
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/41aac38c-fb99-353e-82a1-641e4b6d6f02.roa
File: 41aac38c-fb99-353e-82a1-641e4b6d6f02.roa (raw, json)
Hash identifier: J8a8adjyDEVHh5wCWudHiFXoQiiUqVwSay8/4LpYrAM=
Subject key identifier: B6:B3:2D:5A:39:90:99:2F:3B:B8:30:75:5C:84:76:50:0F:8F:3E:59
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584E07316324058840BA60BC2F80
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/41aac38c-fb99-353e-82a1-641e4b6d6f02.roa
Signing time: Mon 01 Jun 2026 14:38:41 +0000
ROA not before: Mon 01 Jun 2026 14:38:41 +0000
ROA not after: Sun 30 Aug 2026 14:38:41 +0000
asID: 203106
IP address blocks: 16.216.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:07:31:63:24:05:88:40:ba:60:bc:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Jun 1 14:38:41 2026 GMT
Not After : Aug 30 14:38:41 2026 GMT
Subject: CN=984d24c0-ec41-4c66-b650-593a42ef17fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:58:32:98:79:0e:9e:74:ef:f1:da:dd:5b:
28:92:fe:ce:84:9c:e2:dc:94:78:24:16:f4:90:41:
da:a3:db:74:de:da:b1:82:24:07:8f:fa:a3:e4:c4:
da:79:fe:c3:44:25:e8:7d:02:63:7b:2e:7f:ce:da:
44:1e:22:24:14:5b:03:91:05:93:a8:14:0e:56:46:
de:40:58:16:2b:41:5a:76:ee:fa:72:be:d1:71:87:
40:f7:51:80:ad:28:a3:1d:e4:05:04:05:8e:5e:7f:
d0:ef:08:ec:ba:5a:93:c2:a7:86:5e:3e:f3:90:af:
8c:77:fb:e1:e0:04:d4:95:0e:12:d2:22:62:93:db:
07:51:d7:c7:94:4e:20:78:27:a3:d7:41:20:41:1e:
6f:01:83:ac:7c:78:f9:a2:79:36:e0:61:2f:c6:f0:
39:93:44:0d:a1:9a:f4:4e:15:ec:8b:a5:03:15:64:
7a:fe:8a:62:21:37:6e:10:52:30:c3:05:79:00:85:
43:c0:d6:6e:f9:19:b9:af:8f:2c:14:c6:27:db:93:
26:5c:91:e0:4e:d3:44:8a:ef:91:ed:c6:03:ca:91:
f9:df:de:a8:29:ac:0d:7a:32:c3:fe:c2:c4:80:4f:
13:67:1a:51:5a:93:58:76:8b:8b:b6:45:ee:4d:7c:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B3:2D:5A:39:90:99:2F:3B:B8:30:75:5C:84:76:50:0F:8F:3E:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/41aac38c-fb99-353e-82a1-641e4b6d6f02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.216.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:d5:4c:81:93:dd:72:dc:fc:61:85:1d:ce:a3:43:50:55:a6:
ed:df:33:a6:54:38:b8:a0:39:bb:e5:f7:58:1a:2b:00:88:ee:
10:a1:99:a1:b0:51:89:c3:64:33:49:a8:fe:ab:16:25:25:37:
b4:78:bd:55:51:d7:36:70:e6:90:67:fa:b2:2e:c1:77:89:84:
a6:0c:d2:08:98:a0:54:19:08:2d:07:7e:0b:cc:c3:df:b1:f4:
a0:e4:28:dc:f2:b2:51:79:36:f8:cd:24:c5:0d:ce:6d:9f:e5:
44:c1:35:1e:cc:5b:b2:5f:0e:b7:14:08:01:0d:17:9d:3c:ee:
c2:36:3b:cd:0f:95:2b:1c:ce:41:52:db:86:66:19:af:b6:8e:
56:87:f7:d7:14:b0:c5:84:3b:b8:78:91:a7:54:8e:52:9c:73:
c2:eb:b0:db:e7:20:56:a1:6c:07:da:46:fe:80:08:3b:9d:0f:
66:aa:0f:24:95:ac:94:ee:6f:f5:4a:07:29:7c:ff:8d:84:7e:
1b:f0:92:11:f1:6d:5d:b3:1c:fb:97:61:cd:5c:57:93:51:6b:
bf:1a:1e:84:b1:bd:a9:1b:38:84:1d:d2:87:a0:51:08:9a:d1:
63:b5:39:0b:84:0f:31:48:90:17:1c:b5:6c:b7:57:c7:72:2d:
e6:82:80:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:05 2026 by rpki-client