
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/57909b88-20ec-3af7-8f7b-54f3e79e3706.roa
File: 57909b88-20ec-3af7-8f7b-54f3e79e3706.roa (raw, json)
Hash identifier: Jip1boaLb9CahWV61y3FOloBva/5MDf4ouwHeACcspw=
Subject key identifier: 55:06:3F:8A:2C:09:E6:89:9E:F7:76:46:8B:DE:98:4B:04:96:5D:6A
Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Certificate serial: 010D0C9F4328584F4F07FDF1611596457D0C15E0
Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/57909b88-20ec-3af7-8f7b-54f3e79e3706.roa
Signing time: Sun 27 Sep 2026 01:00:12 +0000
ROA not before: Sun 27 Sep 2026 01:00:12 +0000
ROA not after: Sat 26 Dec 2026 02:00:12 +0000
asID: 18705
IP address blocks: 208.65.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4f:07:fd:f1:61:15:96:45:7d:0c:15:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Validity
Not Before: Sep 27 01:00:12 2026 GMT
Not After : Dec 26 02:00:12 2026 GMT
Subject: CN=13a753df-6478-4e2a-8f97-24cb806eabf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:9c:50:e4:e1:2b:a3:ec:98:a3:a1:f0:df:
e2:9f:56:34:4b:5b:88:89:8f:ee:c9:c9:fc:74:01:
f4:b9:96:9a:ac:35:34:0e:d3:a5:6c:09:b4:4f:17:
22:55:ad:08:3f:81:b6:43:1f:9a:7f:07:16:71:81:
8e:ef:d8:94:da:e3:2e:8a:ff:9b:3a:0a:36:33:16:
8a:30:ed:35:80:29:cf:24:e2:66:d9:04:bc:cc:3a:
0e:66:d1:25:51:25:f7:1d:cd:e7:ed:30:64:ad:43:
23:42:47:f1:57:b5:69:e3:13:97:16:0e:6f:e9:ff:
08:58:d7:4e:98:79:d0:f6:f0:4f:4a:82:65:1f:54:
c1:7b:b3:20:cb:da:a4:ca:a0:0d:fe:ac:e4:69:8c:
27:d3:bc:b3:3d:02:af:dc:cd:e2:13:3a:aa:71:c4:
2d:b3:c7:63:dc:aa:ea:c4:8d:c2:82:41:63:38:08:
cf:90:d3:30:7b:4f:1e:d5:58:dd:28:54:c1:47:22:
e0:8e:66:a9:fd:a3:e2:39:d8:80:87:eb:7b:ea:01:
80:c5:a2:32:6b:76:77:58:8d:70:eb:ae:fd:ae:35:
ac:63:7c:2b:9b:e0:61:ee:0f:2b:d4:7c:bd:aa:08:
65:4b:6c:16:b5:d5:ee:ec:2b:1b:96:c3:b0:af:7e:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:06:3F:8A:2C:09:E6:89:9E:F7:76:46:8B:DE:98:4B:04:96:5D:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/57909b88-20ec-3af7-8f7b-54f3e79e3706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl
X509v3 Authority Key Identifier:
keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.65.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:70:c4:f8:9b:ba:bb:b4:6e:72:ad:47:0f:71:12:86:96:47:
ad:73:1f:8c:5b:1e:07:5e:42:da:80:ed:bc:6a:e3:4f:38:31:
a6:57:eb:68:0b:a9:2a:dd:8c:e0:68:7e:f3:41:e9:19:30:51:
e2:a8:74:96:2f:02:79:0d:49:1f:2f:d8:28:7a:d4:58:52:d0:
1f:f6:93:7d:fc:39:ba:16:ab:64:1d:17:70:1c:69:b5:6d:2b:
8d:42:97:77:5e:03:63:7a:57:8d:04:c9:c0:51:63:b0:78:1b:
17:a5:6b:b2:94:1c:22:3c:5d:11:c2:ab:32:fe:cb:18:8a:78:
d7:a1:0d:44:42:df:74:28:ee:b0:e5:e9:db:f1:78:65:78:5f:
a5:ef:b1:bf:9c:9b:3a:52:dc:55:5e:52:ab:43:b4:e5:c6:be:
46:b7:1e:96:fc:71:2a:23:3c:db:a0:eb:cc:85:b8:70:b2:de:
30:0a:a0:71:2b:20:bf:59:2a:01:af:48:1e:22:cc:2f:6f:eb:
f3:af:d4:85:f6:28:34:be:ce:34:c0:0a:c2:a9:2a:e3:20:58:
87:f2:86:42:1e:77:e8:c9:c2:68:cb:39:b7:91:4d:c8:16:6b:
9b:50:2e:38:11:d8:44:d3:d0:5c:3c:41:43:86:d4:bb:80:15:
22:e8:29:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:43:47 2026 by rpki-client