
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa
File: 8d86e371-b987-3a40-92a0-b73d73f009c3.roa (raw, json)
Hash identifier: RZU0d0plX1rBhEKSYiPcQVS5UVhNLUmhjqYdrkJmyBw=
Subject key identifier: CC:E7:D0:BB:FA:CB:DC:67:FD:DA:7F:F3:DC:2D:BB:5D:D3:86:E3:15
Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial: 010D0C9F4328584F2EED0D6B20A3F28B7DB0C4A0
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa
Signing time: Tue 15 Sep 2026 13:00:12 +0000
ROA not before: Tue 15 Sep 2026 13:00:12 +0000
ROA not after: Mon 14 Dec 2026 14:00:12 +0000
asID: 394893
IP address blocks: 205.234.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2e:ed:0d:6b:20:a3:f2:8b:7d:b0:c4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Validity
Not Before: Sep 15 13:00:12 2026 GMT
Not After : Dec 14 14:00:12 2026 GMT
Subject: CN=a488859a-8d0d-47be-b142-acd955158ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ed:0c:11:64:4c:c3:cb:22:b5:8f:97:d8:09:
cb:c2:fe:ed:eb:96:17:f3:b0:83:97:55:ed:c1:f5:
10:52:11:5b:98:f5:5e:4a:d8:cc:a2:9d:78:69:a4:
cc:88:6f:6e:ca:f4:b5:0f:38:64:1e:b6:00:8b:c5:
9b:0e:36:5d:9d:08:53:12:46:52:9e:57:93:0a:ea:
c1:61:f1:fa:d1:d5:32:0e:b0:69:26:f8:08:28:f6:
48:b6:2f:b9:a4:fc:40:e4:56:88:94:6a:79:0c:22:
5f:a3:79:ad:79:39:a8:cf:26:11:bb:8d:e4:a6:4f:
1a:57:8e:cf:54:c3:38:33:d9:72:4b:bc:61:39:77:
75:f5:81:d5:63:71:5d:20:69:38:2b:40:89:40:aa:
de:15:b8:12:81:40:ae:6e:21:8d:93:f8:03:28:c0:
28:cd:f1:82:0f:19:0c:8f:89:e8:29:08:fb:22:b2:
fb:51:cf:4f:8e:c1:38:fe:6e:dc:82:ff:f8:8a:a4:
49:9c:db:d2:ab:98:db:21:c9:6d:0d:0e:d6:a8:ab:
24:48:5c:1e:de:75:0d:9c:d1:1c:7a:2c:85:92:0c:
c4:41:50:ef:8e:93:3f:3a:97:7c:9c:34:bb:0a:57:
0a:a2:00:77:9f:63:83:ac:b6:b5:42:a6:f1:28:76:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E7:D0:BB:FA:CB:DC:67:FD:DA:7F:F3:DC:2D:BB:5D:D3:86:E3:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
X509v3 Authority Key Identifier:
keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
sbgp-ipAddrBlock: critical
IPv4:
205.234.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:50:b2:94:c7:1e:10:18:90:d9:e8:65:15:45:47:1e:09:7f:
dc:37:8f:b7:c0:9b:5e:8f:a3:e8:f6:3f:30:f5:ec:7d:63:43:
3a:f2:fb:fe:9e:67:f0:58:61:82:8f:e3:01:1c:e7:8b:5f:6d:
07:10:3d:9a:57:94:a3:8c:4f:d9:9b:36:4e:d5:67:d8:24:c4:
cc:53:73:ec:20:5a:ee:45:60:e5:3c:c0:23:ac:14:7a:98:08:
f0:d1:7f:d9:e8:78:ba:26:f7:a5:66:be:1b:41:0a:ba:e8:2d:
43:3f:e9:c0:16:47:18:70:32:d6:0c:d7:9a:b5:a3:4a:86:75:
20:b9:c1:98:ab:67:d5:10:48:ad:4b:b8:90:7a:a7:7c:47:96:
79:4f:9b:f6:38:ec:d3:d9:10:6b:5a:89:9d:b8:99:85:72:e7:
c0:0a:52:7c:3f:73:16:75:52:f7:d1:73:37:53:66:bf:e0:89:
a9:76:ab:8d:80:9e:32:97:af:7a:43:79:0f:10:72:b0:fd:60:
97:a5:73:05:e8:28:9c:ec:51:2f:09:6b:12:0d:13:23:56:c3:
4e:a6:e7:24:99:5a:51:de:90:6b:93:8c:46:68:f9:72:1f:eb:
a6:e4:2e:ad:10:0c:78:65:83:a5:49:03:57:a3:dd:e2:cc:cf:
49:cc:90:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:24:26 2026 by rpki-client