
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa
File: b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa (raw, json)
Hash identifier: 7nozTSvlMsBLCkalWCUKGJnLfML3y9CcMP96W3avN/o=
Subject key identifier: AF:2F:5B:12:3A:CC:25:A6:D3:E2:45:46:3B:87:43:6B:C2:DD:AE:0D
Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4
Certificate serial: 010D0C9F4328584D100CF4516F516E9CE9D16B00
Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa
Signing time: Thu 05 Mar 2026 02:00:32 +0000
ROA not before: Thu 05 Mar 2026 02:00:32 +0000
ROA not after: Wed 03 Jun 2026 01:00:32 +0000
asID: 400653
IP address blocks: 165.123.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:10:0c:f4:51:6f:51:6e:9c:e9:d1:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4
Validity
Not Before: Mar 5 02:00:32 2026 GMT
Not After : Jun 3 01:00:32 2026 GMT
Subject: CN=4d19ca80-27ee-48d6-aeee-997ce97719cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:8d:12:3e:00:93:8e:e1:0e:f8:5e:88:7a:
78:ca:15:bd:aa:28:d4:e2:79:96:ea:9b:55:69:06:
0c:79:d2:26:17:0c:63:f4:86:a9:3d:09:1a:57:9a:
b8:03:ff:fe:2a:bd:cb:15:60:b7:03:c2:4a:2d:85:
2f:02:df:b1:da:82:93:51:b3:a1:94:15:04:9e:fb:
b5:f9:4f:81:74:c1:67:d5:b0:c8:cf:dc:17:48:18:
aa:33:72:96:d7:9c:d0:eb:75:7b:9e:11:07:7e:30:
e3:e9:bd:94:d0:72:88:85:26:17:1f:6a:1b:2d:76:
a3:63:da:40:15:77:44:32:57:1a:01:8c:94:6b:94:
6f:bd:24:cb:ae:b5:14:c2:b6:80:02:06:5f:5c:00:
0c:9c:d6:e3:09:04:fa:a2:da:6f:24:c6:5d:4d:86:
a7:3d:42:7a:63:17:e2:ba:e5:2e:f4:57:bb:10:2d:
1a:be:58:b4:f0:07:81:84:a5:2e:e9:a7:4c:99:07:
b8:bd:0c:96:fb:ed:c3:67:58:ba:b8:43:cd:12:52:
73:4c:e7:f3:8e:25:bc:99:80:d6:a0:66:82:a6:cd:
f2:57:6a:8d:3d:97:c6:47:8b:57:82:34:85:36:0e:
13:4d:5d:7c:5d:2e:45:d6:e3:88:b0:be:5b:b8:7f:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:5B:12:3A:CC:25:A6:D3:E2:45:46:3B:87:43:6B:C2:DD:AE:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl
X509v3 Authority Key Identifier:
keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
sbgp-ipAddrBlock: critical
IPv4:
165.123.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:c1:ab:7a:b6:03:83:c8:3c:29:af:cf:3e:18:bf:95:37:8a:
36:75:05:83:08:cc:fc:15:ef:f1:d5:91:15:76:6b:e0:b7:20:
43:df:d0:89:2a:68:cc:e0:fb:40:ba:0f:0c:ed:cc:e0:ff:51:
61:d1:da:2b:b1:10:cb:7d:6c:fd:c7:04:23:06:c8:ae:3c:71:
d1:06:4f:60:3a:18:65:45:89:27:a0:8c:01:24:54:a9:aa:7f:
f3:1f:5e:ed:3b:7a:55:4d:0e:a6:4b:f8:d4:d9:50:cc:80:14:
64:b6:31:73:6f:d7:92:61:43:b3:7e:de:76:b4:1a:c0:08:60:
8c:2c:e5:f6:3e:fb:eb:ba:fb:aa:dd:ad:77:0c:33:31:92:c7:
07:56:ca:a7:bf:ea:a2:ab:f9:c0:6e:2e:87:dc:27:b2:73:88:
eb:c8:06:08:75:16:44:8e:fe:5e:7e:e6:06:76:bd:56:67:55:
1a:67:9e:85:e6:8a:2e:54:3b:2d:f7:54:74:98:6e:69:69:98:
0f:14:02:25:14:39:11:45:2e:ff:11:0c:0a:8e:54:2d:ea:8c:
77:48:90:48:72:14:0e:41:b1:38:e2:b2:94:fa:fa:e4:3d:59:
3e:26:78:ad:62:76:15:97:65:87:b0:97:48:ac:b1:da:af:44:
1b:77:ba:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:03:01 2026 by rpki-client