
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/f323cd83-3916-3544-8481-841cd81601cf.roa
File: f323cd83-3916-3544-8481-841cd81601cf.roa (raw, json)
Hash identifier: /cla5wiRUGL8dgjxv36xnWiMaDkeZIkd9F5xaORNNjs=
Subject key identifier: B2:6E:2B:3E:F8:DA:A6:D7:33:56:C7:F8:58:18:7A:F2:56:81:91:F6
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584F093CF518F4E84E47327D5F36
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/f323cd83-3916-3544-8481-841cd81601cf.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 63293
IP address blocks: 157.240.185.0/24 maxlen: 24
157.240.186.0/24 maxlen: 24
157.240.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:f5:18:f4:e8:4e:47:32:7d:5f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=2abebb13-0c32-45df-9cb7-c0c3471191a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:99:0b:41:f3:c3:8b:ea:b8:ff:73:65:0d:
c2:99:87:95:df:95:54:ac:d7:82:4c:16:38:43:66:
36:69:05:0c:f8:33:79:c4:8e:e2:ed:c3:d2:c6:27:
29:61:52:06:dd:c5:67:aa:4c:89:c9:b5:09:1f:b5:
68:73:31:c5:34:42:cf:d5:2c:59:a3:c5:c6:19:9c:
7c:88:9c:bf:44:22:ae:69:b7:6d:7e:e5:a0:ac:b7:
82:fe:19:fc:cd:c6:35:eb:5b:f6:f2:a6:71:b0:a3:
97:e2:b2:23:ba:41:ad:69:c8:a1:e3:1e:97:9c:5d:
ac:8e:79:ca:5a:e3:55:40:46:71:32:bd:bc:cb:89:
d1:86:1a:58:39:ee:79:ca:e2:47:da:23:d2:45:7c:
f8:2d:d5:de:ee:70:ea:0f:1a:dd:7a:8f:0f:8d:02:
68:27:7b:28:c6:60:56:c1:18:11:8f:2e:6f:58:1f:
7d:fe:b9:0a:14:7c:6b:b1:2c:a7:53:02:40:91:09:
b9:7f:2f:6f:5c:1d:b3:8b:df:d6:f8:05:f0:38:c1:
7a:0d:54:03:36:86:01:52:a8:47:7f:70:cf:c9:35:
82:21:32:74:7a:78:35:98:72:95:e3:81:f6:17:01:
60:2c:04:1a:29:a7:cf:13:2c:f8:83:63:10:6f:26:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6E:2B:3E:F8:DA:A6:D7:33:56:C7:F8:58:18:7A:F2:56:81:91:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/f323cd83-3916-3544-8481-841cd81601cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
157.240.185.0-157.240.187.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:e9:09:81:4e:ea:09:a4:6e:29:8f:eb:da:29:72:6f:40:83:
a4:41:72:a6:b2:ee:19:a8:97:39:f4:39:07:ae:e5:eb:1b:fe:
02:d1:c9:27:b9:53:52:e3:0d:0c:96:91:c2:1f:e9:8b:f9:3a:
be:21:91:fa:f7:79:17:9f:50:c3:78:62:79:4d:3b:46:52:b1:
00:b0:7e:af:74:b7:e2:36:4f:0d:d2:1f:4a:56:35:82:df:b2:
bc:e4:54:25:ba:21:b0:d7:8f:97:74:6c:a1:40:29:df:be:f3:
18:0b:a6:80:17:59:26:7a:c5:4f:8b:e4:e9:1a:84:13:bf:f9:
45:d3:a9:b8:25:08:97:37:e5:bb:28:0d:02:38:f0:13:80:78:
02:c5:b5:67:9e:5c:d7:e0:03:38:6c:9d:75:80:41:44:e4:59:
14:45:9c:35:9e:a3:66:7b:a2:f1:08:d1:d1:d9:47:9e:9a:04:
a3:63:a2:a9:0c:6d:05:99:85:4e:8f:1e:71:6c:12:3f:02:c3:
e3:cb:58:cd:47:f4:a5:07:57:a6:ee:1d:19:e5:57:b6:96:92:
75:32:6d:54:c5:e5:d8:dc:aa:e9:57:a2:31:a4:d4:2b:6b:71:
c7:aa:b0:2b:1a:46:3f:47:76:31:49:fe:d4:13:b4:e4:ae:14:
a5:19:14:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 13:12:13 2026 by rpki-client