
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa
File: b9903dfd-ddbe-3fba-9d99-deda5659260c.roa (raw, json)
Hash identifier: 78G3BMJunOsW3+Bw/n+FaEztpEPALggJJhEahP1wp54=
Subject key identifier: B0:46:D8:4F:24:3F:73:6E:E0:0A:5F:EB:80:02:46:8F:55:C4:A7:FB
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584F4976856BE1E8A9A9AEFA5D00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 11537
IP address blocks: 163.253.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:85:6b:e1:e8:a9:a9:ae:fa:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=296b59a8-e08d-42ca-848d-c34c60af6a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:5c:74:da:e3:88:c4:ea:ee:9e:b6:37:db:
1f:72:e8:b1:d7:29:5e:ab:5e:4b:81:50:d0:9c:7f:
a3:ab:69:7c:af:71:15:a3:e1:33:c3:29:57:69:a6:
29:f2:05:ad:66:5f:a5:46:66:a0:ac:3e:5b:a2:c3:
6f:41:66:aa:91:54:8f:2d:ad:a0:08:55:c3:7a:33:
a8:45:e2:74:93:d6:5e:8e:20:a1:66:93:81:63:d3:
81:55:cf:46:c0:fd:f3:ad:05:d8:53:1f:f7:72:49:
89:a7:66:35:5a:9e:95:85:40:db:d6:b9:54:df:c3:
a0:1c:6b:b6:45:10:7c:e2:89:31:2f:4b:ce:03:41:
f5:fd:ce:46:10:ff:78:a9:5f:dd:c3:ee:b4:77:64:
c3:c4:5d:98:46:5c:82:82:d1:ff:2d:d1:dc:5d:6f:
84:b0:8a:78:54:0d:03:bf:83:8a:37:9c:a5:45:3a:
aa:e4:67:80:80:00:ec:96:9b:48:95:50:cc:3d:77:
73:2e:5b:d7:4e:b3:b2:b9:41:be:ab:9f:cd:33:e1:
97:ad:f6:16:58:5e:0d:ab:17:80:cd:b3:06:71:1c:
3b:78:b3:9e:41:26:b2:60:da:13:3d:71:d9:9d:31:
b2:7a:97:12:ee:e0:f6:b8:4c:5c:b7:fe:31:4b:df:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:46:D8:4F:24:3F:73:6E:E0:0A:5F:EB:80:02:46:8F:55:C4:A7:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:7b:88:8d:c2:ba:9e:c8:97:ce:dc:f6:fa:de:4b:39:c6:80:
92:2f:14:b6:92:4a:38:45:66:ca:5f:af:13:48:5a:db:f8:58:
9a:1e:61:6c:81:f4:31:9d:f5:25:52:48:59:99:8c:98:8d:e9:
9e:90:f8:6a:32:39:52:89:99:da:5a:ef:a0:c8:d4:28:96:44:
67:fc:04:ea:e5:73:8e:a5:33:4f:48:67:1d:1f:d6:0d:6c:10:
78:4a:12:58:f8:2e:00:cb:78:2e:86:1d:be:9e:72:e6:15:e1:
a6:e9:02:6e:f7:4d:fc:5c:f3:ae:59:5e:dc:32:0c:de:4b:c1:
63:51:82:94:d9:53:b7:d3:a1:f4:07:a3:9a:9e:83:ef:38:df:
6c:c0:26:06:bd:09:2f:a5:69:ae:43:97:02:68:be:ed:02:df:
38:67:09:45:ed:12:ee:32:4f:f5:90:71:e7:b2:8b:78:01:84:
4d:71:fe:34:40:5d:5d:95:0b:7d:33:ad:46:56:50:a2:f8:bb:
5a:00:86:e9:da:35:65:bd:8e:1d:94:e3:85:7d:e2:3a:92:f1:
40:5d:ee:20:fc:04:9c:9d:b4:08:62:e4:de:72:2d:d1:9f:04:
6b:f5:95:20:3c:46:18:0f:09:f3:f1:49:c5:58:08:31:88:75:
00:dc:41:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:55:53 2026 by rpki-client