
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/dee44d34-056b-37dc-b05c-ecb02d0e55c9.roa
File: dee44d34-056b-37dc-b05c-ecb02d0e55c9.roa (raw, json)
Hash identifier: RxlPyQdA+7Oh54TNRnZX0NhmpSM1KT14hlL2fYW/V2I=
Subject key identifier: 8D:EC:9D:C4:9E:63:A8:21:EC:CD:BD:86:00:2C:3C:BA:56:11:31:85
Certificate issuer: /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
Certificate serial: 010D0C9F4328584F3CE28434A3E8B3B1CC155380
Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/dee44d34-056b-37dc-b05c-ecb02d0e55c9.roa
Signing time: Sun 20 Sep 2026 13:00:12 +0000
ROA not before: Sun 20 Sep 2026 13:00:12 +0000
ROA not after: Sat 19 Dec 2026 14:00:12 +0000
asID: 397285
IP address blocks: 45.33.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3c:e2:84:34:a3:e8:b3:b1:cc:15:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
Validity
Not Before: Sep 20 13:00:12 2026 GMT
Not After : Dec 19 14:00:12 2026 GMT
Subject: CN=a5250222-d5c7-4fd7-9b40-4d8fdec0fd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:37:6e:54:49:0b:97:07:59:51:61:b5:40:
f7:da:40:93:a5:7b:c1:b6:36:2a:49:99:9f:c5:7e:
21:e6:33:5a:38:99:40:13:15:41:8d:87:32:88:d8:
7d:e0:10:87:40:02:2c:59:cc:2d:9b:1b:78:cc:75:
50:53:34:17:bc:a0:42:01:b3:6d:38:ac:63:b1:aa:
72:6f:bb:7a:7c:e0:ea:66:03:45:13:ae:cb:74:67:
b9:5f:71:e9:cb:c1:f0:e2:f0:f5:3a:f6:4f:a6:8d:
56:6f:64:2a:25:11:74:c7:9f:36:19:16:e8:36:ed:
b9:4d:16:1e:79:d3:a7:41:73:ad:9c:af:cf:09:36:
dc:6f:1a:0e:d3:83:42:2b:58:92:e1:b0:36:78:dd:
f3:4b:0c:9a:89:33:a9:b3:07:a5:bf:ee:c0:19:4f:
a6:97:7a:dd:7d:5b:16:4e:2f:79:28:06:87:3b:68:
eb:0d:93:9d:2c:bb:a0:4b:23:01:23:7a:1f:1e:65:
ec:11:0b:ab:c0:0f:9b:91:7b:a9:08:68:72:eb:d5:
da:77:d2:8c:06:c2:2c:43:13:49:ec:1f:5f:34:1d:
a3:5a:5e:9d:6d:03:16:9d:37:99:f6:f4:86:39:c3:
b2:03:c6:9d:c6:c4:3a:24:ef:23:f9:c5:a8:59:84:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EC:9D:C4:9E:63:A8:21:EC:CD:BD:86:00:2C:3C:BA:56:11:31:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/dee44d34-056b-37dc-b05c-ecb02d0e55c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl
X509v3 Authority Key Identifier:
keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
sbgp-ipAddrBlock: critical
IPv4:
45.33.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:31:af:cf:6f:3f:e1:6d:ea:13:bd:4d:f4:77:00:2c:54:6c:
23:46:7e:a1:57:e9:0b:1b:65:7b:f9:32:0c:e1:2c:af:71:c5:
41:26:1d:f3:fb:c1:e7:0d:6f:fa:d4:11:ba:df:0c:22:11:3e:
28:8b:59:92:87:a9:01:dc:5a:ea:d6:77:a6:0d:7b:80:9b:d1:
fa:47:79:5a:bf:46:5c:c6:12:c1:44:52:53:dc:58:a9:2a:be:
71:fa:19:c6:7c:23:04:19:16:70:59:a0:47:a2:d8:3b:e0:af:
5e:55:2d:8f:8f:3d:4f:48:20:f8:3d:c0:2b:21:9d:5e:a2:33:
d1:7a:16:ed:73:96:23:86:a8:54:f1:94:49:30:9a:42:98:e4:
49:bd:98:07:fb:af:f8:ce:51:a2:18:40:99:aa:60:dd:88:0a:
a2:88:e3:f1:98:ce:6a:fe:71:62:20:0c:a7:ad:9b:ff:6e:79:
05:7f:7f:49:c5:18:7d:24:5d:3f:97:f6:0d:f0:2b:fe:b0:09:
a7:05:03:92:7f:69:6b:43:37:06:73:0d:af:19:be:56:52:ff:
d8:73:16:40:35:67:12:5f:d8:2b:3f:19:ca:05:e4:d9:01:26:
8b:32:6a:ca:cf:62:59:5e:41:dd:05:40:f2:d8:26:0f:4e:5a:
34:ec:e8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:03:01 2026 by rpki-client