
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa
File: 2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa (raw, json)
Hash identifier: TJsNnSk6wsum7OO0C9peM/korStsypQhD5G3QH8lZZ4=
Subject key identifier: 08:DC:61:8C:BC:9A:07:E7:6C:CB:55:9B:75:AA:FC:3E:B0:66:D9:0E
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F4328584F06723049D78A750472CC8440
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 21928
IP address blocks: 168.73.0.0/16 maxlen: 24
170.206.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:30:49:d7:8a:75:04:72:cc:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=1f4b4bf6-f99a-4994-a5b4-fbbd76a23311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:4a:82:97:8b:80:b2:78:d0:b6:b3:92:89:
ee:3d:ec:d0:ea:06:6f:09:38:44:5e:63:97:84:14:
a6:49:8d:13:a3:e9:a7:0f:54:5e:46:f3:12:e8:b2:
3c:3c:4f:ae:72:00:62:77:53:3f:a5:e9:e7:2a:a0:
71:71:66:0a:0d:dd:1b:63:4b:04:99:85:ed:3f:f2:
65:7c:1e:e9:3a:16:69:71:33:c8:7a:7c:80:0c:e7:
d6:79:84:f4:a1:70:e4:33:72:ba:a3:30:46:5f:db:
60:33:ed:92:c2:78:8f:bf:73:b4:f6:1e:71:ba:45:
6f:65:71:8f:c3:d0:e4:f3:4d:db:d3:75:15:38:cb:
9f:09:e4:12:ed:c2:87:a7:ad:af:73:8b:2a:da:cf:
85:23:c5:d8:98:63:fc:eb:30:ff:81:3e:4b:f2:bc:
41:f6:7a:c5:97:05:18:50:45:a4:c7:f5:2f:c9:59:
b7:01:b3:4b:31:99:a5:12:09:81:ff:27:08:d9:ad:
ca:42:2e:7a:28:5b:0e:01:72:4e:71:72:ab:7a:0a:
6b:14:d8:88:32:fc:65:57:57:3d:7c:b5:0e:d0:1d:
79:2a:e7:2b:c6:bf:a8:ba:38:c6:87:5b:50:51:fc:
9e:a9:98:52:f5:f7:65:ae:3c:43:61:7f:c5:dc:e5:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DC:61:8C:BC:9A:07:E7:6C:CB:55:9B:75:AA:FC:3E:B0:66:D9:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
168.73.0.0/16
170.206.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:b6:da:49:3b:3a:f3:ba:4e:9a:c9:03:1b:23:b4:cd:fb:59:
30:dc:3e:f0:89:a1:53:be:81:d1:a5:45:0b:82:25:8d:3a:3a:
fe:5d:f4:df:06:e8:eb:44:62:54:7c:67:b0:ba:fc:09:9f:9c:
26:06:57:96:11:90:22:2d:83:17:9e:71:d4:03:51:d0:63:dd:
b7:7e:71:12:33:a7:6c:10:1d:a7:b3:db:5a:98:8b:3e:5c:a2:
a2:52:6f:85:c0:40:63:5a:56:e2:16:33:ea:95:d6:ad:21:e0:
9e:49:cd:9a:30:78:23:88:30:b3:23:66:a6:98:60:e8:dc:dc:
33:9e:91:2c:59:3b:6a:bd:90:07:68:3d:64:15:6b:fa:b3:0d:
00:d1:8a:0c:d6:30:94:6c:31:78:c4:43:7d:7f:71:cf:ef:f7:
d2:53:10:fb:a5:b9:4f:fb:b3:1d:45:6b:eb:bf:9b:d6:dc:00:
be:43:3f:ee:16:08:de:36:dd:0c:b1:f8:d2:14:2b:68:fe:4a:
43:82:0a:45:db:17:61:61:93:54:7e:8f:46:f1:b2:bc:42:4a:
db:d7:00:50:a2:14:ca:1d:a7:6d:3f:11:a2:34:4b:e0:6d:08:
3a:c5:62:59:7f:e0:b3:66:11:f2:c5:d3:3c:52:3f:7e:69:16:
60:ae:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:27:57 2026 by rpki-client