
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa
File: 146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa (raw, json)
Hash identifier: EMFWnxUJpHz5Aesqd685JsKwwrVuRC9QIfip8Iozwf0=
Subject key identifier: D8:90:EB:E2:B7:B1:46:45:53:93:F8:4A:40:6B:88:95:EC:ED:F0:98
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F4328584F497673CD0DDA41B8AE9DA780
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 27321
IP address blocks: 149.20.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:73:cd:0d:da:41:b8:ae:9d:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=8be4a65f-09df-4477-a00a-9aea95eb852f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:90:e3:55:73:8f:ea:05:c4:a6:28:6b:8a:54:
d7:01:79:83:54:0a:34:37:a5:60:3a:97:12:38:82:
83:5b:ca:25:fe:7b:fd:91:9a:1e:13:1f:09:7c:de:
b3:3b:0f:25:a2:32:b0:83:88:cb:a9:34:aa:9c:73:
c6:cc:80:dd:11:08:d5:df:99:62:33:e1:d8:99:bb:
c1:ba:70:3e:4c:07:3c:06:e3:77:07:bc:ad:83:ff:
ba:da:4e:27:71:38:af:4d:1b:31:cc:57:4e:12:49:
42:0d:f5:15:eb:dc:f2:92:50:3d:44:aa:3e:57:2e:
ea:20:ae:4e:ff:af:46:74:d8:5b:70:f3:d2:58:79:
79:85:32:8b:85:4d:6a:02:c6:bf:39:3e:01:08:73:
c0:61:96:6d:66:55:fe:26:a7:c6:a2:12:21:48:80:
58:b4:5f:21:76:27:93:42:61:82:0e:14:91:3e:3e:
52:72:67:2b:3c:44:5a:72:9d:0b:55:94:18:09:7d:
bd:9f:72:1c:79:12:8b:60:68:f2:62:04:31:b2:c2:
42:05:2d:4f:f8:70:11:11:ed:78:f1:d9:31:e1:f1:
78:d0:84:bf:95:fd:ca:34:da:db:fa:e6:bc:68:b0:
4f:20:71:d0:6d:53:ae:5c:6d:60:f1:45:f9:1b:53:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:EB:E2:B7:B1:46:45:53:93:F8:4A:40:6B:88:95:EC:ED:F0:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:32:f8:ea:92:eb:bf:59:d7:a1:08:80:9e:70:58:1f:67:70:
28:2b:52:b8:45:d2:b9:ce:3f:75:d6:eb:71:48:65:44:b7:51:
52:12:3c:3a:64:2e:2f:29:da:d4:7b:2f:be:83:8f:a1:06:19:
29:b3:e2:e9:b9:26:48:87:11:fc:91:fa:f0:a7:22:40:06:ec:
60:23:7e:d2:dd:9b:23:48:d3:f9:ca:be:da:96:57:1c:4c:81:
95:f8:0c:01:67:db:cd:22:64:1c:0e:1e:61:45:a4:e8:13:63:
b4:92:88:70:85:3f:0b:a4:d7:fa:47:38:7d:2c:71:f5:bc:6e:
d8:49:c6:de:b8:8a:76:bf:6f:a2:d9:8c:bc:0b:4f:16:0b:be:
f8:39:b9:20:8f:69:81:8c:3e:01:ba:5a:08:09:89:cc:ce:aa:
be:ca:d8:fc:2f:05:89:03:72:b1:b3:32:92:53:c3:60:3b:ef:
5d:d2:bf:20:81:ed:58:0e:18:6e:e5:31:1d:2b:09:5c:93:fa:
5b:7d:5f:a4:b9:58:a7:e6:50:62:c4:07:17:57:c2:e5:d0:79:
04:5d:08:4f:62:36:96:51:44:0a:ab:d4:b7:4b:fc:ee:de:cb:
af:05:d7:07:23:64:15:41:b5:61:03:ec:d9:08:98:ec:09:9b:
ca:ef:23:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:04:01 2026 by rpki-client