
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa
File: c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa (raw, json)
Hash identifier: D1XL4RvV3JldtlOm557FXmPZoIB7i+2bawxLrnVsEXc=
Subject key identifier: F8:4C:CD:79:A3:70:1F:C0:1D:22:51:73:8C:3C:B2:85:E8:4B:7F:DC
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F4328584F225CFF123476AE4000F3BC00
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa
Signing time: Fri 11 Sep 2026 01:00:12 +0000
ROA not before: Fri 11 Sep 2026 01:00:12 +0000
ROA not after: Thu 10 Dec 2026 02:00:12 +0000
asID: 21928
IP address blocks: 65.76.0.0/16 maxlen: 24
167.20.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:22:5c:ff:12:34:76:ae:40:00:f3:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Sep 11 01:00:12 2026 GMT
Not After : Dec 10 02:00:12 2026 GMT
Subject: CN=fd246a7b-9c3f-4598-86ec-145fbdbcf999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:52:ef:87:4c:bb:36:92:0d:05:2e:f3:79:
ef:25:c1:c9:6b:56:21:b7:2e:ac:a0:33:09:4e:6a:
c4:96:4d:7f:53:a1:00:77:e4:76:9d:9c:e3:0d:bd:
ad:cd:d4:43:59:f5:aa:75:48:b9:44:77:98:43:ab:
f6:1d:0e:93:bc:42:c4:1a:e0:c3:92:27:bd:81:b5:
e8:e4:25:ea:a8:2b:a2:58:5b:f8:f6:08:3d:7d:18:
42:cb:9e:83:05:71:43:a6:5b:2e:8a:dc:5d:b9:9f:
72:e7:11:8a:17:26:d7:1b:bd:bc:5f:41:0a:4c:e8:
38:37:0d:84:28:ab:b1:49:8d:6e:27:97:9f:16:cf:
28:bc:a7:02:88:39:db:3f:13:8e:56:db:bc:a9:62:
6a:31:08:a4:cd:23:3e:d9:d9:0c:6b:d8:8c:dd:13:
11:ef:1b:b8:76:de:91:00:8d:67:20:96:58:f2:d4:
39:18:49:8e:4f:74:c4:87:13:38:89:95:c5:12:f0:
89:51:5b:88:9d:91:f8:6d:30:30:87:0d:4d:a9:d6:
96:d0:2c:14:0e:12:b2:12:45:84:76:d7:40:cf:ca:
b6:68:27:f3:57:9f:c9:52:46:fd:dd:c4:ef:d0:45:
11:28:a6:c2:0a:d3:eb:fb:f2:c3:bb:07:85:04:bd:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4C:CD:79:A3:70:1F:C0:1D:22:51:73:8C:3C:B2:85:E8:4B:7F:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.76.0.0/16
167.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
f5:d6:ce:f9:c4:42:bc:ec:96:93:22:18:ea:b9:87:8c:e4:69:
ce:a9:8e:05:21:68:5a:af:2c:0d:bc:54:1c:b2:7d:69:8e:56:
bc:4e:c4:85:c5:4e:55:80:71:87:30:19:34:d8:99:2c:2f:6a:
7e:da:61:df:f2:22:48:ec:33:28:29:c7:78:dd:bc:12:dd:02:
34:fc:9a:22:44:bc:89:6e:75:66:ec:a7:ca:0c:6b:79:d3:99:
8b:a0:6f:79:a3:c6:2a:1e:6f:e4:e5:bf:a7:75:46:df:37:3a:
39:97:be:08:3c:6c:29:67:c7:ce:ab:86:26:9d:90:e9:65:69:
4a:3f:f1:e1:c0:c5:eb:2c:5a:1f:58:77:35:d5:c6:d8:91:cf:
a8:88:9b:91:09:d4:bc:d7:15:d5:81:a6:b7:bc:18:cc:6b:bc:
ab:59:cb:e9:08:ed:30:70:be:54:34:62:52:73:61:e6:4c:61:
5e:31:96:9d:84:1b:df:75:93:ea:d9:0c:88:7a:81:69:2f:27:
3d:86:b4:6d:78:88:e3:4c:de:d6:9f:63:32:20:33:69:a7:97:
c7:bc:b4:c1:12:aa:0e:06:95:23:7b:e3:30:4d:80:3a:ab:14:
16:5e:53:75:38:f7:a2:5c:43:f0:f5:ed:5c:d5:8b:51:df:f7:
68:2e:9f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:27:36 2026 by rpki-client