
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4537f09e-ccc4-37e4-9c69-941c7d8b0ec2.roa
File: 4537f09e-ccc4-37e4-9c69-941c7d8b0ec2.roa (raw, json)
Hash identifier: CF38eWZiXrtiRcE0Z9O6PV72Fn7bmwEnrJN09ONZ32c=
Subject key identifier: 64:7E:3B:80:27:1F:CF:D6:80:FC:0C:66:53:23:F1:62:F8:5D:31:33
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584E58B8FC97DE06FC23E9EE2000
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4537f09e-ccc4-37e4-9c69-941c7d8b0ec2.roa
Signing time: Tue 30 Jun 2026 19:32:22 +0000
ROA not before: Tue 30 Jun 2026 19:32:22 +0000
ROA not after: Mon 28 Sep 2026 19:32:22 +0000
asID: 397957
IP address blocks: 16.240.0.0/24 maxlen: 24
16.240.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:58:b8:fc:97:de:06:fc:23:e9:ee:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Jun 30 19:32:22 2026 GMT
Not After : Sep 28 19:32:22 2026 GMT
Subject: CN=1d2713cf-f680-4b98-8d87-2d40362ac536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:33:4a:d4:df:22:64:e9:26:da:ad:7f:56:
84:ee:5e:84:80:84:7d:30:18:f8:67:6f:36:b5:4c:
d4:11:14:26:d4:89:4a:1a:53:78:a5:98:ff:4e:d1:
1c:dc:b1:05:96:e5:29:33:b3:bb:89:b1:3e:fa:34:
5b:8c:82:a7:04:e1:8e:da:de:16:9d:e3:19:dc:bc:
2b:01:9b:1c:c1:57:81:f0:b0:07:5d:61:ec:bd:06:
f7:c4:16:38:c5:4c:58:38:9d:20:35:c2:68:c8:76:
50:02:bb:60:19:27:ea:7c:39:af:58:b5:2c:f1:76:
75:91:96:5f:ee:87:d4:85:97:d1:28:c2:9d:16:34:
b5:2f:04:ba:69:df:df:af:2d:b9:7f:e7:15:29:d0:
d0:81:fe:fb:0c:2b:62:f2:13:d4:1a:b1:74:ee:c4:
c6:bc:9e:cf:b1:b4:4a:03:17:a9:73:7e:3b:81:74:
b6:04:46:5e:81:0f:1c:a8:f2:0a:8d:fa:06:c2:ed:
41:41:3c:26:59:4c:b1:2a:02:40:c7:07:d0:42:cb:
16:4f:b9:e3:d9:d9:80:6d:9c:f9:da:1c:26:36:2c:
ad:47:b8:53:61:32:3a:a0:4e:80:08:af:93:5b:25:
a6:bc:a4:8e:21:17:09:a9:69:07:4a:9b:31:44:71:
17:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:3B:80:27:1F:CF:D6:80:FC:0C:66:53:23:F1:62:F8:5D:31:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4537f09e-ccc4-37e4-9c69-941c7d8b0ec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.240.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:bc:6b:21:1b:77:b6:29:30:f2:8f:e5:b1:62:65:c6:d8:56:
88:6f:21:55:86:5f:71:63:69:ac:66:26:5d:17:e1:30:e1:ca:
ef:c5:3c:d0:3b:92:27:21:50:96:3f:c2:7c:22:5f:dd:67:63:
5b:83:4e:8e:9e:38:72:a3:98:d3:d3:e3:75:aa:85:57:4c:d3:
be:d1:70:b2:8a:81:de:bc:ad:03:a8:08:a9:5a:23:61:b9:e7:
33:31:81:01:29:16:13:81:17:0d:fe:73:5c:6d:cd:59:ac:9b:
9d:96:37:0a:05:90:bd:6e:1b:59:cd:d4:e8:04:92:4e:a8:e2:
fd:e8:02:80:13:e9:58:83:18:4e:ed:5e:30:7d:de:94:de:2e:
df:13:cb:7f:21:69:33:88:3c:a4:24:f7:bb:ee:aa:46:59:01:
c9:4e:67:14:c2:76:32:4b:c8:c9:4f:a7:f1:e6:87:65:a5:ba:
3f:90:f8:5c:1f:cf:29:0e:8f:5d:2d:8d:b2:47:a5:46:b8:e1:
bf:b3:6b:29:89:c1:b3:52:19:59:16:3f:8a:dd:d0:fa:4a:bb:
71:c0:94:b8:bc:7c:32:9d:b5:1c:ff:e5:2b:35:03:23:15:f4:
ab:ab:e9:d3:70:fe:4a:59:34:27:0f:e3:7d:c4:08:56:c2:70:
ab:8b:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:12 2026 by rpki-client