
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/e8aba7ad-7337-3afc-946f-4c93d7a9d929.roa
File: e8aba7ad-7337-3afc-946f-4c93d7a9d929.roa (raw, json)
Hash identifier: JDBe0DqG3s2Uf8K2ZenwrOdOi0mzcwsKtu6g2AtWi14=
Subject key identifier: D3:E9:4F:CD:6B:DE:65:B2:81:02:0A:28:55:B4:9D:8C:5E:54:E5:93
Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510
Certificate serial: 010D0C9F4328584F51D2C50CB9B6C47C3EE18500
Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/e8aba7ad-7337-3afc-946f-4c93d7a9d929.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 12684
IP address blocks: 216.252.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:c5:0c:b9:b6:c4:7c:3e:e1:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e52220-fa56-4913-b008-c1121580f510
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=e23f0108-67c3-440c-9cd8-9d28c4cd836e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0b:07:60:cb:40:ca:a5:3c:67:9c:89:33:c0:
8f:14:9a:4d:a6:e0:f2:a4:49:f2:73:d0:71:4d:81:
91:fb:86:66:23:7b:81:19:7c:db:89:32:da:c1:f2:
34:41:0e:4e:6a:8c:e8:8c:e0:e7:90:69:39:93:5b:
df:91:b7:43:60:47:47:13:11:a4:aa:19:df:1d:b0:
ca:02:e1:70:d8:e9:e0:14:88:57:27:59:b4:b9:8b:
17:3a:22:3f:b7:36:35:86:f3:1d:ba:79:44:31:fa:
c2:1c:84:4f:02:83:e1:d4:91:04:14:6e:a1:2c:ff:
4c:73:d9:a8:87:8a:5c:28:c6:4a:5f:9c:66:04:12:
ed:9f:28:43:ed:da:6e:07:bc:bd:73:1a:ad:73:5a:
fa:1d:e6:33:64:6a:58:dc:f4:9a:24:2e:c1:4d:59:
fd:00:4b:eb:95:7e:30:89:35:74:2a:a4:36:63:a6:
81:c5:6a:4c:e1:20:e8:48:b8:b6:19:67:c6:82:4a:
e9:00:25:59:b2:ad:37:cb:b9:da:47:3a:a8:e1:93:
59:18:a5:9d:94:9a:fa:fa:36:fd:2e:af:41:71:f2:
75:b1:eb:60:55:1c:1a:22:5b:50:e9:bb:c9:c4:8b:
f8:2e:d9:16:c6:a7:50:81:44:13:f0:e0:16:c1:20:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E9:4F:CD:6B:DE:65:B2:81:02:0A:28:55:B4:9D:8C:5E:54:E5:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/e8aba7ad-7337-3afc-946f-4c93d7a9d929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl
X509v3 Authority Key Identifier:
keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer
sbgp-ipAddrBlock: critical
IPv4:
216.252.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:b4:85:c3:b6:e8:14:bb:1c:97:8c:67:b7:c6:a4:b1:7e:7e:
41:35:e3:46:76:b0:76:b4:32:ed:ee:d4:ad:de:6c:d3:1c:4e:
3b:9c:09:32:33:b4:5c:ab:45:75:11:7f:6a:66:1b:3d:a5:99:
74:07:50:06:14:fb:97:00:0c:51:ed:42:25:c4:57:fd:80:f7:
a8:a9:8b:98:f7:2b:94:7e:cb:87:50:a7:77:38:f3:a5:db:a1:
a8:f5:92:91:c9:33:e5:e0:0c:38:dd:14:87:89:8a:ee:96:e9:
80:65:27:0c:c3:af:54:4a:08:c5:d6:71:5a:5b:cd:73:b2:8d:
85:41:ed:8e:04:58:a2:7e:77:0a:0b:03:17:48:5c:a1:24:28:
07:62:b2:4f:1f:e2:da:ac:a6:4a:7a:3d:99:4f:e1:9e:b2:83:
af:2c:8a:ff:4d:ac:5a:40:8c:dd:40:7b:ed:b5:bc:f3:a8:62:
bb:9a:ab:9b:30:86:ca:b3:0c:c4:ca:a8:b2:73:b1:f4:e9:cf:
ac:04:d2:f6:3c:70:c4:8f:73:b3:7e:38:37:6a:ef:a2:eb:0c:
65:42:9f:b3:77:e3:d4:28:28:90:9b:93:fa:a1:f1:44:b9:69:
02:11:68:fb:ca:4d:e0:48:d4:b1:11:42:6b:fd:3e:ad:c8:ef:
e6:8b:5d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:42:26 2026 by rpki-client