
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9851550-48fa-3e67-a75b-c441d378e2ab.roa
File: b9851550-48fa-3e67-a75b-c441d378e2ab.roa (raw, json)
Hash identifier: SOtWKyueT1Lom2n8QMScszTrBm3I5db5PJjCIYS7dy8=
Subject key identifier: 5F:CA:3B:50:EC:4D:BB:11:05:52:86:E8:73:8C:4A:3D:47:97:1C:D3
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584F655D778E398D5D9667D78700
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9851550-48fa-3e67-a75b-c441d378e2ab.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 22742
IP address blocks: 163.253.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5d:77:8e:39:8d:5d:96:67:d7:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=526eaf06-e9a4-4859-93fd-ae94fb144e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:71:6f:6e:9d:9f:aa:e6:48:e4:8a:7b:60:
bc:33:14:e6:3f:26:10:37:d5:da:98:16:59:c5:74:
86:e9:74:a4:10:b5:46:a1:75:c9:2e:85:13:f4:1a:
92:f5:e7:f2:fd:a1:c1:3e:70:fa:67:44:44:fc:4a:
b8:98:67:7b:06:8c:ce:fe:0d:28:21:f5:f3:04:18:
d8:df:fc:a5:6d:3a:31:53:f9:aa:c7:ca:bd:4b:a6:
ba:c3:27:d4:08:11:33:ac:5a:69:9b:f9:6f:41:e6:
50:38:97:66:a1:83:5a:70:1a:f8:f8:ae:e0:f9:ad:
2d:eb:c3:e3:09:78:64:85:ed:ae:a2:95:52:b3:61:
e6:5f:76:47:dd:4b:db:35:cb:51:8d:ac:94:0c:ee:
de:5a:7b:15:54:ec:6b:6b:f8:4d:00:63:52:4a:65:
06:6e:cd:77:3b:32:9e:6a:99:21:40:aa:1b:7f:f0:
c9:67:d2:6a:a4:ec:19:c4:98:91:f2:50:8c:4c:8f:
2a:5b:2f:06:83:cc:64:5f:70:c4:c8:a7:c7:05:0a:
2b:06:51:15:5b:e4:f2:da:80:a7:b8:4a:a2:97:90:
3f:ec:b7:a0:b5:95:4e:3f:cf:55:8c:dc:ff:2f:a4:
19:11:9c:6f:6e:f9:15:31:2c:52:ac:89:08:8c:85:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CA:3B:50:EC:4D:BB:11:05:52:86:E8:73:8C:4A:3D:47:97:1C:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9851550-48fa-3e67-a75b-c441d378e2ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:a5:c3:9e:10:71:a5:57:9c:be:48:80:62:90:15:ea:70:e1:
6a:08:0b:c6:a9:70:a2:cd:a4:9c:24:4d:a8:1c:c8:2d:c3:ac:
f0:d5:02:0c:7a:eb:3f:35:d5:0e:41:5a:df:cb:a0:0b:34:63:
f6:07:85:4e:43:c0:2d:67:fa:fb:4c:9f:c8:10:f4:af:83:b2:
1d:87:d7:aa:8c:4a:60:e6:21:69:55:ca:fb:74:8a:4c:a0:1a:
4c:32:2e:a9:24:cc:4c:55:97:1b:1a:92:d5:60:14:07:b0:56:
50:99:36:70:ed:7b:23:4b:22:2e:2b:95:c1:bc:2a:b6:3b:90:
be:db:8a:de:17:c2:f5:d5:83:35:ac:a3:81:52:b9:21:fe:0b:
57:fb:70:40:45:33:7a:1a:ad:fa:08:90:70:67:45:76:94:9a:
8c:f0:17:d7:06:2f:fc:33:b1:05:8d:b3:00:9e:f2:51:ad:84:
0a:da:c3:1f:3d:11:ca:3b:6c:c5:2d:64:4d:94:9b:dc:27:19:
92:8e:49:ba:a5:e1:86:02:ef:ae:a4:21:2e:9a:bc:39:53:d6:
3b:b7:46:10:36:15:f0:02:44:39:f8:9d:1e:e2:36:65:a1:ce:
57:c1:67:12:91:ed:ba:4e:1a:97:41:a3:5e:12:bb:a3:2c:48:
61:f9:0e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:18:01 2026 by rpki-client