
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/669a0bd0-b062-3d56-a2a8-a6f32b954b09.roa
File: 669a0bd0-b062-3d56-a2a8-a6f32b954b09.roa (raw, json)
Hash identifier: N3r4Si2+tWUZ77+dAsQW2k/R3Rieg44+L7EESPgTwmQ=
Subject key identifier: F9:B0:C8:00:95:9B:79:CE:B9:08:14:EA:0A:B3:B5:07:53:0C:E8:63
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584F3CE2A391B25F5BF4BAC5AD80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/669a0bd0-b062-3d56-a2a8-a6f32b954b09.roa
Signing time: Sun 20 Sep 2026 13:00:12 +0000
ROA not before: Sun 20 Sep 2026 13:00:12 +0000
ROA not after: Sat 19 Dec 2026 14:00:12 +0000
asID: 11232
IP address blocks: 24.52.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3c:e2:a3:91:b2:5f:5b:f4:ba:c5:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Sep 20 13:00:12 2026 GMT
Not After : Dec 19 14:00:12 2026 GMT
Subject: CN=42f0a3c6-78b2-4582-b7c2-b25ef49dcf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:70:90:1c:58:c9:16:16:ec:70:48:6b:91:
b6:54:7f:83:4f:3c:7f:f7:06:3f:8b:43:0e:33:1e:
0b:0e:61:14:20:62:1c:20:7a:52:15:38:9f:30:f6:
2e:d4:d1:c3:5e:4f:75:8a:7f:3c:05:d9:4a:1b:e3:
c7:44:ee:c4:42:8e:d2:72:9e:63:6b:c8:f7:bc:91:
4b:b8:0e:7d:29:39:ee:2a:58:a1:0b:61:11:e6:4f:
dc:e2:89:b7:1d:31:04:a3:c5:af:e6:e4:4f:80:7a:
fc:70:96:66:3a:be:83:eb:4c:c7:6f:3f:84:0d:bd:
17:f3:a3:6f:0f:2d:ea:15:b8:1a:50:12:0f:bb:9a:
1b:74:d6:93:76:53:d5:0f:a6:dd:48:13:90:f9:1d:
23:7e:13:61:b3:9d:cd:e4:25:3f:ed:f1:e1:35:6f:
1d:03:9f:3c:61:92:85:98:42:19:fa:d6:49:ec:f9:
63:2d:76:c7:49:17:d6:31:31:86:52:47:95:8b:e4:
5a:18:50:86:e2:be:4a:ed:8a:4e:ba:66:c1:12:07:
56:fd:2f:2c:f8:97:8f:cd:82:db:21:1f:6c:51:0d:
a5:86:2d:e3:42:1b:d7:d6:86:85:85:ef:6a:df:f0:
81:71:14:08:d3:16:90:eb:ff:39:e3:4f:e3:be:9f:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B0:C8:00:95:9B:79:CE:B9:08:14:EA:0A:B3:B5:07:53:0C:E8:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/669a0bd0-b062-3d56-a2a8-a6f32b954b09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.52.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:70:e4:22:8d:33:c5:97:68:de:0a:53:b4:b6:d0:c6:23:49:
78:da:5e:94:f7:e8:93:7d:2e:39:72:93:0a:1c:cb:c8:28:f1:
56:83:f4:19:98:18:ad:7c:f0:80:73:a9:1b:af:2b:5d:bf:33:
fb:b1:1f:a8:87:1a:fb:8d:b5:3e:a0:11:7f:d6:4c:e0:68:2f:
a7:66:28:4d:f6:eb:bb:ec:69:7c:7c:40:86:c7:76:5f:09:ee:
3f:1d:e8:5a:71:af:34:68:2b:16:04:92:4b:ed:c7:30:d4:c4:
d1:c2:dd:ee:be:c6:fb:8f:d8:5b:5b:82:37:ed:da:9b:fc:f1:
97:f4:43:55:a8:56:67:13:c6:39:9c:3f:5a:7e:f7:94:c6:92:
c9:6f:da:4d:bd:70:85:38:28:ed:fb:6d:4d:76:01:fe:ce:2a:
4d:aa:d6:8d:36:0f:d7:13:f4:3c:14:65:1c:d8:3f:65:8f:f1:
9a:16:fd:61:ad:9a:5f:cc:93:54:63:ee:d9:4e:b4:76:20:7e:
f0:c3:60:fd:cb:26:63:23:4f:66:5d:86:d1:54:5c:04:e2:71:
a0:70:e9:2d:6f:89:98:8c:98:da:0a:e1:11:67:a1:1d:19:a9:
93:f4:0e:fa:0f:41:50:0b:7d:e1:29:a4:50:ae:da:af:4f:ff:
50:3b:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:15:47 2026 by rpki-client