
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c/d8fecef6-8fd2-3980-a5b3-5459a99f5d60.roa
File: d8fecef6-8fd2-3980-a5b3-5459a99f5d60.roa (raw, json)
Hash identifier: 0feGxfRaScb4/VBAEcZx9EaZsXkLqHeYZ7KMbyzlX6I=
Subject key identifier: 44:F1:7C:57:EB:EB:A6:E2:BD:19:3A:DA:24:16:BE:A5:8F:0F:FF:64
Certificate issuer: /CN=d332a132-155b-4c33-ae0a-f644ac8eb25c
Certificate serial: 010D0C9F4328584F5B97F886638D6E128E599500
Authority key identifier: BE:B9:44:E1:72:61:02:62:EF:5B:5B:20:CA:3D:5C:7F:7C:1A:74:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c/d8fecef6-8fd2-3980-a5b3-5459a99f5d60.roa
Signing time: Thu 01 Oct 2026 13:00:12 +0000
ROA not before: Thu 01 Oct 2026 13:00:12 +0000
ROA not after: Wed 30 Dec 2026 14:00:12 +0000
asID: 36320
IP address blocks: 208.72.218.0/23 maxlen: 23
2602:f470::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c/d332a132-155b-4c33-ae0a-f644ac8eb25c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c/d332a132-155b-4c33-ae0a-f644ac8eb25c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5b:97:f8:86:63:8d:6e:12:8e:59:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d332a132-155b-4c33-ae0a-f644ac8eb25c
Validity
Not Before: Oct 1 13:00:12 2026 GMT
Not After : Dec 30 14:00:12 2026 GMT
Subject: CN=c21a8323-00e1-407d-922b-200b749d9156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0b:23:cd:d8:ee:72:dc:2b:71:f1:65:a2:7c:
e5:02:42:77:25:8a:7e:46:37:70:30:b4:74:05:54:
e8:8e:8a:e2:3e:0c:92:83:6b:6b:79:e7:85:f0:3a:
77:b8:ea:d6:c1:6d:97:8a:72:c8:bf:86:05:90:e1:
c8:30:71:e3:15:83:25:d2:d4:08:e4:40:d1:1e:98:
7f:eb:51:1f:3e:26:be:9b:a7:fd:98:76:67:b5:57:
69:3d:64:4f:ca:23:62:cf:22:f0:1f:0a:1d:88:25:
41:7f:84:07:53:89:fc:82:a4:0a:da:d3:49:42:48:
58:89:c5:4d:58:38:62:ff:a8:f0:36:23:85:0e:a9:
2f:8e:91:9b:bd:b0:0e:7a:31:24:5d:1f:10:68:71:
bc:2a:47:9f:b6:dc:70:d9:c4:a1:23:d8:c3:a0:85:
2d:77:14:1c:e6:9a:47:44:6e:8f:c8:8f:b5:5a:b9:
71:78:2d:31:e5:12:15:2d:bf:bf:64:07:f0:00:29:
87:bb:af:f7:5e:3f:ee:68:41:82:24:59:88:d1:1a:
eb:37:2e:77:bb:63:78:67:4b:e6:f3:be:86:4e:9a:
e3:87:d8:d3:bf:63:98:60:f1:a9:c5:36:a9:93:63:
38:18:4b:80:03:3d:b5:04:69:dd:65:79:4c:4b:c7:
38:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F1:7C:57:EB:EB:A6:E2:BD:19:3A:DA:24:16:BE:A5:8F:0F:FF:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c/d8fecef6-8fd2-3980-a5b3-5459a99f5d60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c/d332a132-155b-4c33-ae0a-f644ac8eb25c.crl
X509v3 Authority Key Identifier:
keyid:BE:B9:44:E1:72:61:02:62:EF:5B:5B:20:CA:3D:5C:7F:7C:1A:74:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.72.218.0/23
IPv6:
2602:f470::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:1b:c2:23:8c:ab:e4:52:44:71:d1:c7:8a:9f:13:5e:a4:70:
01:ad:46:e4:ac:88:f4:cd:fc:cb:58:5a:61:ac:f9:98:f4:3e:
57:55:36:d8:41:8d:d8:86:22:88:25:67:eb:03:f3:8d:5b:6a:
f6:38:30:4e:41:7c:2e:55:4b:fb:41:b9:4c:45:fb:a2:35:1c:
3d:4d:1d:1b:b7:6f:ec:62:05:dc:16:73:1f:78:a2:e8:bb:58:
b4:f0:f4:dd:70:5b:53:43:d7:f4:f3:3a:f9:79:ec:2d:e1:39:
d2:1a:a4:df:d1:3d:8e:c6:c6:37:73:c4:9c:32:91:42:51:f8:
ea:25:09:f2:56:74:31:29:c5:b4:db:73:14:c6:c2:9d:02:89:
7e:d5:78:e6:a0:36:a2:10:4f:79:85:13:73:d4:4e:a3:1f:8e:
d3:ee:ef:4e:52:60:13:39:c9:a6:a2:1e:b3:51:ae:d9:b1:b8:
ad:cd:da:74:0f:55:fa:16:61:22:20:8b:5d:26:4d:5e:30:39:
ca:bd:3d:db:0d:ba:2f:85:96:35:5d:79:80:cf:38:e3:20:c5:
b2:de:fa:9a:d7:5d:45:2c:9d:d3:14:1a:f2:b3:e3:d4:b9:01:
09:29:67:ef:c2:16:97:f9:5a:ec:f9:54:f6:d8:10:36:3a:47:
2d:81:83:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:08:31 2026 by rpki-client