
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c3413d44-6361-3bcc-85d8-85eba7c9db70.roa
File: c3413d44-6361-3bcc-85d8-85eba7c9db70.roa (raw, json)
Hash identifier: EXSyrnntQadAtVcJylAe4oFkmgv+1N+76msfc6okLBU=
Subject key identifier: 41:AD:70:71:17:B8:0A:4A:87:99:47:BB:68:3E:0D:80:5E:0E:61:6E
Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial: 010D0C9F4328584EE7BCAEAAA0E98764DCA1E1B0
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c3413d44-6361-3bcc-85d8-85eba7c9db70.roa
Signing time: Fri 21 Aug 2026 01:00:12 +0000
ROA not before: Fri 21 Aug 2026 01:00:12 +0000
ROA not after: Thu 19 Nov 2026 02:00:12 +0000
asID: 399629
IP address blocks: 206.166.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e7:bc:ae:aa:a0:e9:87:64:dc:a1:e1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Validity
Not Before: Aug 21 01:00:12 2026 GMT
Not After : Nov 19 02:00:12 2026 GMT
Subject: CN=5bcc8908-7b65-4d71-9e28-681153b677c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:79:3f:f6:46:fc:76:32:01:3a:31:50:a5:
f3:4b:91:fd:58:b3:df:65:18:80:12:dc:39:d9:d5:
ad:d8:4f:d8:16:91:8c:1e:b5:12:1f:18:02:a7:57:
e2:08:50:69:ae:50:dc:bd:75:fe:24:50:17:21:fb:
bc:61:92:a7:1b:e3:71:b9:04:8c:71:05:4a:43:68:
6f:d2:f9:20:ff:4d:a2:a2:4e:06:89:36:bb:f7:83:
32:13:60:0c:a8:b1:cd:cd:e4:46:ff:74:9d:0f:52:
7d:8d:83:da:e7:e3:97:f6:99:dd:ff:2d:3f:0e:9e:
0e:d4:8e:34:dc:f9:15:07:1f:b4:2c:61:16:52:27:
80:d2:0d:28:29:af:11:70:b0:45:44:04:47:67:18:
a9:2d:6f:45:69:cc:55:78:4a:aa:7e:23:f9:90:43:
09:ea:36:ce:84:4f:04:ce:97:42:2f:e3:32:7e:21:
b3:8f:fb:0a:0c:49:cf:6e:fe:6d:70:a2:c8:2a:d2:
9c:ee:66:51:65:ab:87:5f:a9:be:66:68:6f:38:d9:
a0:9a:a9:83:6b:4d:56:5e:02:4a:c0:23:ff:aa:a4:
52:34:6c:53:0f:23:a3:29:2a:22:72:16:6f:1c:94:
78:8f:5d:b3:7f:32:39:2c:87:47:2b:88:d0:4f:3f:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AD:70:71:17:B8:0A:4A:87:99:47:BB:68:3E:0D:80:5E:0E:61:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c3413d44-6361-3bcc-85d8-85eba7c9db70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
X509v3 Authority Key Identifier:
keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
sbgp-ipAddrBlock: critical
IPv4:
206.166.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:77:d5:ca:ac:f1:ac:e3:66:71:7a:ff:97:ec:f5:d6:42:3e:
03:28:26:46:21:30:08:0e:6b:1a:5d:2b:a2:37:bc:b5:91:a2:
fe:de:c8:c0:56:9a:c3:44:d1:80:fc:54:9a:81:1b:37:00:12:
3f:a1:2f:4e:fb:1e:e5:cb:90:2d:b2:f2:4d:67:cb:0e:71:5d:
b3:71:b7:ed:08:72:3c:70:ae:65:2b:fd:0c:32:21:68:dd:a6:
86:39:d3:ed:3e:f8:d2:ca:e4:a1:ac:9d:9b:2c:29:e3:10:3b:
ad:2a:93:4b:a0:33:32:45:0f:8d:94:b7:77:00:cf:f1:7f:fe:
27:d5:28:4a:75:84:a3:3a:78:9b:47:20:de:b8:d0:07:3b:99:
ac:a4:6d:43:96:e7:fa:b8:2a:a1:59:01:e1:28:00:87:65:9a:
b0:78:1f:7e:aa:33:1a:5d:82:2b:9b:72:9f:54:e6:a0:29:a7:
62:a6:8f:61:8d:8a:60:c0:f9:40:db:79:6d:33:8d:ef:54:de:
fd:aa:27:27:52:46:90:a1:03:ac:e4:9f:fb:48:69:51:9d:22:
b6:9e:d0:99:ff:26:35:15:36:4e:81:be:0e:08:37:1c:78:a1:
60:a4:f1:3d:2f:cd:2f:10:be:a4:d6:6b:d2:4b:03:e8:6b:b7:
c6:56:2b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 20:46:13 2026 by rpki-client