
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1305e690-4ec0-32a8-a8df-6e1a11067218.roa
File: 1305e690-4ec0-32a8-a8df-6e1a11067218.roa (raw, json)
Hash identifier: BX+I+ptllWWtvJ/0ISZ1sMwP1fuCj3ajF/kW/Y4fsPU=
Subject key identifier: 65:4A:F3:D5:E6:AF:5E:99:C2:4D:53:7B:23:EC:19:90:F7:AC:3D:E6
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584F4973C8A203067226B084C880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1305e690-4ec0-32a8-a8df-6e1a11067218.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 852
IP address blocks: 204.191.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:c8:a2:03:06:72:26:b0:84:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b8583951-424d-4cd9-a82a-205b2056a68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4e:48:34:ac:0d:44:95:79:a2:00:68:97:6b:
4e:49:7b:ad:9a:46:5c:1a:31:5f:a4:ca:99:a0:f9:
8c:91:3c:26:ce:f6:25:5f:46:c9:3f:e6:95:be:fe:
72:0b:3a:a1:2e:1a:a3:a4:e5:7e:83:33:88:ff:34:
1b:fc:8f:2e:2b:0a:51:89:9c:68:55:9b:63:21:f7:
e2:f5:de:34:9a:2d:7d:30:1f:04:7a:7c:ea:8d:bd:
09:bc:2d:ba:63:8f:e5:f3:5f:87:43:1a:9f:f3:87:
72:d7:a7:65:62:c9:09:41:3b:b2:e7:07:03:4b:e4:
7a:77:bf:af:21:01:08:88:aa:0b:84:d6:db:44:d0:
d3:34:b3:7e:ff:34:cb:16:74:1d:60:70:51:dc:5c:
c1:7d:2a:ec:9b:15:3f:f8:97:f9:ac:62:76:9a:21:
33:00:8b:1e:6c:d9:fa:4c:ce:45:1a:86:d2:fb:43:
9c:81:18:c9:86:4c:5d:d8:48:e0:b7:2d:b0:ae:1a:
02:53:6f:3d:22:9d:a3:39:ce:e1:44:2c:80:36:e6:
a3:b1:40:e2:2f:ef:4a:92:62:b0:c2:f8:dc:90:22:
96:ed:aa:9d:2e:55:51:68:d5:cc:79:84:54:0c:49:
14:0f:21:f6:15:98:6f:ff:e2:b1:c3:d8:a4:d8:b2:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4A:F3:D5:E6:AF:5E:99:C2:4D:53:7B:23:EC:19:90:F7:AC:3D:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1305e690-4ec0-32a8-a8df-6e1a11067218.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
204.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:2b:53:40:b7:00:68:0d:75:07:2b:60:f3:ff:2d:c9:61:2e:
ab:b1:c2:39:d7:b2:a9:4e:07:f2:a3:cc:08:9c:70:09:ba:28:
4d:03:09:e2:bc:61:e8:15:4b:cf:d0:64:0d:2b:c9:c3:1c:ce:
0d:f9:29:16:f8:65:bf:05:9f:63:a5:7a:b2:bd:f0:cf:ee:26:
2a:48:45:ec:8f:38:5a:71:88:85:d8:06:19:be:a5:bc:5c:b2:
02:9d:f2:6c:e0:df:c1:42:0b:81:1f:b7:32:00:f3:1e:09:97:
6c:90:2b:63:70:0a:d9:9d:4d:54:c4:05:3b:c5:a4:34:0a:b3:
a6:69:68:34:e6:97:9b:dd:e0:fd:60:b2:69:56:cd:d1:44:52:
b1:c7:ce:0f:10:d7:9a:a9:c3:f0:9b:26:6d:5d:a5:ee:8b:61:
7c:47:48:71:7c:41:59:bd:e0:66:2a:0c:11:87:96:ee:25:19:
0c:2c:42:98:be:38:f0:61:07:12:d6:7d:d2:7b:59:52:af:f5:
cd:27:ab:d1:ce:a2:51:bf:dd:83:97:5d:6b:dd:e9:8e:b9:cf:
47:96:8a:87:1a:bd:be:8b:db:62:64:9a:a2:50:eb:d1:2c:9f:
d8:71:9c:4b:44:3e:0d:16:33:c6:6a:43:a3:1a:0d:00:01:92:
b9:e6:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:56:53 2026 by rpki-client