
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa
File: 8da6384b-e652-36de-b69d-ac9de12cdc66.roa (raw, json)
Hash identifier: ORJSXZnpEO6eNJm2S296RikIWWCgBlnaqYxjot/wpS8=
Subject key identifier: 24:6C:0C:DD:E7:E1:27:21:04:8E:50:D8:1B:A7:A7:17:AE:5B:11:2A
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584EA79BAC3C57963B0A9918B980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 141193
IP address blocks: 128.242.128.0/19 maxlen: 24
128.242.224.0/20 maxlen: 24
128.242.240.0/20 maxlen: 24
130.94.176.0/20 maxlen: 24
130.94.208.0/20 maxlen: 24
131.103.0.0/20 maxlen: 24
131.103.96.0/20 maxlen: 24
168.143.160.0/20 maxlen: 24
198.64.80.0/20 maxlen: 24
198.64.192.0/19 maxlen: 24
204.1.192.0/19 maxlen: 24
204.3.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:ac:3c:57:96:3b:0a:99:18:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=d60851c1-995f-4efd-8beb-880baeb590bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:42:f9:7d:c8:03:29:4f:0b:09:2c:9f:b0:
f0:2f:d7:2e:33:71:67:c3:d6:55:84:17:e3:71:0c:
0d:7d:99:3b:2c:86:b2:89:0f:c4:79:8b:f2:66:07:
16:3b:5f:d0:c6:44:18:a0:42:60:68:7d:a9:ba:ec:
54:48:f4:a9:8b:38:57:36:8f:1e:b2:96:a9:f3:2e:
93:6f:6d:09:1e:7d:eb:2e:40:cd:95:66:2c:4d:17:
07:fa:1f:0f:64:f2:0c:c9:06:a8:41:c6:d0:3c:ab:
03:9b:43:29:90:85:53:af:1c:f3:02:cc:fc:3c:f7:
f6:9f:95:13:45:23:89:db:c2:ee:99:e3:a1:cf:d1:
5a:70:79:9c:9b:e8:60:da:d8:43:cd:dd:b8:f3:88:
1c:dd:e4:ea:d9:d0:94:55:cf:f0:18:e1:bb:f6:ba:
b3:bb:0e:7a:32:77:0a:59:e9:38:88:a6:cc:aa:cd:
a1:3a:77:20:27:df:04:9e:7f:75:87:af:3c:09:05:
a4:ec:5f:2e:6f:c3:8a:c5:3c:a2:7d:51:32:a5:f2:
3b:76:06:dc:64:78:af:52:ea:7d:dc:88:d2:35:58:
3c:36:f8:c3:cc:c5:eb:50:f4:cc:c7:01:f0:a9:c1:
da:b2:73:c4:e9:f8:2f:65:cc:2f:aa:27:51:2a:64:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6C:0C:DD:E7:E1:27:21:04:8E:50:D8:1B:A7:A7:17:AE:5B:11:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.242.128.0/19
128.242.224.0/19
130.94.176.0/20
130.94.208.0/20
131.103.0.0/20
131.103.96.0/20
168.143.160.0/20
198.64.80.0/20
198.64.192.0/19
204.1.192.0/19
204.3.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:7c:18:47:c1:ed:b4:ca:71:30:3a:88:bd:2d:55:6b:ea:27:
22:68:52:3c:ed:e6:cd:71:f3:98:35:23:8b:5b:d0:ea:a4:4c:
5f:01:38:2e:f6:87:37:18:c1:48:db:af:0a:a8:89:bc:8d:f8:
d5:37:74:af:95:54:99:0d:b1:f1:41:02:4c:86:0f:b7:99:8c:
14:66:d7:69:08:4f:c4:f9:1d:26:5d:1b:ae:99:36:46:a0:20:
ea:b9:7c:aa:63:dd:07:ce:1e:3d:7b:3a:97:2e:b1:e7:4c:a3:
8f:cf:db:1c:97:f7:64:9e:ee:72:71:45:6d:f7:af:ee:dd:51:
3b:6a:ca:78:45:e6:fe:30:e2:ef:e5:b7:23:32:36:09:fc:98:
ec:ce:34:37:63:1b:8e:12:65:c7:b9:99:c2:b7:f3:1b:11:70:
6d:60:b2:8c:ad:8b:ec:91:bd:4c:ab:a7:6c:65:a9:a5:97:28:
6b:f1:d5:65:f4:2e:af:0e:80:d2:df:9f:8e:3e:41:03:b4:c3:
69:c1:ff:b2:17:d5:d4:f0:c9:e2:e1:6e:24:1b:40:dc:cd:4b:
96:b2:fe:e4:c7:fe:f6:b9:74:9b:9d:1d:6e:b5:9a:72:b9:12:
1d:b6:d2:db:2c:e5:96:fd:66:f5:bc:85:67:45:56:43:74:f6:
4d:87:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:59:02 2026 by rpki-client