=37043bb3-2d0a-4558-ac64-18a27e514b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:6f:5b:41:ee:d9:03:da:b9:74:17:eb:3f:
66:d8:63:20:a4:2b:e9:b8:d2:7c:f6:d6:c7:e6:a1:
4a:69:7d:f5:58:16:a9:a1:3f:2c:05:01:45:b9:23:
9e:84:05:55:c3:bb:6d:e2:35:98:26:95:ca:b1:67:
6f:a5:99:46:9f:4d:d6:ff:86:3c:20:0e:78:03:e2:
ff:39:ff:b6:4d:a2:b1:f9:c2:af:f9:97:b2:57:77:
8d:f2:84:46:18:e6:72:04:4e:91:fe:88:58:33:78:
27:15:a4:98:7e:fd:4b:b1:e3:e0:0e:e1:28:9c:a8:
20:d6:5d:1d:0a:8a:fd:6d:15:be:ae:78:44:7b:e0:
70:26:e6:f4:bc:eb:21:1f:04:ec:87:76:ed:b9:b2:
7c:3b:79:e7:f3:6a:c2:50:4b:3b:21:fb:03:93:d1:
47:bf:31:45:c4:64:79:3f:3c:cd:0d:e8:93:b4:b6:
39:b4:ca:07:9d:d9:9d:a2:3c:37:a9:1d:bb:60:6c:
74:32:5c:67:81:89:ac:b0:73:ff:df:60:66:7a:e9:
b8:83:07:ff:6a:e0:96:7f:d4:c3:09:f4:0a:19:ca:
d0:a4:ee:69:8c:7b:f3:56:03:20:9c:d5:29:bc:7c:
a5:48:fc:37:ae:a7:80:1e:8d:da:e9:82:5e:db:f5:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:89:D1:40:DE:B5:18:17:D3:6C:43:B0:D2:75:5A:AE:7A:60:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
X509v3 Authority Key Identifier:
keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.213.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:90:d7:74:e8:4c:48:96:96:cb:39:1e:59:79:f8:d5:d3:26:
75:9b:0e:0d:e1:57:6a:42:69:f9:af:2f:67:21:d0:56:25:37:
00:97:42:fe:fb:54:21:61:2f:60:63:bd:91:3e:f0:02:5d:b0:
8c:e0:0d:62:72:03:ec:e3:a7:09:9a:eb:ff:f0:a6:4a:f8:ed:
85:41:b8:11:6f:41:6f:1b:67:b5:9a:60:48:7e:02:83:56:7f:
5a:75:ab:30:2a:87:2f:aa:d2:c1:dc:dd:a3:3c:cc:de:c2:0d:
5a:cf:46:83:de:14:75:0d:8b:48:8e:98:54:9a:24:2c:05:e4:
b2:f6:15:82:ea:77:80:47:23:e6:a4:cb:b1:d6:a2:a3:f7:23:
3c:b5:1d:15:d3:f6:cc:e3:c5:c4:12:70:97:2f:8b:d7:aa:1b:
66:b1:ca:ff:3e:e3:52:10:7d:b7:74:f7:fb:57:4a:98:46:40:
2f:0e:15:32:d8:d4:56:53:3e:0f:b2:b3:29:ad:d0:6a:02:f5:
bc:07:34:55:38:1b:81:eb:6e:86:04:21:bf:11:1e:02:da:b0:
59:02:5b:a2:de:13:d7:9d:a3:44:d2:4b:7d:25:e9:21:bb:36:
75:b4:8e:c1:63:7f:1d:05:01:c6:a1:b6:7a:33:47:c8:d1:73:
0e:ff:fa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:51:41 2026 by rpki-client