
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/c498cc3b-9f67-334b-99fb-f2490d6faefd.roa
File: c498cc3b-9f67-334b-99fb-f2490d6faefd.roa (raw, json)
Hash identifier: IFC6O9otD+CqA6N34NX3RYSkyhA3lPbKTtfOpNbWSM0=
Subject key identifier: C1:3B:EB:4C:7A:85:81:DC:D8:CE:9F:39:B0:88:ED:48:A9:BE:76:F7
Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial: 010D0C9F4328584F4988D88066EA73E78C1AF480
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/c498cc3b-9f67-334b-99fb-f2490d6faefd.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 2615
IP address blocks: 147.1.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:d8:80:66:ea:73:e7:8c:1a:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b3546192-5a48-4c65-a9dd-9ff2f53df05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:c3:54:52:b6:fb:6b:77:a0:23:07:b3:7b:
18:56:56:95:b6:15:73:a2:47:17:66:5c:02:36:a0:
1e:3b:c1:39:80:46:58:f4:63:29:35:9d:58:91:70:
77:84:5b:d7:9d:85:46:d8:67:f1:b2:5c:c2:ae:4e:
17:38:f2:31:82:6a:1c:5e:89:c4:99:a3:ad:0c:a2:
4c:0e:ba:ca:05:48:32:84:d2:1a:0f:a3:55:7f:a7:
a1:a6:63:4c:75:75:6f:2f:f0:d6:a3:43:2a:99:09:
2e:0d:ba:d7:b6:fc:82:8e:be:5a:11:68:a3:e0:45:
96:06:1e:32:ec:d7:59:3d:c0:a7:04:9a:35:f5:cb:
1c:82:74:f5:a2:95:5b:2f:6c:9e:80:4d:2b:16:29:
6b:55:bc:b4:03:37:de:e1:77:5f:25:09:34:48:4e:
c8:56:62:0f:8e:a1:fd:3d:a4:f0:67:6f:3f:b8:b7:
bd:a0:0e:fb:86:2e:7b:d6:80:b3:80:f1:a0:51:fc:
42:0d:22:6b:d6:20:ad:4b:89:51:ff:a2:58:4c:54:
02:cf:bf:90:04:6e:e7:b0:b0:ac:86:e5:3e:cc:7d:
fd:67:58:c0:ee:f5:29:6e:20:68:94:79:ef:e4:b2:
77:9d:2d:f5:25:1b:e2:6e:2a:7d:b9:0a:ad:7f:e3:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3B:EB:4C:7A:85:81:DC:D8:CE:9F:39:B0:88:ED:48:A9:BE:76:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/c498cc3b-9f67-334b-99fb-f2490d6faefd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
X509v3 Authority Key Identifier:
keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
sbgp-ipAddrBlock: critical
IPv4:
147.1.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:d0:d6:92:4c:5d:ab:d5:42:25:5d:d7:d0:e9:8f:c0:ed:32:
88:db:44:46:65:0e:63:2c:32:4a:e1:7f:76:99:11:cf:4c:27:
ab:e0:8e:2f:bd:04:b9:2b:fd:09:90:ef:bd:33:51:7d:e1:e7:
80:8c:4c:de:9d:9f:93:ff:b6:1e:ae:a5:8e:52:25:0e:6c:1a:
5b:d8:bb:99:64:4a:8f:f4:a5:6a:02:93:a6:b7:41:90:13:0f:
2e:17:87:0e:59:4a:9c:2a:85:b5:cc:7f:7f:a0:e1:46:a2:47:
f4:7c:cf:a8:86:bc:ad:19:67:3f:86:c3:e9:bf:d4:e8:f0:a7:
8c:b1:80:b1:bf:7a:10:fa:b9:8b:ea:06:b9:e6:7f:66:b0:a0:
d8:a6:62:6b:71:c9:1c:c2:96:a7:8a:84:98:02:be:55:7b:0b:
09:5f:ed:90:4e:3c:76:c7:fc:70:e6:9b:74:19:1e:5b:2a:2e:
c0:99:fa:12:11:6e:f6:14:d6:16:fa:cb:3c:6f:6a:14:97:2a:
07:38:a0:03:fe:33:b2:a9:08:04:c1:fe:27:60:ff:be:13:ac:
a2:4f:70:17:57:35:da:73:16:39:ac:ed:90:8d:45:73:24:f4:
96:7a:80:68:06:58:a7:cf:cf:8b:af:d4:a2:f3:2d:c7:4e:a5:
9f:9b:de:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:26:22 2026 by rpki-client