
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c0bce1d-a869-3527-b0e7-dba73f5e55f1.roa
File: 8c0bce1d-a869-3527-b0e7-dba73f5e55f1.roa (raw, json)
Hash identifier: kHFlF75Ion7xtE+iiu/3BnSqzziNkIsZyH4gpSt3Kac=
Subject key identifier: 4D:13:83:96:A7:FC:9A:36:4E:EE:28:60:F5:5D:63:58:BB:8C:23:BE
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584F655E00EE80613EAF93233E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c0bce1d-a869-3527-b0e7-dba73f5e55f1.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 10796
IP address blocks: 173.89.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5e:00:ee:80:61:3e:af:93:23:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=ace1424d-baea-4570-83fb-5186bf3c2dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:09:87:90:0f:2f:05:ae:db:ec:ec:5d:f9:
37:c6:17:2b:77:90:83:32:0f:59:23:3b:e1:78:c7:
a9:eb:00:c8:3e:6b:b0:d0:73:09:84:03:64:04:ad:
d2:e6:33:40:0c:47:85:83:3b:6e:b8:87:ad:ba:d8:
fb:4c:b4:eb:01:21:fc:87:65:32:69:84:ca:5f:1d:
2d:2d:45:46:ac:b3:c8:f8:ec:32:63:05:d6:db:b7:
86:b2:c5:24:8b:4e:39:97:85:23:2a:21:ea:45:fb:
f4:d5:9d:6b:bc:06:73:64:4c:ef:14:6c:b9:34:7e:
27:e4:56:c2:7b:7f:87:42:d3:fd:a9:c1:39:60:23:
0b:95:da:f8:8d:b1:e6:dc:b4:aa:5e:af:62:8f:6a:
65:88:1a:e0:89:dc:3c:b8:da:86:75:ce:3c:08:1c:
89:e2:86:ed:b2:34:0b:08:88:cc:f2:97:03:96:55:
57:b8:cb:ae:55:38:1f:d3:b0:39:d8:db:8f:11:b7:
e8:7d:26:84:55:6e:66:d9:4c:b0:25:d7:4c:7c:96:
3e:c2:af:d5:08:82:70:7c:9f:1c:2a:f9:b7:e8:82:
8a:da:1c:fa:23:33:46:d1:08:8e:57:e7:fd:49:74:
7c:91:75:c9:15:bb:92:47:fc:b0:4b:ed:5a:cf:66:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:13:83:96:A7:FC:9A:36:4E:EE:28:60:F5:5D:63:58:BB:8C:23:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c0bce1d-a869-3527-b0e7-dba73f5e55f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.89.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:d8:f3:dd:19:76:9a:ac:39:10:4e:e6:89:bc:14:7c:eb:54:
92:c5:90:da:f6:96:4b:3f:c3:52:ca:4a:75:3a:73:47:d8:25:
11:23:13:e5:92:30:2f:43:12:e7:65:4a:ac:f6:e8:cf:a8:b3:
ec:24:a8:99:7a:d8:5e:13:01:06:ad:18:75:1a:2a:55:ef:dd:
ce:35:01:49:8f:31:1d:4f:48:e6:4e:a6:bf:be:3c:02:cc:f0:
dd:ff:ae:3d:41:b6:a3:24:74:50:38:05:8c:a3:b6:52:e7:af:
5f:fb:a3:45:05:7d:7f:05:e4:ea:18:bf:b8:26:a9:d9:09:19:
79:bb:07:2f:39:10:2c:44:ff:2b:e6:0d:1c:a1:d3:70:be:c5:
f1:3f:71:a1:b9:d9:35:57:25:ea:ed:67:15:7f:44:aa:65:71:
91:e0:71:5d:76:8e:4d:d6:79:9b:bc:33:05:76:7d:e8:a2:e0:
90:3f:37:d2:61:49:a8:19:e0:c5:24:c7:4c:dd:f4:e5:eb:95:
65:02:92:7c:dc:49:a7:36:25:4f:5c:03:92:b7:8c:8e:d5:37:
a3:4b:e1:b8:df:55:34:67:dd:23:da:38:d7:76:fd:c5:4f:1f:
26:19:28:d3:27:0d:5c:24:b3:5c:90:b1:8f:48:2b:26:35:08:
60:a6:da:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:28:15 2026 by rpki-client