
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/889b07c6-b4bd-3cec-be94-4ffd7873c163.roa
File: 889b07c6-b4bd-3cec-be94-4ffd7873c163.roa (raw, json)
Hash identifier: X0qWHAP+xwp+5dFvv3LxcZnY1zUQnrWxlMbwjfXwCEM=
Subject key identifier: 54:82:8C:EB:39:45:D7:D3:76:DC:06:ED:59:B4:20:6C:24:CE:56:14
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584F4973F657D4F502FF455BD480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/889b07c6-b4bd-3cec-be94-4ffd7873c163.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 21723
IP address blocks: 208.181.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:f6:57:d4:f5:02:ff:45:5b:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=174c8087-a456-496d-a0f7-e08181885d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:f8:ae:d5:87:a6:32:a2:f6:7c:e1:a8:c0:
a0:34:19:5f:c0:9a:31:c6:57:c4:fa:23:4b:f6:a9:
73:16:09:cb:18:a1:91:7e:e1:c2:49:36:40:82:b8:
d0:f2:b1:e7:94:5b:54:3c:3d:12:39:3e:33:27:65:
bd:87:3f:e8:84:77:c5:f0:b8:ba:97:9b:e0:f9:c9:
29:ef:92:94:d8:32:8d:18:b5:d6:44:75:4b:52:0f:
7c:3c:28:18:fc:e7:d7:a0:dc:09:1c:f0:e5:49:b0:
47:7b:bc:55:ab:d8:33:bd:69:af:25:50:a6:9d:22:
52:b0:f8:88:91:c6:92:85:8e:10:78:1e:98:91:9d:
fb:e8:0f:25:17:22:99:9c:23:a0:b2:ad:52:2c:cd:
f1:68:60:89:dd:dc:fd:76:7d:90:7e:45:46:a2:57:
94:14:94:9a:8e:aa:b4:aa:bd:d0:32:66:75:1b:40:
8a:f7:47:9b:89:63:17:dd:42:72:35:77:2e:46:ff:
f4:4d:70:53:59:3c:79:8f:44:36:4c:16:a0:f7:ec:
4d:ad:8c:c3:3d:54:07:ac:47:e2:c9:c1:7f:b6:f1:
53:4a:db:a4:ac:e5:c3:66:e0:30:bd:dd:f9:55:b0:
05:1a:fe:f4:41:3b:ed:b3:c8:d0:36:b4:44:92:4f:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:82:8C:EB:39:45:D7:D3:76:DC:06:ED:59:B4:20:6C:24:CE:56:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/889b07c6-b4bd-3cec-be94-4ffd7873c163.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
208.181.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:2d:60:5c:61:f2:05:2c:67:c3:bf:12:96:54:e9:2d:1c:fb:
d1:bd:5d:98:5c:15:8d:af:90:c8:18:3d:bd:7e:4b:6e:42:03:
df:d8:3d:a3:06:87:49:c8:74:8a:66:d1:48:17:20:a4:5f:5f:
3a:3e:4a:a7:d2:d6:2b:0d:11:cb:4d:04:20:6d:99:d2:4f:9a:
24:3e:b4:8f:34:97:a3:40:d3:58:ab:9e:d4:1e:f1:ff:22:d4:
dd:94:21:d9:74:c6:49:2d:32:a0:c5:69:fe:3f:5e:49:1b:51:
94:11:67:b2:87:7f:25:75:f6:07:86:40:8d:35:af:0d:f6:8c:
58:a1:c9:42:62:61:2f:8f:f1:3d:af:b2:7f:ee:50:e2:72:9a:
38:13:a0:b5:60:a1:e7:64:0e:67:b5:73:f1:3f:bf:52:9b:9e:
7c:3a:7c:d2:f2:32:bb:f9:52:1a:05:9d:34:b5:39:4d:85:05:
60:48:df:a3:6f:38:08:c5:e9:37:c3:22:4a:70:7e:1d:39:54:
ee:77:4a:53:34:a4:d2:d5:e1:f3:40:c9:ac:a7:5a:75:4b:d6:
52:e6:ac:42:a5:68:88:ca:06:8b:34:b2:e2:41:45:5e:71:f2:
9a:86:17:36:17:01:2a:11:6b:99:db:37:ab:98:75:57:29:59:
ed:25:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:15:01 2026 by rpki-client