
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ee130507-9307-3af3-bc18-72087ad7cc10.roa
File: ee130507-9307-3af3-bc18-72087ad7cc10.roa (raw, json)
Hash identifier: 9Y38IIdU/kfNCh4sd3NYXHf2hX4a8Ds5xSJ9JoeeFOc=
Subject key identifier: 63:2A:19:39:64:35:19:1A:A8:C8:11:A6:72:64:05:F2:A0:EF:47:C7
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584F655D72B21A5261711129B300
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ee130507-9307-3af3-bc18-72087ad7cc10.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 396961
IP address blocks: 163.253.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5d:72:b2:1a:52:61:71:11:29:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=68ea76a8-2d3f-462f-b5ff-b926d893afd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:38:c7:88:67:fd:da:3b:df:d4:b9:d7:56:42:
23:ad:69:f1:e3:66:a5:f2:4d:f1:a1:44:2f:1e:04:
b1:30:69:f9:1e:63:d6:f8:2f:79:ba:1b:a3:d8:e6:
fd:5e:47:c0:32:7e:f9:3b:04:33:9f:3f:73:ac:bf:
81:a7:9f:4c:d9:c9:63:67:d2:d2:2c:66:60:eb:f6:
bb:d2:c1:b1:bb:70:f2:1e:93:88:d1:3a:76:60:b1:
e2:0a:6c:d5:d2:c7:dd:2d:ea:f5:8c:82:a8:8d:aa:
0d:51:f1:82:43:83:57:58:0c:92:b5:27:a1:a6:1e:
0c:ed:db:27:d3:31:f1:d0:3c:87:13:31:96:bb:70:
e4:de:f5:01:87:89:2d:b5:ed:b2:cb:b2:a6:92:c8:
87:2f:13:dd:e1:95:70:7f:a8:50:fe:2b:68:66:13:
db:4b:9e:84:4e:f6:18:e6:e9:f8:ed:1d:7a:d4:15:
ff:d9:c0:3a:59:07:a4:a9:37:03:7f:80:99:25:7b:
48:5b:6a:db:3c:68:1c:ae:c6:ef:f0:2b:55:51:f3:
c3:10:f5:5d:2c:6f:e8:89:30:4d:84:cd:a6:e6:70:
58:f1:da:16:4d:8d:6e:7a:4d:fc:a5:9a:00:2d:78:
2c:f1:78:7e:89:f8:e6:4f:dc:31:32:10:bf:6f:7b:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2A:19:39:64:35:19:1A:A8:C8:11:A6:72:64:05:F2:A0:EF:47:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ee130507-9307-3af3-bc18-72087ad7cc10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:02:d4:5e:62:12:cd:93:59:a8:29:17:3d:44:b3:ab:e9:f1:
84:d0:7b:92:9c:71:52:51:5b:bf:d1:8b:3a:0f:88:34:b6:95:
9a:19:59:ac:fa:48:b5:a1:7e:8e:e2:52:b4:8e:7f:c0:37:46:
4f:41:93:e6:2b:23:b2:88:89:e1:76:aa:c0:52:5d:c1:35:8c:
f6:d8:cb:37:5f:93:c1:3f:96:38:0e:78:54:a5:48:1b:55:c4:
08:24:ea:cc:aa:fd:b9:2b:93:25:0a:cc:a2:68:8d:51:f1:04:
ca:59:9d:ab:a5:82:70:50:0c:5b:39:6e:d2:2a:99:64:f1:c5:
89:64:fb:c0:b4:31:58:b0:38:67:18:3a:d1:dd:b4:f5:18:22:
db:bb:f7:55:c5:33:00:45:77:87:07:a6:3b:90:2b:e8:05:a3:
9e:46:97:0d:dc:51:47:56:d3:ee:2f:e3:f8:3f:06:aa:da:a2:
4a:16:7d:bf:5f:6b:c2:81:e0:34:22:f3:f9:2d:bd:e8:c3:ba:
a4:47:ab:de:1c:90:64:32:d5:b5:4e:a1:e0:4d:01:cc:b6:3b:
9f:bf:3d:a0:15:90:de:e7:39:2b:92:77:4a:57:38:37:12:0a:
20:11:7a:b8:7c:d7:fc:e2:75:82:83:e8:56:db:28:0d:2a:64:
b7:6e:e3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:53:26 2026 by rpki-client