
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/e97e3f2b-a337-3a78-a872-eb9db0872150.roa
File: e97e3f2b-a337-3a78-a872-eb9db0872150.roa (raw, json)
Hash identifier: HHPPfB72SEJiMIkLfZy92EyMZYe0MHTxHaWuDcVuX98=
Subject key identifier: E0:4E:63:C4:5E:57:99:08:98:A9:D1:2A:BA:49:9D:D9:9D:57:BB:BE
Certificate issuer: /CN=3555956f-7142-453a-8aea-177a684dd7aa
Certificate serial: 010D0C9F4328584EFED38E6A7ABAE24083B31B00
Authority key identifier: 4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/e97e3f2b-a337-3a78-a872-eb9db0872150.roa
Signing time: Sat 29 Aug 2026 07:30:06 +0000
ROA not before: Sat 29 Aug 2026 07:30:06 +0000
ROA not after: Fri 27 Nov 2026 08:30:06 +0000
asID: 13821
IP address blocks: 206.218.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fe:d3:8e:6a:7a:ba:e2:40:83:b3:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3555956f-7142-453a-8aea-177a684dd7aa
Validity
Not Before: Aug 29 07:30:06 2026 GMT
Not After : Nov 27 08:30:06 2026 GMT
Subject: CN=953ce3e0-da50-412f-946f-52cf40f34c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:b9:26:57:f7:99:0e:fc:56:22:64:70:e3:
d9:b2:6b:e5:08:34:4d:8d:40:3f:b7:63:2c:20:d1:
b9:90:f4:b2:70:a9:de:d3:e1:be:c0:e4:95:0c:1d:
21:84:76:be:3f:b4:62:1d:be:b3:3b:8d:03:66:00:
a6:49:6c:6c:61:fb:db:5e:3c:79:7c:45:66:4f:4a:
a3:a5:96:52:4a:94:7d:a6:21:31:f1:df:13:f7:a4:
19:bd:09:ae:69:f9:5f:ba:32:20:b5:1d:db:51:4d:
c9:f4:49:e3:d3:12:00:c6:92:10:57:b9:3e:15:76:
56:62:a9:64:d5:0c:59:5a:62:17:e6:ab:12:94:8e:
95:40:03:a8:50:34:cd:56:7f:15:bc:45:1f:c1:08:
15:dd:5e:07:ed:2f:f0:79:bb:e3:45:38:53:23:d7:
8e:64:3e:c2:55:a5:84:89:73:bb:7f:3a:ce:de:61:
88:8d:74:23:a7:d0:ba:c7:43:2f:bf:36:e0:38:b6:
95:e3:f0:51:64:95:1a:4c:54:be:95:2e:36:b9:57:
0d:2a:62:c3:cb:16:56:73:84:69:19:06:2c:16:1f:
e7:05:b0:47:d5:88:d8:c6:93:a0:fe:06:0b:62:48:
f9:5d:10:f4:57:32:98:54:da:a9:ef:31:b1:d6:4e:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4E:63:C4:5E:57:99:08:98:A9:D1:2A:BA:49:9D:D9:9D:57:BB:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/e97e3f2b-a337-3a78-a872-eb9db0872150.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl
X509v3 Authority Key Identifier:
keyid:4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer
sbgp-ipAddrBlock: critical
IPv4:
206.218.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:8e:10:28:4b:a2:a7:3e:e2:a0:2c:df:e5:58:3e:8a:bc:2b:
c9:c8:34:fd:dc:e0:14:97:f5:3f:3c:64:8d:ca:55:b4:ce:47:
dd:57:e0:b0:49:48:a9:f0:f6:23:cf:be:7f:35:36:9a:00:0d:
13:e3:6e:21:72:87:4e:ed:4b:e7:7f:f9:4d:4f:90:e5:e9:a1:
2d:86:f4:30:c6:08:b3:c9:3a:04:88:77:0d:9b:1d:ee:b1:9e:
98:74:a2:c5:a9:77:61:a5:f6:56:da:c9:93:0d:cf:c1:e8:20:
1c:8f:d8:0e:6b:93:63:d7:05:70:de:46:68:76:c6:4c:aa:83:
1f:2a:7b:81:55:a5:7d:dd:0f:4c:b8:d4:7c:37:02:c7:84:35:
30:1a:87:bb:22:6c:51:cc:d6:5e:2d:80:10:dd:58:87:62:1a:
14:5c:f5:73:2a:b1:0b:a1:cd:ad:98:7b:7b:53:81:1f:f7:23:
dd:98:ae:58:70:40:3d:7e:d5:43:36:41:ee:a4:f1:78:b7:04:
92:f5:ab:53:09:b3:e6:d2:5c:e0:1b:7f:3c:e5:f7:8e:e7:2c:
ec:df:7a:1e:b5:97:6d:8d:2f:bc:ba:d0:07:59:08:83:43:c3:
50:40:22:ad:22:9c:bf:cc:de:a2:d9:0b:78:f1:a4:d8:e3:18:
70:4a:a3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:27:52 2026 by rpki-client