
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a3da25ae-190a-37a3-b07b-f1222b292497.roa
File: a3da25ae-190a-37a3-b07b-f1222b292497.roa (raw, json)
Hash identifier: 6GO+VeMc4/CW0QtCe2qjfBF2dR8QDFeoe/L49+PKx9Y=
Subject key identifier: 3D:10:81:C3:44:A4:43:E2:A2:05:1B:F2:05:38:99:39:44:66:5A:12
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328584F498514DF53CD1F3400CF37A0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a3da25ae-190a-37a3-b07b-f1222b292497.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36040
IP address blocks: 208.65.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:85:14:df:53:cd:1f:34:00:cf:37:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=0815726a-5f3d-41a2-be05-23e96be7f975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:dc:de:4e:c9:75:30:7e:46:26:0a:58:3c:
ae:4f:da:52:a0:ef:fd:14:d9:ba:bc:29:3c:51:ea:
50:db:34:ab:2c:3a:51:97:90:24:fb:93:36:f0:8c:
8a:25:f0:7f:6b:e9:25:75:cb:d8:e0:38:cc:0c:e5:
3e:5c:83:92:62:88:dc:03:be:e4:5b:fe:cf:40:ab:
63:e9:a2:e8:98:6b:75:0e:5d:d4:7c:ac:27:60:8a:
a2:c1:5d:74:98:87:b4:3c:4a:71:11:65:d4:2a:3f:
44:87:f6:a9:b0:e7:46:6d:ea:74:3f:85:a2:59:48:
f2:ed:13:e8:a6:3e:b5:c2:2d:9e:17:f2:a2:a8:99:
67:45:ca:4a:bc:bc:35:4f:d8:b2:ba:d5:b2:1b:77:
23:63:98:37:b6:9c:b2:fb:8c:f4:71:5c:a4:8d:7f:
a7:7d:61:15:8e:01:ef:6e:66:82:6a:93:b4:71:15:
37:c5:6f:d1:64:89:30:1c:3e:8c:ec:31:9a:9c:65:
fc:0a:37:3c:8d:f9:af:f8:bf:7b:3e:37:aa:ce:e5:
cc:53:ec:bf:df:89:3d:34:ee:72:a7:22:7b:b9:bd:
79:23:d5:51:49:fa:54:9c:16:80:43:62:4a:32:ec:
7d:86:85:62:ee:4d:31:f9:1a:03:c1:c2:0c:e6:31:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:10:81:C3:44:A4:43:E2:A2:05:1B:F2:05:38:99:39:44:66:5A:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a3da25ae-190a-37a3-b07b-f1222b292497.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.65.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:d5:97:ec:ca:86:4a:3d:db:ec:f6:f9:d4:df:8f:c1:7b:1c:
3e:70:9c:e5:66:e7:28:44:c4:55:98:09:d6:49:ea:98:c6:1a:
77:ba:b6:e9:ab:f1:c4:c8:94:89:89:83:33:03:8a:85:f0:21:
af:d7:ed:52:11:3a:ad:6c:d9:6d:18:3a:f3:28:84:57:3e:eb:
3b:f1:7e:c6:6b:d3:96:46:e9:c8:f9:12:8e:11:28:06:e0:86:
55:f2:d5:7c:7a:c2:9a:3a:c4:cc:71:45:c4:ed:cf:6c:d5:80:
ba:71:05:c9:b5:f3:e4:21:83:b5:1e:25:23:18:f3:68:b5:ba:
f0:87:63:96:4c:84:7b:74:fd:0b:68:cd:55:99:b1:c8:d3:89:
63:8a:9c:5b:3d:91:6b:4b:06:a9:d9:82:44:50:68:ae:08:32:
4d:4d:ae:f0:b9:1f:04:f3:9b:2f:ef:0b:52:bb:e6:c8:fb:52:
4a:cb:b2:d2:50:af:25:ec:8b:cb:ab:72:b2:0c:4a:f3:52:ad:
c2:13:3a:8c:ea:9f:a5:23:e0:db:56:56:99:48:b6:c5:0f:c5:
19:0f:f7:b4:f2:01:48:86:fd:ad:c9:3b:56:c5:aa:bf:09:f4:
71:84:fa:6f:28:de:4e:d5:e6:2d:d9:e5:07:d4:bd:00:3b:b9:
ee:4f:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:19:32 2026 by rpki-client