
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa
File: 5584634c-07a6-3f85-9f96-cebd2ae0742b.roa (raw, json)
Hash identifier: 22bOeC4st5JK/BAXrmfud9kNgA/P7eucavzls7g9NbM=
Subject key identifier: 4E:CB:10:91:9A:3C:C4:91:17:57:0A:E2:16:5E:91:09:F9:23:CF:7C
Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial: 010D0C9F4328584F71ED94207C1B603BAB7EEB80
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa
Signing time: Fri 09 Oct 2026 13:00:13 +0000
ROA not before: Fri 09 Oct 2026 13:00:13 +0000
ROA not after: Thu 07 Jan 2027 14:00:13 +0000
asID: 397865
IP address blocks: 216.168.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:71:ed:94:20:7c:1b:60:3b:ab:7e:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Validity
Not Before: Oct 9 13:00:13 2026 GMT
Not After : Jan 7 14:00:13 2027 GMT
Subject: CN=d3b6271f-cb22-4d2b-8da2-db6172569474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:16:ae:6d:94:b3:f6:ea:0e:ee:44:86:70:5c:
17:27:ad:b6:78:13:b3:f3:ea:6a:73:e3:01:aa:76:
15:8c:3e:24:dd:71:ca:51:f0:78:ed:d5:59:85:39:
3a:ef:64:9f:e3:3b:fe:a1:f4:7b:9c:91:58:41:4a:
67:b0:31:ea:bd:c3:12:96:f6:ed:ff:46:b0:7e:a6:
ec:2f:5a:5d:a6:34:3a:d4:52:e0:a3:17:f9:ef:23:
43:9f:98:1d:c6:a3:9c:46:92:f9:b6:f9:d7:da:84:
cc:fd:f6:96:91:5f:f8:07:de:f3:c0:01:0d:06:8b:
70:fd:40:67:da:28:a0:23:e8:5f:66:d9:b3:83:40:
4e:7e:84:cf:58:8e:47:2b:0a:bb:0d:38:8e:ca:ce:
9b:1c:11:8f:57:0c:dc:d3:06:45:f3:72:20:fe:4d:
66:80:fc:d6:77:1e:39:ed:d3:46:64:71:0f:ed:e8:
19:b2:fa:65:06:be:47:47:f7:6a:f7:d9:cf:32:01:
40:2f:17:50:7d:a2:fe:19:9b:64:92:f6:1a:12:cd:
66:f8:a0:af:66:45:3b:e5:e9:26:e0:b2:cc:d6:f6:
0d:ea:09:75:f6:14:15:71:cb:2d:94:d7:eb:7f:af:
43:c0:8e:5a:6d:c1:5c:dc:47:73:62:48:47:81:27:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CB:10:91:9A:3C:C4:91:17:57:0A:E2:16:5E:91:09:F9:23:CF:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
X509v3 Authority Key Identifier:
keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:31:33:f9:ed:06:38:5f:d3:8b:cb:95:ee:84:67:37:8a:46:
8b:25:5b:cd:ff:00:6e:08:bb:3f:f4:b7:13:36:d3:03:76:65:
f4:9d:31:3a:19:87:c1:03:c3:3c:38:62:ba:2e:8b:f4:bb:d2:
86:26:a4:42:bf:05:32:04:4d:12:3e:a9:65:23:ee:81:11:3c:
4f:97:12:43:2e:b7:d3:20:e0:61:ef:04:9c:c8:b0:a0:c3:e5:
05:3b:cd:7a:3e:ba:27:2c:78:ba:77:39:8c:63:d0:aa:6f:6a:
bb:02:6e:a7:08:6c:92:09:02:7f:52:8a:d9:ac:e4:8f:4b:b3:
a2:74:92:80:19:3e:5a:df:92:18:2d:2e:09:c1:3f:70:fe:b5:
76:bf:4e:96:cc:64:c7:7c:56:b6:b8:17:46:4e:c5:81:7a:09:
19:b1:c2:a0:fa:16:4d:17:de:35:95:c5:5b:76:07:e1:a0:21:
a7:22:a1:ec:fb:5c:8c:43:08:10:5d:1a:d1:13:77:55:76:87:
47:46:40:33:1b:d4:cd:f7:4e:0d:d0:ca:b8:3b:ba:61:8b:ff:
90:b3:8d:a5:00:6a:17:6e:d2:64:5b:98:e0:28:d4:c7:a7:aa:
63:07:62:b5:51:3b:f7:69:cc:f5:df:2b:36:dc:0f:d9:a6:75:
63:6e:b5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:35:14 2026 by rpki-client