
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa
File: ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa (raw, json)
Hash identifier: sNeW9V2w1y/eh3RUzpW+Vnxveacs+KTadooBS5uvPPo=
Subject key identifier: BB:29:4A:B7:7E:B3:BA:3F:ED:D2:0C:48:42:D8:2E:5F:C9:7A:CD:B5
Certificate issuer: /CN=be8c0be8-820f-49cc-b759-a1cd0b68028b
Certificate serial: 010D0C9F4328584F1CC7AAF6CE206A8D35767D00
Authority key identifier: 21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 36786
IP address blocks: 132.203.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:aa:f6:ce:20:6a:8d:35:76:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8c0be8-820f-49cc-b759-a1cd0b68028b
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=b31aec94-78be-4831-adfb-f0f516af9b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:77:58:57:7a:f6:5f:ac:e2:34:84:65:e0:
e0:d0:44:48:6a:33:7a:8a:cf:e2:22:d5:2d:00:96:
29:9b:27:d3:f3:a0:59:aa:5c:d0:7f:89:86:69:1e:
22:ed:2c:9c:ef:fe:54:6a:4f:68:90:35:6f:c2:f8:
17:c7:4e:d5:91:a4:02:64:f3:9b:50:15:0f:9b:ec:
a9:8b:97:29:78:0e:bf:1f:8e:ef:83:1e:20:31:f1:
54:bc:f0:14:f3:d2:bb:50:17:81:0d:b6:f6:91:bc:
a2:b2:70:42:ca:ec:85:01:ee:43:98:71:6e:28:e8:
a0:de:f6:c7:ff:af:b8:2b:df:b9:7f:1e:4d:2a:6d:
8d:ab:e6:64:87:60:df:c0:f2:a5:c0:e6:02:be:ea:
03:51:12:32:24:ab:90:8c:8e:17:04:96:b9:4c:24:
9f:ad:53:0a:bd:82:e7:a1:32:00:33:5e:44:bb:ae:
b3:72:76:7c:76:42:52:62:e7:9d:95:d9:30:33:2f:
3e:5e:f6:70:a1:d3:61:8e:85:ee:99:22:4c:99:bd:
f8:2e:30:03:1e:06:9d:a5:0c:fe:ce:50:1a:41:34:
0d:bc:32:5c:9c:c3:89:c1:11:de:9c:58:f5:d4:3d:
4f:a4:48:fe:7b:2c:4a:0b:7e:42:fe:2d:42:20:b6:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:29:4A:B7:7E:B3:BA:3F:ED:D2:0C:48:42:D8:2E:5F:C9:7A:CD:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl
X509v3 Authority Key Identifier:
keyid:21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer
sbgp-ipAddrBlock: critical
IPv4:
132.203.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:a2:d0:3c:c3:17:ad:4e:3f:6e:63:0f:8a:83:a2:fb:f3:03:
ea:b9:69:7f:be:6f:d9:4c:e6:1b:32:ae:d9:19:b8:05:55:33:
bc:cb:ba:cc:b7:75:06:14:26:35:40:d2:cc:76:e3:3a:78:6f:
ae:a5:a2:2c:ae:91:5c:04:9a:32:7b:82:69:40:b8:29:20:8c:
4a:3d:d6:83:f8:6a:62:74:2e:57:96:51:60:76:c4:9f:06:24:
fa:28:c4:50:80:8c:36:40:0b:7a:99:c9:f9:0b:47:0b:18:27:
d1:07:01:13:dc:97:91:21:cd:f4:2f:6d:de:e2:eb:e2:92:8a:
77:3a:53:45:7e:86:bd:99:84:75:9e:55:5d:d5:e9:95:84:f5:
5f:8e:9d:4a:be:32:71:1b:2b:8c:72:d6:97:5a:92:9f:d4:08:
8a:a2:99:f4:23:c2:95:8d:ee:2d:92:35:27:fa:f3:05:5a:3a:
fe:08:ed:d9:4d:ce:f1:ca:e2:09:88:fe:37:cf:bd:83:55:74:
01:e8:51:f0:d3:a7:35:5f:af:5b:db:c2:24:6a:59:31:37:52:
76:e7:a2:82:ee:f8:4c:4b:52:95:41:03:a5:9c:b8:23:f4:7d:
07:d9:1c:83:90:28:0a:e3:d3:82:db:52:18:4d:26:b2:26:3a:
b7:33:d3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 00:51:24 2026 by rpki-client