
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ab3227d9-5e37-3fe3-9b84-c94da4fbb158.roa
File: ab3227d9-5e37-3fe3-9b84-c94da4fbb158.roa (raw, json)
Hash identifier: xy1Zbe5vFAI7Zct1kOFoYQUxvDQRgj3urnThNCXqQ2g=
Subject key identifier: 7D:51:5B:A5:B7:94:5A:F3:81:B8:3E:AB:D6:FD:9E:4F:7A:5A:26:5D
Certificate issuer: /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial: 010D0C9F4328584F305274C1D07147858B087B00
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ab3227d9-5e37-3fe3-9b84-c94da4fbb158.roa
Signing time: Wed 16 Sep 2026 01:00:12 +0000
ROA not before: Wed 16 Sep 2026 01:00:12 +0000
ROA not after: Tue 15 Dec 2026 02:00:12 +0000
asID: 22135
IP address blocks: 173.242.2.0/24 maxlen: 24
173.242.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:30:52:74:c1:d0:71:47:85:8b:08:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Validity
Not Before: Sep 16 01:00:12 2026 GMT
Not After : Dec 15 02:00:12 2026 GMT
Subject: CN=ab944c55-6ed1-4bde-bddc-df2470f7a3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:67:16:7d:1f:cb:c6:75:4e:13:7c:be:e7:
68:b7:28:8d:fe:18:88:71:f1:94:ef:72:98:9a:90:
2b:70:d5:2f:56:56:4b:9b:d0:e0:fa:8e:b4:5f:f2:
1d:9f:57:a9:a0:ac:99:f0:b3:ec:c7:34:a1:76:85:
4a:55:8e:08:8f:13:ba:fd:f7:2c:ae:42:65:bc:c9:
5f:e8:e4:73:9d:50:3d:a3:c8:17:75:23:84:14:ce:
8b:6a:78:fe:c6:0a:d1:94:7c:de:c1:0c:76:25:d7:
70:08:af:a9:c6:3b:61:a6:86:a1:71:0c:a0:aa:03:
33:93:cd:ff:4c:ff:69:67:43:60:dc:16:77:cd:03:
22:69:75:3d:62:ea:d9:89:ad:dd:74:5a:04:0e:89:
12:49:b1:d7:bd:08:b4:d8:73:34:5d:89:75:c4:08:
d2:dc:5c:98:37:5e:5b:5a:d1:60:b9:36:bb:a1:0b:
87:c0:98:48:43:3a:8f:34:d3:2c:05:73:f5:a9:31:
99:f9:c8:a0:74:04:d3:93:be:38:f2:36:1c:12:f4:
41:d7:d2:fd:48:46:05:73:ca:01:e0:78:b9:86:7d:
2b:f3:19:38:b5:6e:9b:e6:5b:86:8e:c1:ac:61:0c:
0c:6d:de:03:99:42:00:4c:48:b2:b4:54:41:d3:e1:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:51:5B:A5:B7:94:5A:F3:81:B8:3E:AB:D6:FD:9E:4F:7A:5A:26:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ab3227d9-5e37-3fe3-9b84-c94da4fbb158.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
X509v3 Authority Key Identifier:
keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
sbgp-ipAddrBlock: critical
IPv4:
173.242.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:c9:f4:05:88:c2:65:9f:02:37:c2:3d:71:10:1e:f2:a5:f1:
b6:2b:d5:bd:57:de:a8:f8:90:d9:ee:32:00:b2:1a:90:0b:9c:
20:da:b6:58:26:f3:cd:61:6a:84:40:b7:d1:10:98:9d:1e:77:
d3:54:e5:77:87:b8:7c:34:7f:eb:a3:7a:5f:b2:bd:79:df:27:
03:00:74:86:23:a7:06:86:0f:40:a1:f6:4f:8d:d0:b4:8f:e4:
13:99:db:09:fb:2b:e3:91:85:e0:84:89:69:2c:ca:68:a4:ae:
b3:13:17:e5:bf:2c:1a:45:f9:86:5f:0a:1e:39:e6:62:ca:53:
81:3b:b6:b7:19:0d:82:93:6f:d3:28:2e:76:42:56:15:86:b1:
2a:23:6d:17:72:12:c9:b1:6f:0a:2b:21:33:67:f0:62:6b:5b:
a1:05:f5:07:59:6e:60:e2:32:ba:11:b0:96:91:09:77:72:a9:
5e:8f:79:1f:e5:91:5c:4b:ba:d6:cc:0b:d7:47:ee:4d:e3:25:
72:64:64:f4:31:ec:9d:2a:bf:fc:fe:20:c3:9e:99:90:2d:7e:
4e:8c:77:06:cc:19:e7:55:7e:c2:e6:52:65:02:8d:9a:84:36:
45:76:15:05:71:bd:4b:5d:b4:f9:17:8c:cf:95:e0:fc:b9:a9:
06:35:08:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:59:50 2026 by rpki-client