
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f7bfe13b-a18e-3e58-b575-289fab729295.roa
File: f7bfe13b-a18e-3e58-b575-289fab729295.roa (raw, json)
Hash identifier: RUBR9r/PGhT2vmw4hSo6dMPzbc9qtJUo1p2SlmgwrGE=
Subject key identifier: 81:34:71:44:76:67:41:4E:E2:73:EB:97:DA:28:28:25:E7:7B:A4:72
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584D11726661D8EC0B029567B1C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f7bfe13b-a18e-3e58-b575-289fab729295.roa
Signing time: Thu 05 Mar 2026 14:00:40 +0000
ROA not before: Thu 05 Mar 2026 14:00:40 +0000
ROA not after: Wed 03 Jun 2026 13:00:40 +0000
asID: 685
IP address blocks: 165.254.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:11:72:66:61:d8:ec:0b:02:95:67:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 5 14:00:40 2026 GMT
Not After : Jun 3 13:00:40 2026 GMT
Subject: CN=40bcc974-0cba-43d2-849d-ab5879e557d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:67:2b:3a:a5:4c:a2:0b:11:a9:42:ef:61:
1d:1f:92:67:25:8f:f0:d1:b4:fb:6e:68:c7:71:eb:
42:87:de:42:7c:ff:e6:5a:7d:28:b1:af:29:02:36:
b0:56:82:e4:a3:91:86:b6:09:a8:e7:b9:62:6e:fb:
14:c8:ef:3d:7f:34:02:03:69:cb:fa:2f:31:f7:dc:
a5:49:45:b5:a2:f1:63:37:08:a7:38:9b:5b:2a:f7:
20:e9:d2:de:73:d2:24:3c:da:e2:b8:d2:3b:ae:dc:
8d:74:b2:12:d2:dd:b6:22:e0:c1:92:e3:90:6c:49:
96:f7:fb:70:32:6d:8e:08:6b:bf:28:52:ce:5e:a9:
1f:4a:6c:14:f4:48:71:29:9c:00:2e:2d:e1:a6:57:
33:bc:13:50:5e:9e:6d:35:ba:db:dd:f7:34:ed:d7:
9e:db:1a:85:08:c2:12:99:44:2f:49:9f:55:ca:67:
6a:48:93:cc:8c:4e:12:46:41:3e:ea:d0:4b:77:73:
86:5d:9a:06:b0:37:0d:5c:b8:cc:be:18:93:aa:22:
dc:d7:19:4f:ec:6b:23:5c:3b:9d:12:a2:65:e1:21:
07:8c:88:3e:0c:30:c2:c3:a5:dc:82:49:0e:87:b9:
bb:11:04:9a:59:ab:69:83:0d:f6:31:91:77:48:46:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:34:71:44:76:67:41:4E:E2:73:EB:97:DA:28:28:25:E7:7B:A4:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f7bfe13b-a18e-3e58-b575-289fab729295.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:69:73:da:42:b2:62:39:ea:42:6f:5d:12:f6:1f:02:47:3d:
c3:61:73:b2:0a:92:df:3f:a5:9d:d3:a3:43:3c:d7:0f:b0:89:
83:8e:d7:21:e5:43:dc:90:47:7e:28:2f:b5:7a:90:4f:3b:4f:
2d:77:cc:b0:45:03:d5:9f:d8:8b:df:62:03:5e:d8:91:51:ad:
51:3d:8a:27:c7:f6:6e:89:f0:fb:65:63:d1:b4:cd:c9:e7:6b:
ff:d1:67:61:47:83:3e:97:a5:21:96:03:34:d6:79:4b:a5:a9:
37:53:b7:70:23:54:c6:09:a3:8a:fd:0b:81:63:75:10:a8:ac:
55:81:b4:b8:4e:e0:76:3e:aa:61:8c:f0:61:1c:94:03:01:f6:
2b:d9:76:33:09:b0:5c:68:71:b3:92:87:cf:4f:d2:65:f9:76:
a0:21:fb:0f:00:15:15:29:a2:7a:57:2f:77:62:0c:89:9c:46:
7e:b4:89:72:dc:fd:0e:20:ee:56:11:67:33:75:a0:aa:59:c6:
91:86:d6:4b:d8:1d:36:65:95:a4:17:b0:5f:c9:9d:c4:9b:4a:
48:cc:a7:14:bd:6c:1b:da:b3:2c:06:d6:df:6d:8b:a1:ba:4d:
78:48:15:62:93:65:86:ac:51:a1:8b:22:3f:e3:6e:0d:e8:2a:
6e:10:54:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:55 2026 by rpki-client