
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aafefe25-cd05-3fc9-abd9-af2bebaaac43.roa
File: aafefe25-cd05-3fc9-abd9-af2bebaaac43.roa (raw, json)
Hash identifier: TTMhe4OdxWGW1oiahU2AacYYIXJdoJRn7qa710N6qnk=
Subject key identifier: B8:9C:94:7C:8D:9F:36:B7:C5:EB:F0:EF:08:C2:E1:0B:B1:77:B9:2E
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584F17323C71422DC4C13E285BC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aafefe25-cd05-3fc9-abd9-af2bebaaac43.roa
Signing time: Mon 07 Sep 2026 01:00:11 +0000
ROA not before: Mon 07 Sep 2026 01:00:11 +0000
ROA not after: Sun 06 Dec 2026 02:00:11 +0000
asID: 396584
IP address blocks: 216.87.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:17:32:3c:71:42:2d:c4:c1:3e:28:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Sep 7 01:00:11 2026 GMT
Not After : Dec 6 02:00:11 2026 GMT
Subject: CN=e5448304-9f2d-4f3f-a92f-95128b634b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:52:fe:50:d2:6d:29:77:6c:5b:2b:8f:7a:
ad:7e:43:38:1a:e1:ab:e0:5a:82:9f:2f:3c:56:7b:
f8:6d:f4:29:86:fd:65:73:80:44:cc:71:e7:03:b8:
db:30:14:80:b9:9f:99:5f:b5:21:30:16:a2:b1:6e:
a9:9d:8e:00:b5:96:6d:6b:e4:d4:c4:29:7a:f0:6a:
77:db:e0:9e:bd:8e:4e:c5:0f:f8:0a:7c:9d:6b:14:
c0:a2:80:53:bf:1f:ed:8c:3a:ef:8e:88:dc:d4:40:
2c:c5:9c:82:8b:8f:18:83:14:3e:70:80:31:02:6f:
09:10:bc:c5:5b:d8:51:a0:0c:77:72:14:78:f6:b9:
83:1f:9b:a8:30:96:c2:c7:de:18:ff:10:7b:26:cd:
29:2f:f7:43:d5:0f:27:83:d8:12:65:94:b9:5e:e9:
3a:34:89:b5:4e:6e:0c:3e:4b:fb:21:49:4e:62:15:
78:d5:af:b3:fb:d4:a5:b4:d2:a4:da:eb:4a:86:ef:
48:ac:ce:b1:a4:4d:d9:cc:02:13:29:cf:fd:3c:4e:
38:08:76:48:b5:a7:47:47:ee:e8:68:b4:1d:4e:42:
e8:39:e9:4a:ea:b2:fa:c7:c6:e3:18:70:b6:73:80:
1c:b0:7b:b2:12:ff:2c:37:64:6b:6b:93:50:4c:7d:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9C:94:7C:8D:9F:36:B7:C5:EB:F0:EF:08:C2:E1:0B:B1:77:B9:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aafefe25-cd05-3fc9-abd9-af2bebaaac43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:18:34:13:95:b0:c6:c8:25:0c:79:3f:26:54:66:4e:6f:07:
b4:ff:8a:ee:64:a8:87:bf:07:00:ed:86:e7:ec:cf:db:9a:57:
f9:9c:51:90:94:95:fd:4f:38:31:8d:f9:04:c9:f7:07:07:69:
da:7f:20:e8:7b:99:3c:58:e1:91:35:7a:d1:af:6e:31:9d:1c:
6f:d4:7b:f1:e8:a8:8f:e0:67:89:dd:da:47:27:da:6a:9b:d5:
5a:74:07:40:ae:4e:8c:12:6b:4e:93:a7:da:b7:3b:45:06:5a:
35:7e:8d:fe:55:1d:e0:f7:c7:2e:0d:e9:dd:2d:15:0f:3c:98:
a2:25:7a:99:76:a9:54:f3:cc:ab:b7:51:67:a5:83:fe:48:cf:
4a:9e:bb:4a:e5:8b:e7:77:30:e5:3b:dd:d6:6c:c1:e0:ae:1e:
8e:51:24:db:4d:6b:82:89:07:09:99:0e:93:f2:73:91:ce:8e:
02:c8:8b:48:bb:18:40:c1:3e:54:0a:15:ef:42:8a:ec:d2:4f:
16:b8:08:0e:f3:90:88:63:de:1f:e8:9b:7c:1d:22:ac:5f:65:
22:15:76:a8:f4:8d:34:ea:87:e6:29:41:69:3f:3b:b3:fd:84:
5b:ea:6a:bf:59:7c:29:6f:46:f9:66:0c:c9:93:78:e5:fc:ea:
5d:b4:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:50:50 2026 by rpki-client