
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
File: 23242619-7075-3ff7-bc60-bde9eb53b0dc.roa (raw, json)
Hash identifier: NJetaADIp2db8nmoBBv0Pp0Xwu57NdZrGXZ1V7FpWlY=
Subject key identifier: 17:62:50:68:BE:15:AE:6B:1C:2C:96:43:37:35:25:CF:84:86:D9:55
Certificate issuer: /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2
Certificate serial: 010D0C9F4328584CCBA756A82D3D66C9EB2D7F00
Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
Signing time: Sun 08 Feb 2026 14:00:41 +0000
ROA not before: Sun 08 Feb 2026 14:00:41 +0000
ROA not after: Sat 09 May 2026 13:00:41 +0000
asID: 14618
IP address blocks: 209.46.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cb:a7:56:a8:2d:3d:66:c9:eb:2d:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2
Validity
Not Before: Feb 8 14:00:41 2026 GMT
Not After : May 9 13:00:41 2026 GMT
Subject: CN=b52e312b-ebaf-455d-91db-351aaeb2b4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:10:dd:d0:4c:3b:06:55:c0:2e:ab:cc:b4:3f:
c1:ea:f0:b0:1f:8b:ac:1a:9d:02:5b:d2:fc:9c:28:
d1:d1:e6:18:e7:f7:3f:4e:8b:23:63:48:0c:f4:88:
f1:ae:a6:68:2e:41:75:d6:77:81:14:c1:68:0b:68:
e5:71:21:2f:82:d6:58:19:7f:25:e6:04:33:d7:5b:
e3:aa:c2:e0:48:84:c3:f6:a4:e0:ec:54:b4:82:1d:
3b:fe:65:62:83:35:90:cc:de:72:32:f1:af:88:c4:
74:30:16:40:1c:c0:3d:c1:f5:27:be:5e:f5:9b:7e:
70:ac:1b:94:10:b4:54:f9:58:62:e7:3c:62:64:93:
dc:1e:f6:7a:69:da:81:78:b0:0f:4d:af:7c:93:20:
e3:0b:06:a8:73:a6:99:8b:b0:72:63:df:fe:ba:e4:
fd:71:40:e3:72:d8:41:3b:ba:91:4e:bc:2d:68:c8:
fc:1d:70:6a:e5:47:98:a5:cf:01:da:74:aa:d6:99:
98:7d:0e:bd:57:de:11:6c:6b:3f:40:76:1d:87:8b:
a7:9a:c3:e0:aa:7d:98:7f:0b:8e:0b:83:82:27:e7:
36:a9:e6:ca:00:42:75:1c:b7:dc:4a:3c:ef:e4:92:
96:ef:34:d8:54:7b:74:f4:b5:7d:09:0c:1e:61:29:
6c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:50:68:BE:15:AE:6B:1C:2C:96:43:37:35:25:CF:84:86:D9:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl
X509v3 Authority Key Identifier:
keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.46.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:11:71:21:c8:3a:c8:0f:a8:3d:da:a9:af:0d:0c:45:ce:5b:
c8:2b:d4:5a:a8:22:3e:14:36:64:16:29:79:d9:39:2d:90:30:
7c:84:05:84:b6:06:db:a7:0c:ec:3f:e3:58:27:5f:55:ec:69:
6d:2c:61:2d:69:23:69:62:98:30:d5:54:84:0b:d8:0e:f2:7a:
b2:b4:81:bb:22:52:be:cb:8a:fa:c4:db:85:8f:ed:c2:da:55:
49:d6:c0:5d:58:8a:78:28:1b:7e:fc:d9:b4:ba:af:4b:e3:4a:
2c:b8:db:18:d2:3e:05:4a:72:b5:67:63:76:0f:00:9f:a2:b5:
84:70:23:74:f5:79:a6:f7:46:33:96:4d:65:1c:4e:ec:af:20:
82:b9:83:7b:5d:fb:cf:85:80:5f:49:8d:b2:b6:3e:88:0b:7b:
01:3f:e4:83:46:6c:04:2d:45:32:e4:89:3b:23:8c:a1:ec:71:
66:57:10:1b:19:46:6e:c3:ff:bd:80:8f:53:42:8a:e4:f8:b6:
d0:db:d1:ac:85:34:94:c0:8c:fa:f6:dd:31:ad:9f:bc:1e:d2:
c8:ce:1c:49:fa:21:1b:5e:e1:23:5f:08:0b:c7:0e:b6:e2:9c:
20:60:28:00:13:9e:01:a4:be:41:99:cd:3a:79:98:73:51:0e:
da:70:99:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:19 2026 by rpki-client