
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ec672012-8d3c-35fe-9cec-56bd87325cba.roa
File: ec672012-8d3c-35fe-9cec-56bd87325cba.roa (raw, json)
Hash identifier: t8GtW1HDcByIsGTTb0eoy9MJx0VkA/RHHdzx8vZpAnE=
Subject key identifier: 67:8E:0F:D8:59:FB:72:E0:86:4F:99:11:88:0E:0B:40:57:73:EC:F0
Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial: 010D0C9F4328584F4989F527CCD66A9E50AF8640
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ec672012-8d3c-35fe-9cec-56bd87325cba.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 2615
IP address blocks: 147.1.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:89:f5:27:cc:d6:6a:9e:50:af:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=8a14f009-403d-4e64-beb2-b2c1658e4823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0b:8d:61:37:f1:0c:86:fd:3f:b9:f8:64:af:
75:d6:02:97:35:e1:3f:44:1a:3d:03:61:49:ef:ce:
6a:5a:36:2a:10:37:11:f0:91:3f:41:dc:bb:34:69:
63:3b:45:fe:89:e7:2d:32:02:c7:83:4a:1d:9e:f5:
ad:44:35:bb:c2:b5:da:0f:74:59:32:01:6e:ab:e9:
6d:5d:a3:1c:c3:b7:e4:15:05:b4:4f:2b:9c:60:29:
ec:89:97:56:b2:b1:cd:9f:11:d1:ff:ab:3a:2f:0d:
e7:5a:bb:3d:4e:0e:12:b9:f5:ce:84:6b:b7:cf:ce:
86:a7:d6:c7:0b:22:95:c5:5d:23:bf:c9:0b:6f:a2:
00:8a:f0:36:20:37:9c:46:fb:c6:e4:02:6b:23:8e:
1c:5c:45:97:3f:b5:ad:ef:52:ed:b4:4e:02:11:3a:
41:c8:81:22:0f:6b:48:65:6a:59:d2:4b:66:cc:f2:
ea:db:f9:0a:92:cc:51:3f:59:88:c7:30:79:1f:78:
70:b5:44:6c:4c:a9:ea:14:46:88:db:51:e8:cd:2a:
1b:49:f1:9a:5d:5c:41:a3:89:92:e9:30:79:25:68:
65:ce:76:83:59:6a:dd:3f:ef:88:5d:43:53:13:c9:
44:f0:2f:95:e8:1c:02:44:8d:45:dc:37:5d:e6:92:
62:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8E:0F:D8:59:FB:72:E0:86:4F:99:11:88:0E:0B:40:57:73:EC:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ec672012-8d3c-35fe-9cec-56bd87325cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
X509v3 Authority Key Identifier:
keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
sbgp-ipAddrBlock: critical
IPv4:
147.1.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:73:85:f2:b5:1d:10:99:0c:57:cc:38:2b:19:c1:9e:1f:bf:
76:45:b2:04:b1:45:86:60:f6:1b:22:9b:2d:d1:12:7c:ea:c5:
c6:99:9f:bf:4f:3c:1a:00:17:7e:e5:31:36:88:4d:5d:95:81:
18:bc:4d:66:8b:e8:f0:52:1f:f3:3d:76:d3:08:42:15:f9:c0:
e8:d1:89:1a:54:2f:27:de:d9:d9:96:e4:b9:0a:3d:d6:f0:72:
04:40:ba:09:54:be:69:de:0d:b3:f3:d3:12:c1:a0:28:49:9e:
5a:67:9f:42:4d:89:c6:62:fb:e2:b4:99:e2:b5:49:e8:97:88:
9f:20:5e:09:c8:b5:0a:f2:d9:b0:da:11:e1:ac:07:a5:2a:cd:
27:b8:55:59:22:7e:1a:31:a5:a6:66:ea:e7:d3:55:04:a2:3f:
3d:78:14:10:8b:58:0f:81:25:b9:7f:8d:d8:51:86:ab:31:e5:
18:28:9b:77:e2:70:de:5a:9d:13:93:a6:de:15:c1:26:fa:56:
7f:54:2e:f3:2b:67:23:da:16:90:48:a1:38:ea:b5:eb:be:fd:
d6:c8:a1:db:bc:02:0b:c9:62:a8:d0:03:9a:39:e6:78:8b:f7:
a6:cc:fe:0b:0a:17:c4:9d:64:35:53:74:12:ca:e3:7d:05:88:
77:15:ce:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:25:50 2026 by rpki-client