
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa
File: d7717f60-de75-372f-b4a7-3706f6fa274b.roa (raw, json)
Hash identifier: ztpA0HqHsS5MU92+zv0FkLTEK09z/DNL3d/JO5Y3cgY=
Subject key identifier: AA:1A:C2:46:53:73:BA:91:19:FB:9C:91:44:74:68:AE:32:3E:8B:43
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584E016B4E3D03C080A5CFB5C880
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa
Signing time: Sat 30 May 2026 13:00:10 +0000
ROA not before: Sat 30 May 2026 13:00:10 +0000
ROA not after: Fri 28 Aug 2026 13:00:10 +0000
asID: 34425
IP address blocks: 128.242.128.0/19 maxlen: 24
128.242.224.0/20 maxlen: 24
128.242.240.0/20 maxlen: 24
130.94.176.0/20 maxlen: 24
130.94.208.0/20 maxlen: 24
131.103.0.0/20 maxlen: 24
131.103.96.0/20 maxlen: 24
168.143.160.0/20 maxlen: 24
198.64.80.0/20 maxlen: 24
198.64.192.0/19 maxlen: 24
204.1.192.0/19 maxlen: 24
204.3.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:01:6b:4e:3d:03:c0:80:a5:cf:b5:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: May 30 13:00:10 2026 GMT
Not After : Aug 28 13:00:10 2026 GMT
Subject: CN=fab6f5d3-7882-4833-b85e-8032b3ada18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:c6:bf:30:41:23:10:d3:83:16:7c:87:2f:
54:24:0e:73:e9:be:cb:c1:2c:ef:ce:a8:6d:41:c3:
d2:23:92:2a:ce:20:a3:99:93:c4:12:68:60:1d:ed:
a2:a6:9f:18:67:15:9d:cf:16:a1:65:72:0f:13:1a:
34:8c:8b:26:4c:ca:9c:b2:80:16:17:ce:4c:29:98:
e4:d5:6e:d7:7e:07:12:01:a1:a9:6a:0c:57:cd:d6:
3f:c3:08:f9:c6:a6:23:5c:e5:76:2e:4f:55:7b:4b:
c2:6b:63:db:7c:08:38:24:8c:ca:b2:d3:47:de:2d:
4b:99:3b:90:b2:53:57:b5:f7:0a:93:c7:c2:f9:46:
65:f5:91:e5:89:a2:1e:d7:d5:55:17:99:96:57:06:
dc:09:99:e2:08:5e:ed:72:67:e5:b2:50:4e:0d:3c:
3e:ca:d5:e0:ce:5e:be:43:1d:56:46:2c:be:ba:0c:
91:98:08:8f:47:97:e9:85:c8:c4:97:24:32:cc:de:
39:ec:f8:24:97:3f:d8:21:79:3a:fe:52:ec:2b:75:
c7:10:c3:c8:f5:af:ad:c0:b9:2c:b9:26:49:ad:53:
bd:af:68:2e:b9:39:02:c5:85:81:7c:05:3a:30:ba:
f9:d6:a2:18:9a:e9:05:f0:c7:c8:56:ed:f2:1f:fe:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1A:C2:46:53:73:BA:91:19:FB:9C:91:44:74:68:AE:32:3E:8B:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.242.128.0/19
128.242.224.0/19
130.94.176.0/20
130.94.208.0/20
131.103.0.0/20
131.103.96.0/20
168.143.160.0/20
198.64.80.0/20
198.64.192.0/19
204.1.192.0/19
204.3.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:9c:d3:02:78:63:37:3e:20:d2:3f:7b:b7:d2:af:2f:7c:45:
aa:30:66:ba:ec:c4:6b:2c:d0:e4:69:98:1b:b1:72:c8:14:a1:
3d:58:bf:ea:63:cc:31:be:fb:d3:53:b8:62:76:0d:c8:61:ad:
87:b1:d3:1a:e1:47:e9:3d:bd:d0:50:62:32:0c:76:18:ee:58:
9b:c2:5e:94:06:3b:b8:21:9e:71:7c:d4:38:9d:b1:ee:c3:42:
06:49:c1:24:f6:fb:b6:30:dd:9a:48:f9:ed:9e:78:1f:79:33:
02:63:19:69:5b:87:6f:13:b8:82:6b:d5:67:19:5f:89:b5:47:
f9:f6:c1:e5:1e:ea:0d:a3:68:11:b2:e9:5b:68:ec:e8:b4:16:
a9:51:c4:5d:4e:04:a7:6b:71:7c:d2:cc:41:ea:a1:0a:d0:f2:
68:00:fd:d0:d9:d9:e1:9b:84:da:0d:4b:b5:73:d9:ed:a2:07:
a1:32:ec:ca:bd:d0:c0:84:de:30:5d:ed:5b:71:bf:b1:37:76:
c1:02:0a:9b:06:9f:69:d1:dc:39:a8:de:6a:84:32:3f:ea:a1:
b9:ae:00:8f:df:06:93:14:3f:e0:cc:77:a2:0c:66:5f:bd:60:
d7:f3:de:06:bd:0a:a9:f8:fe:80:4c:01:a7:d1:db:fc:65:74:
3a:ba:ef:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:37 2026 by rpki-client