
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/ef54177b-e3c0-3957-95e4-5eb0ff55c4c8.roa
File: ef54177b-e3c0-3957-95e4-5eb0ff55c4c8.roa (raw, json)
Hash identifier: Xnx8IRNiYV2+KJY5bha+8qljGfhG4Rf1SKWU7PTuxiE=
Subject key identifier: C8:D6:4D:52:62:F4:35:B9:1D:E7:27:8A:BE:AE:28:05:7D:CE:13:FB
Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
Certificate serial: 010D0C9F4328584F57681387B9A1AEF8FE33FC80
Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/ef54177b-e3c0-3957-95e4-5eb0ff55c4c8.roa
Signing time: Wed 30 Sep 2026 01:00:12 +0000
ROA not before: Wed 30 Sep 2026 01:00:12 +0000
ROA not after: Tue 29 Dec 2026 02:00:12 +0000
asID: 6079
IP address blocks: 203.33.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:57:68:13:87:b9:a1:ae:f8:fe:33:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
Validity
Not Before: Sep 30 01:00:12 2026 GMT
Not After : Dec 29 02:00:12 2026 GMT
Subject: CN=75eef67c-5180-43b6-9ac9-e5f228f76ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:c1:47:91:c1:09:c9:0f:97:76:8e:e4:91:
aa:db:45:63:28:af:94:de:84:07:8a:ff:95:36:aa:
7f:40:21:b9:08:84:93:de:7a:98:a9:17:ee:7d:78:
c4:a4:5d:d8:3f:28:54:57:0e:a6:07:10:19:fc:d9:
e0:1a:fe:76:70:b7:af:01:20:ca:76:cc:e7:39:10:
ae:0b:d2:88:22:0d:3f:e3:ef:1f:bd:38:a7:d2:5f:
eb:e3:af:29:f1:dd:9d:b9:6d:a9:5b:df:74:a2:47:
1c:55:85:61:ae:11:7d:8f:7d:3a:7b:a9:41:b1:87:
ec:0c:65:a6:0d:38:d1:4d:51:88:73:3e:84:42:81:
99:a1:59:00:90:cd:a6:33:2b:02:2e:81:01:6b:88:
bd:99:dc:f8:48:7f:3d:6e:9a:40:62:3c:bf:8b:78:
95:73:b0:ce:cd:ce:7c:d3:b8:00:c2:d8:20:df:22:
c2:2a:cb:bf:24:4d:e0:f8:30:9c:5f:f7:f5:ed:b5:
5c:7b:5b:ff:be:d0:6e:46:56:9b:b7:0a:0b:36:2b:
ce:ba:87:90:b1:54:45:3d:01:c0:e4:01:4a:f2:fc:
fa:b8:75:b2:cd:7f:64:c4:dc:43:60:b7:a2:15:f8:
30:fe:e8:d8:16:8b:f5:8e:e0:12:3c:f3:80:fb:e1:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D6:4D:52:62:F4:35:B9:1D:E7:27:8A:BE:AE:28:05:7D:CE:13:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/ef54177b-e3c0-3957-95e4-5eb0ff55c4c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl
X509v3 Authority Key Identifier:
keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
sbgp-ipAddrBlock: critical
IPv4:
203.33.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:bd:15:c2:6a:aa:f5:cc:4d:84:1d:80:9d:8d:2a:8c:9b:81:
91:76:0e:12:b0:48:31:64:0e:d3:c1:16:db:87:68:aa:64:70:
47:85:1d:32:bd:b2:df:86:c6:e9:a7:30:f2:18:78:2d:5f:0a:
7a:e6:67:50:3a:a9:54:d5:d7:bc:c7:ec:3e:f8:c9:cd:19:32:
56:02:12:69:3f:82:a9:40:f1:bb:89:6d:52:b6:69:d2:1c:ef:
13:25:e6:d0:b7:f4:90:c5:6f:fb:8c:6c:a3:b9:49:a7:dc:17:
8a:03:03:73:16:64:a3:3a:a4:62:e4:5f:a1:23:e6:4e:74:2f:
a0:3b:bc:b1:64:a2:49:7b:ea:b2:f1:dc:c9:4f:28:97:db:bb:
55:5d:65:5b:5a:6c:d8:73:47:b0:14:77:4f:54:12:a8:27:db:
19:d2:04:bc:d2:a5:be:03:12:88:d7:2c:79:8e:33:d5:71:b5:
c4:d0:84:76:be:bb:19:ad:a6:c1:e6:41:9e:c1:ae:8c:00:46:
0d:78:5e:0c:5a:fd:52:b9:cd:f1:9c:4e:94:dc:77:8d:fc:fc:
b3:1f:64:f5:fe:4e:f4:9b:23:76:af:bf:cc:4c:b3:8d:1a:57:
b7:5e:f8:8c:2c:56:fc:44:f8:9c:d1:42:59:91:27:51:65:1a:
7a:41:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:51:51 2026 by rpki-client