
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/5cecadd9-8fe1-3224-a491-ec4ac04d225f.roa
File: 5cecadd9-8fe1-3224-a491-ec4ac04d225f.roa (raw, json)
Hash identifier: Z+emlX6YifH28b0UztB621u8S0v/aYS9UxYahRXiSWQ=
Subject key identifier: D7:14:9D:92:91:E0:DD:FD:2B:A6:8C:EA:BA:64:7B:7E:BB:DB:A5:00
Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial: 010D0C9F4328584EEA875E11AE27D7490560BF40
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/5cecadd9-8fe1-3224-a491-ec4ac04d225f.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 3477
IP address blocks: 151.207.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 15 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:5e:11:ae:27:d7:49:05:60:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=8e617b6d-d9be-40c4-8234-a18cf3815973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:00:c8:d0:e2:62:e9:fd:37:18:20:db:b0:a3:
c9:5f:6e:8b:63:61:35:ad:e9:83:63:53:b9:48:99:
76:90:dd:f1:5d:33:a9:58:20:41:ca:6b:d9:8c:39:
2b:f2:c5:9e:8b:40:87:5f:36:d1:f5:60:1e:32:d7:
13:d1:2a:93:9e:48:2f:d8:aa:03:e8:ec:45:26:dd:
a9:9c:20:df:ad:82:b2:51:b4:61:bb:be:73:00:fe:
2f:d8:c6:51:4d:8c:f7:1c:cf:cf:2c:53:5b:d3:9d:
4e:19:7a:6f:d7:61:aa:c5:c0:2f:03:09:87:fd:5c:
cd:6f:86:f6:a9:3d:07:d1:f7:c6:48:fc:19:8b:85:
9b:ed:c8:4f:bc:e8:49:2e:40:7d:ba:bf:35:2e:9e:
9c:61:dc:1a:be:d2:36:7c:e6:5a:dc:f8:1e:c0:08:
7e:cf:9d:d0:da:d2:59:f8:f2:c8:4c:bc:05:55:6c:
a4:49:e2:b6:6c:5e:6d:2d:e6:c9:b5:34:14:2f:d9:
3b:7c:87:5e:75:58:4e:f2:93:d3:b9:1e:f0:c3:a5:
62:e4:91:af:4f:5b:ef:b3:b4:8b:7d:81:41:9b:7b:
c6:d0:35:38:d4:dc:a2:7a:8e:77:3f:57:a0:1f:89:
1c:ea:a7:bb:1d:16:5b:a0:d1:7b:28:93:75:92:93:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:14:9D:92:91:E0:DD:FD:2B:A6:8C:EA:BA:64:7B:7E:BB:DB:A5:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/5cecadd9-8fe1-3224-a491-ec4ac04d225f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
X509v3 Authority Key Identifier:
keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
sbgp-ipAddrBlock: critical
IPv4:
151.207.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:70:7f:d4:cf:84:f4:2d:a9:79:aa:7e:35:b8:1b:8e:59:62:
8f:80:db:a5:3e:4a:36:f2:30:32:ec:63:0d:37:7f:d5:ed:e9:
17:de:4a:77:19:5b:eb:e8:f1:6a:2b:15:e5:9e:96:9a:2d:17:
1a:55:e7:d2:ca:dd:47:31:95:05:41:58:d4:8f:88:b6:99:51:
af:78:d9:7a:e2:89:c2:1d:ae:cb:88:b4:19:74:ce:9c:1a:64:
bf:5c:bb:b5:d9:59:e7:b5:47:4f:21:7a:d1:39:b3:22:d6:e0:
87:ef:db:5d:1e:3a:fa:30:b5:14:14:4e:88:12:65:6a:58:d1:
00:31:a5:28:96:b8:2d:ba:90:94:47:3f:65:06:0d:5f:83:39:
34:4b:83:78:fa:99:93:ae:c1:2d:0d:0a:f7:11:ae:1c:ba:c6:
48:43:88:d0:90:aa:bd:75:68:77:91:47:1f:f3:4e:6c:79:89:
b5:e0:21:7e:13:25:4c:ab:3b:23:f7:3b:1e:8b:b1:0c:58:50:
c9:3d:eb:8d:9e:52:af:0b:e9:f6:65:35:6d:9f:51:0c:f1:0d:
43:87:c6:61:d7:5e:a6:23:e7:52:15:b5:64:0e:76:14:ad:84:
90:6d:05:5e:22:93:b2:c3:d7:c0:a0:8b:b9:e2:12:46:5a:b8:
b3:bc:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:01:56 2026 by rpki-client