
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2f00f4bf-c3f7-32a9-8b3f-73d30533cd40.roa
File: 2f00f4bf-c3f7-32a9-8b3f-73d30533cd40.roa (raw, json)
Hash identifier: ZiXHxiyC7b0wBZC+48qTpGT+Rjon3DhTIdArgv8jzE8=
Subject key identifier: B4:A2:E5:BD:87:8A:1C:E1:26:F1:6D:8E:39:A6:19:A7:9B:C2:D8:EE
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584D7CCFE5B4AA5B354951832680
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2f00f4bf-c3f7-32a9-8b3f-73d30533cd40.roa
Signing time: Mon 13 Apr 2026 01:00:24 +0000
ROA not before: Mon 13 Apr 2026 01:00:24 +0000
ROA not after: Sun 12 Jul 2026 01:00:24 +0000
asID: 6079
IP address blocks: 161.58.0.0/16 maxlen: 24
198.65.128.0/18 maxlen: 24
198.65.224.0/19 maxlen: 24
199.240.0.0/16 maxlen: 24
206.58.0.0/16 maxlen: 24
206.86.0.0/16 maxlen: 24
207.21.128.0/18 maxlen: 24
207.22.64.0/18 maxlen: 24
207.31.192.0/18 maxlen: 24
207.32.64.0/18 maxlen: 24
207.33.0.0/16 maxlen: 24
207.97.0.0/17 maxlen: 24
207.150.0.0/17 maxlen: 24
207.153.128.0/18 maxlen: 24
207.153.192.0/18 maxlen: 24
207.158.192.0/18 maxlen: 24
207.159.0.0/18 maxlen: 24
207.196.0.0/17 maxlen: 24
207.197.128.0/17 maxlen: 24
207.199.0.0/17 maxlen: 24
207.206.0.0/17 maxlen: 24
209.69.0.0/16 maxlen: 24
209.75.0.0/16 maxlen: 24
209.130.0.0/17 maxlen: 24
209.157.0.0/16 maxlen: 24
209.238.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7c:cf:e5:b4:aa:5b:35:49:51:83:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 13 01:00:24 2026 GMT
Not After : Jul 12 01:00:24 2026 GMT
Subject: CN=86157133-0fdd-4312-bcd9-3bf78f5cc8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:a9:34:0b:79:d4:15:22:61:c2:b2:71:7e:
8f:73:31:cf:3a:28:b9:b3:b3:84:c8:f8:dd:c6:bf:
4c:ac:0a:53:89:c8:1c:98:c3:e6:5c:4f:a4:40:f8:
d4:92:de:78:68:69:ed:7a:51:02:71:dc:95:ee:83:
36:89:6b:2a:44:c3:30:7c:05:91:e2:50:59:f7:d6:
36:a8:7c:ce:78:93:98:1f:ed:d6:64:8a:c1:6d:05:
bf:cf:97:39:52:c7:f2:7b:14:f1:8f:1e:57:cb:a1:
e9:ba:cf:a0:9b:49:c9:93:87:e2:c2:7d:db:de:ff:
94:57:ed:e0:1f:0c:82:6c:64:bb:29:f9:83:ed:27:
bf:62:97:5e:ce:13:62:01:0e:bc:f2:87:fe:94:e7:
6f:76:0e:e5:eb:ce:48:2d:c9:3d:9e:e6:c3:91:bd:
7f:12:ac:94:e2:33:52:fa:71:12:c3:b5:dc:ee:4f:
7b:e0:16:6f:4c:f9:56:e1:ca:d2:c4:10:2b:65:5b:
0b:4f:6a:68:fe:f7:93:a3:00:1b:cc:b4:04:85:88:
17:bb:fb:0b:03:e4:1e:7d:ee:29:57:9c:95:c9:89:
4b:cd:3d:25:ab:25:00:fe:96:2e:e1:86:b0:51:65:
d7:8c:b1:96:1d:c6:7c:2f:0e:3c:f4:f3:25:30:45:
f8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A2:E5:BD:87:8A:1C:E1:26:F1:6D:8E:39:A6:19:A7:9B:C2:D8:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2f00f4bf-c3f7-32a9-8b3f-73d30533cd40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
161.58.0.0/16
198.65.128.0/18
198.65.224.0/19
199.240.0.0/16
206.58.0.0/16
206.86.0.0/16
207.21.128.0/18
207.22.64.0/18
207.31.192.0/18
207.32.64.0/18
207.33.0.0/16
207.97.0.0/17
207.150.0.0/17
207.153.128.0/17
207.158.192.0-207.159.63.255
207.196.0.0/17
207.197.128.0/17
207.199.0.0/17
207.206.0.0/17
209.69.0.0/16
209.75.0.0/16
209.130.0.0/17
209.157.0.0/16
209.238.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:33:1e:e9:af:2c:70:80:83:46:44:ea:0f:f7:ae:b6:9f:89:
14:31:b8:28:2c:f2:86:e8:cc:3e:80:52:32:2e:56:cc:c8:5e:
8a:40:fb:68:f7:d1:90:3b:bd:a7:08:d6:4c:84:c4:51:2e:8c:
5e:01:6a:3f:27:60:bb:39:b4:04:f7:7e:d5:f0:e9:e4:55:1f:
63:03:85:a4:49:55:52:8f:86:9e:ff:49:a1:50:85:d2:1b:b4:
42:ad:05:d9:a9:c7:37:ae:b2:fa:81:6b:a3:7d:f8:a8:ee:d3:
88:79:6b:4d:0a:3c:12:53:78:c9:a6:08:4a:29:35:d0:d8:12:
36:bf:cd:5a:db:d8:0b:1e:c7:8b:fd:7b:a1:e6:b7:98:e9:27:
06:07:41:9d:25:d6:d1:c1:d7:bf:1a:3f:fb:c5:31:32:cb:44:
7b:64:4f:93:d5:0e:8c:54:b6:56:82:59:dc:88:25:ff:7c:68:
9e:a2:b1:12:0e:ed:ec:1d:74:8b:1e:15:16:23:f8:c2:75:c8:
42:6e:f0:ec:60:3e:d9:7c:b0:cc:3b:f6:09:f9:82:59:9f:5e:
4d:bb:a4:44:07:de:2f:f8:86:6e:c3:4a:0d:54:07:fa:91:ae:
19:27:18:c6:61:66:ce:e1:a4:29:ac:ef:67:99:28:1e:55:f8:
2a:4c:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:01 2026 by rpki-client