
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/389cc261-cf0d-329f-ad46-5a405e8a611e.roa
File: 389cc261-cf0d-329f-ad46-5a405e8a611e.roa (raw, json)
Hash identifier: vGzzt8Gw7LnN+PzYRY0wt2AtQh4OspewdQjypwlsNMQ=
Subject key identifier: 1A:62:6B:02:BB:D9:63:91:28:08:15:61:75:B4:0E:B4:38:BA:FB:04
Certificate issuer: /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84
Certificate serial: 010D0C9F4328584EAA520EEC7D8C0312B66AA200
Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/389cc261-cf0d-329f-ad46-5a405e8a611e.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 23102
IP address blocks: 192.203.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:52:0e:ec:7d:8c:03:12:b6:6a:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=71271abd-edaa-434b-86c6-57c3344ced1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:e7:fd:85:8e:6b:1e:08:e9:20:e1:2a:a4:
94:96:6c:08:bd:13:f3:4a:1e:36:23:9c:7a:14:4c:
97:c4:d4:6a:c6:33:d8:ce:9a:c4:45:3f:fb:3e:41:
57:2b:eb:1c:15:8b:67:a7:42:8c:b2:9b:6a:7e:e2:
01:34:6e:0c:e8:92:cc:75:52:df:43:f1:08:5e:5e:
ea:00:89:2c:72:23:35:dc:a3:a6:47:f4:b7:bb:aa:
97:02:40:f7:5f:9a:b6:e5:d1:db:8f:4a:3e:ea:d4:
0d:1b:3e:53:4d:ee:93:88:e0:47:7a:05:3f:04:e1:
42:bf:1f:fd:42:54:58:2a:00:5c:b7:8c:31:f2:09:
40:6f:20:17:26:aa:bf:bb:3c:d5:e1:5a:de:fa:b3:
fa:68:6a:aa:eb:5c:8e:83:3b:79:04:75:18:eb:ef:
06:ea:51:88:13:77:d5:80:db:19:eb:dd:ed:5b:59:
95:d2:6a:78:6e:c4:23:d3:32:b4:9c:6c:4b:bb:59:
78:f8:e7:ca:e5:01:72:d4:b6:9f:2a:ef:f9:67:1a:
02:1e:1e:be:e7:be:5f:79:9a:1d:c3:f0:05:cd:e2:
36:7e:6d:84:ca:ac:9f:b3:59:24:17:b7:94:77:19:
60:fe:c0:e2:46:e8:f3:53:84:38:ad:97:53:23:66:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:62:6B:02:BB:D9:63:91:28:08:15:61:75:B4:0E:B4:38:BA:FB:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/389cc261-cf0d-329f-ad46-5a405e8a611e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl
X509v3 Authority Key Identifier:
keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer
sbgp-ipAddrBlock: critical
IPv4:
192.203.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:8f:81:01:9a:5c:11:22:09:e9:38:ae:99:82:53:84:aa:7a:
bb:ac:9d:d3:86:65:32:ed:fe:27:8e:18:2d:7a:c4:05:e3:80:
52:41:34:69:35:eb:4d:80:92:ab:26:1f:f0:29:b7:c5:09:89:
41:a8:46:9c:6c:49:ed:29:f1:fd:7b:7a:87:e8:83:72:2d:32:
a8:f7:30:e5:37:58:54:b0:96:e2:2f:66:ca:01:a0:4e:2e:ee:
ad:27:c7:21:0e:7e:4d:d0:b8:96:03:f8:f7:e9:51:9d:2b:3c:
84:b1:37:f0:ad:b2:28:b3:5e:a5:ea:20:78:ef:9a:33:41:6c:
59:c2:1b:21:2c:f5:f4:94:8a:ed:89:85:5b:39:3b:9b:ca:52:
eb:f7:a4:0e:e6:0e:0a:a8:94:c4:45:71:a0:62:c2:18:26:42:
85:56:6b:f5:da:fc:ed:a6:ba:b0:4f:39:05:e6:33:0c:47:16:
84:a4:c9:8a:37:37:3e:87:04:c9:83:3a:23:b1:63:d8:9c:25:
19:f4:50:f7:7c:9c:04:d5:00:71:b6:95:48:ec:67:92:87:4c:
81:74:17:db:89:5a:6a:ae:28:14:d6:8b:8f:92:62:2b:d4:f3:
c5:ff:cd:2a:7c:4d:f7:69:1a:c9:bd:2d:3f:76:b7:92:77:53:
04:aa:da:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:41:34 2026 by rpki-client