
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa
File: 9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa (raw, json)
Hash identifier: MH1y3HMeG8p9IqyNJ/IfOlkjsNrh46da+9uHAeW25UA=
Subject key identifier: 52:59:07:DF:21:A6:0F:6E:D7:63:C6:08:1F:EF:4D:2C:9C:61:E6:F6
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584F3E47EAA23E129AC4EE389680
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa
Signing time: Mon 21 Sep 2026 01:00:11 +0000
ROA not before: Mon 21 Sep 2026 01:00:11 +0000
ROA not after: Sun 20 Dec 2026 02:00:11 +0000
asID: 399185
IP address blocks: 16.0.56.192/27 maxlen: 27
16.1.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3e:47:ea:a2:3e:12:9a:c4:ee:38:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Sep 21 01:00:11 2026 GMT
Not After : Dec 20 02:00:11 2026 GMT
Subject: CN=6f493eb4-36b8-4b29-9914-52c538ee813e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:d9:e6:7c:6b:76:ed:34:05:36:8e:74:98:
02:84:c0:25:45:3c:a4:b5:42:86:31:ef:51:22:9e:
34:b2:a7:86:24:f7:d5:b6:f9:d1:4c:a1:25:e6:1a:
36:bb:cf:56:cf:fd:13:2d:e8:bc:d5:3b:43:66:05:
69:29:85:ce:d3:e2:f5:e4:97:3f:30:eb:af:d5:df:
6a:eb:34:a4:0b:db:0e:3a:dc:8c:96:24:93:f7:90:
f6:53:f6:fc:9e:53:db:03:82:64:b2:e1:22:ce:bb:
df:a9:b2:c8:16:37:f7:c0:13:e7:d3:dc:d6:42:35:
09:8a:45:52:23:ca:b1:fb:a8:e1:ca:2f:fb:59:b0:
6e:dd:93:ee:e9:9b:40:63:69:8b:7a:0e:be:f7:07:
e2:f7:01:f3:6f:57:ac:fd:01:6e:0a:08:c5:e8:82:
05:2f:54:5e:fd:0d:81:d1:ae:08:be:78:06:58:ad:
32:43:62:c1:7e:f1:0d:d6:53:20:7e:45:2f:bc:9b:
88:eb:43:ad:a3:f8:f8:fd:68:9a:b1:ec:69:7b:3e:
fb:75:bb:28:d6:61:2d:3e:c2:90:6e:3a:bf:7e:8f:
3a:55:f0:99:68:5f:e8:a7:d8:b6:69:23:0b:45:1b:
2a:db:46:c4:97:39:c4:01:ce:05:2a:d5:e0:99:9a:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:59:07:DF:21:A6:0F:6E:D7:63:C6:08:1F:EF:4D:2C:9C:61:E6:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.0.56.192/27
16.1.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:ad:4d:64:ee:df:64:91:db:cf:d6:93:6a:08:7e:4f:a4:b2:
d4:6c:3a:e7:ab:30:7e:32:3c:29:d5:4b:a3:eb:2e:f9:2c:8a:
89:17:68:4e:96:ee:c6:a8:0e:1a:ee:92:70:00:0a:51:2b:ba:
c4:f9:5e:27:e7:41:fa:f6:39:d8:21:2d:3d:2b:ba:db:eb:5f:
00:77:03:d8:73:f5:0b:99:bd:40:63:40:9c:c6:dd:de:c3:db:
43:2a:4c:80:9e:80:27:9c:f7:cc:bd:68:06:1b:de:ac:83:76:
90:20:a2:15:b4:69:31:0b:99:fd:86:6c:7c:90:1a:e5:74:0f:
2c:af:12:57:60:fd:8d:99:4d:d6:db:f0:16:2a:56:30:18:0b:
f3:81:8e:7b:13:99:7b:26:c5:c9:22:ee:67:61:8f:b1:fa:e5:
e7:d4:82:3d:fb:8c:2d:fb:43:e9:33:b4:a9:b1:f1:e3:d9:6a:
6f:35:d7:fa:39:d3:bd:96:a9:eb:ba:b7:dd:8d:46:65:7f:89:
9d:2f:e5:c5:f4:4b:ab:39:db:fe:f3:35:fd:4d:9a:32:4a:e9:
6f:f0:83:8c:e8:e4:da:36:0e:60:43:40:8b:7e:68:f8:f4:27:
50:59:25:e2:11:bc:9c:f1:b9:6f:12:a2:28:db:ee:f5:f3:cc:
28:eb:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:46:24 2026 by rpki-client