
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/3ab3bbd1-ceb8-3395-a747-c11c549ab7cc.roa
File: 3ab3bbd1-ceb8-3395-a747-c11c549ab7cc.roa (raw, json)
Hash identifier: afwOvc4CJdZA+bpq/PLqNPcmH7+hGBaEO4zI7K25C8s=
Subject key identifier: 74:81:A2:FD:5C:31:FA:2E:30:75:4F:3A:87:29:F1:55:8A:76:E7:0E
Certificate issuer: /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial: 010D0C9F4328584F2C225B01389BF0D1D1CEE420
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/3ab3bbd1-ceb8-3395-a747-c11c549ab7cc.roa
Signing time: Mon 14 Sep 2026 13:00:12 +0000
ROA not before: Mon 14 Sep 2026 13:00:12 +0000
ROA not after: Sun 13 Dec 2026 14:00:12 +0000
asID: 10753
IP address blocks: 216.38.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2c:22:5b:01:38:9b:f0:d1:d1:ce:e4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
Validity
Not Before: Sep 14 13:00:12 2026 GMT
Not After : Dec 13 14:00:12 2026 GMT
Subject: CN=55a2c8d9-7d92-430e-b402-06f973479ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b3:b4:fa:52:55:13:36:83:3b:22:71:3f:53:
c2:31:a9:65:e6:60:01:b0:b7:18:59:df:91:28:db:
ed:c1:44:a0:81:c8:d1:2a:7f:2c:bd:24:83:47:44:
47:7d:c4:67:6b:f6:bf:78:95:da:04:80:5f:17:d6:
e5:b1:58:bd:fa:f3:ca:19:f1:12:b8:53:67:15:e9:
8d:55:42:47:d8:b5:5c:67:29:ae:70:63:24:61:d6:
e2:58:13:99:6e:62:80:5b:54:45:95:fb:c3:03:0b:
39:f0:a1:f8:27:15:99:0a:d2:88:ac:26:35:1e:57:
08:4c:18:07:90:10:43:f1:30:48:67:c2:e2:45:c1:
06:04:bf:d6:f9:43:18:73:68:38:00:40:56:38:c5:
8f:96:7c:f4:4a:e0:e6:97:ee:3c:8f:fe:e0:06:03:
2e:8c:f3:5b:f4:05:16:25:80:5d:32:ca:4e:48:79:
1b:27:83:13:b2:73:1c:fd:40:35:d0:92:e1:24:14:
e9:4f:30:93:0b:64:d5:f9:0d:5c:32:d0:df:04:34:
49:bd:1d:0c:de:4d:47:27:23:aa:cc:06:17:41:05:
bd:36:58:01:bf:14:40:57:65:ac:ac:35:7b:5b:16:
23:e3:cf:90:87:d8:f2:27:18:21:57:c4:15:ec:d7:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:81:A2:FD:5C:31:FA:2E:30:75:4F:3A:87:29:F1:55:8A:76:E7:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/3ab3bbd1-ceb8-3395-a747-c11c549ab7cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
X509v3 Authority Key Identifier:
keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
sbgp-ipAddrBlock: critical
IPv4:
216.38.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:89:a6:5a:66:23:31:78:28:44:92:85:88:53:31:ee:25:d8:
cc:73:8e:cb:48:62:bb:3c:cd:f3:1d:0b:a8:5e:eb:65:c8:81:
ce:37:7e:6e:77:21:31:d7:74:df:82:7d:cf:f2:6c:17:f0:6b:
fe:9c:ab:45:1f:f3:cb:84:eb:3d:6d:4a:15:18:93:af:34:de:
7c:f3:b0:1d:a9:5e:80:24:6e:77:8d:f9:ab:fa:de:43:00:a3:
ca:be:e9:4b:31:9d:16:9e:8b:44:8d:8d:d7:4d:6d:0a:78:da:
9e:7e:4d:4b:36:65:b6:f7:37:27:18:85:46:ea:b0:0d:a9:4b:
f1:4a:08:02:4b:d4:ad:c5:45:f1:0a:57:93:33:83:e8:4f:00:
70:2a:ef:f9:aa:b5:19:e3:2e:44:c3:ab:78:e7:b3:72:29:48:
30:2f:54:7f:1e:9c:52:8c:4e:d9:57:68:e8:0e:5e:e9:e6:cd:
5b:95:07:b9:83:28:24:0b:5f:7d:b7:e8:e4:24:05:55:b7:1f:
c9:af:3a:46:59:8e:9b:5b:e9:c4:d5:3e:a4:12:62:fa:cc:b9:
d2:91:ce:64:fe:be:d4:a6:c2:1f:5a:f5:97:56:68:17:fa:ab:
47:8d:23:2b:1c:7a:c2:be:7b:01:ea:f9:11:52:d8:d9:ec:c4:
9f:49:63:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:06:54 2026 by rpki-client