
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/af879eaa-b2c9-33b7-8219-e782fabad559.roa
File: af879eaa-b2c9-33b7-8219-e782fabad559.roa (raw, json)
Hash identifier: 0+LrWiiYEmcK66lKvoShPbTIYaHPwBSATokJc8mADHs=
Subject key identifier: F7:69:62:EF:76:82:9D:4D:7D:90:9E:8F:EB:5C:7F:E1:68:69:51:6C
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584E987CFD289FD6C787793F4B00
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/af879eaa-b2c9-33b7-8219-e782fabad559.roa
Signing time: Thu 23 Jul 2026 15:43:13 +0000
ROA not before: Thu 23 Jul 2026 15:43:13 +0000
ROA not after: Wed 30 Sep 2026 12:14:16 +0000
asID: 402215
IP address blocks: 16.216.12.0/24 maxlen: 24
198.29.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:98:7c:fd:28:9f:d6:c7:87:79:3f:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Jul 23 15:43:13 2026 GMT
Not After : Sep 30 12:14:16 2026 GMT
Subject: CN=c4fc11e6-1e79-4b31-824c-a58a8e412dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:53:a1:8d:a8:45:38:92:02:33:2e:f9:82:
c3:36:f0:25:b6:8d:88:85:b7:f7:35:fd:85:a9:04:
47:78:fb:f1:bc:e4:d6:6d:70:14:42:8a:84:d1:15:
b7:09:f3:b2:99:76:0b:dc:1e:be:02:a6:64:8d:54:
b0:5e:60:aa:f5:a6:2a:d3:42:2b:f0:57:4a:e0:a9:
3b:5d:fc:69:02:57:d5:96:23:a2:ba:66:d6:64:cb:
5d:ac:b7:f8:ea:a5:4b:cc:b1:0b:25:e0:d5:1d:2d:
13:77:92:29:69:a4:b7:99:63:cc:f9:b6:2d:ec:a9:
0f:90:15:3f:3a:72:83:6c:95:84:e0:f9:a0:e1:73:
43:19:65:86:6c:12:c3:6c:e3:fd:fb:d8:13:30:4c:
b8:5e:53:ee:fc:52:fd:11:63:8f:ed:69:8f:8b:7f:
fc:58:78:a5:4e:ae:5b:e1:1f:33:66:7b:14:15:70:
f8:33:ef:3b:cf:ef:16:7d:74:37:94:b7:15:4c:a7:
c0:8a:2b:e1:0d:d1:6e:0f:58:90:0c:07:ef:be:1b:
0b:2b:58:21:23:f8:d0:1b:a1:68:ae:b3:2b:7b:d7:
22:85:3c:7c:d1:fc:bd:5c:c5:53:c4:67:ec:30:6c:
95:f0:7b:ab:ec:3d:ed:7f:03:a6:a9:2d:21:42:17:
a6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:69:62:EF:76:82:9D:4D:7D:90:9E:8F:EB:5C:7F:E1:68:69:51:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/af879eaa-b2c9-33b7-8219-e782fabad559.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.216.12.0/24
198.29.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:ca:35:41:90:d1:d0:cf:88:40:08:88:e8:eb:d1:d0:00:98:
20:b2:a6:a3:b0:5a:dc:d1:49:5f:cc:8c:77:3f:69:95:10:5c:
2f:2d:0e:16:13:e2:fa:b3:60:56:8e:96:13:61:1d:a1:27:cd:
b0:b5:e5:be:f9:5c:01:5f:ee:c5:35:83:b6:a5:b6:b9:72:eb:
97:ca:c2:1c:e1:ce:1b:01:97:55:cd:97:03:f2:b0:32:54:11:
92:9f:67:0e:e5:5e:59:52:24:3f:be:ad:2e:47:37:34:b0:be:
17:66:0e:ce:ca:f6:79:39:6e:17:c3:ad:19:ed:8d:9e:1f:b5:
1b:be:3c:3b:64:eb:d2:9e:af:fb:d6:d8:ef:8a:48:a0:b5:cd:
d5:ca:d4:0f:1c:a2:07:d3:a2:0f:d1:8d:d6:6f:99:d3:1d:c5:
33:16:50:e3:6f:a8:05:5b:9d:44:5f:3d:92:aa:cd:cb:1a:b5:
04:01:d0:a5:6d:1f:aa:8a:d6:0f:f7:cc:fe:2d:fb:75:8d:fd:
b9:d7:6b:85:0b:db:e2:aa:40:94:6a:3c:a9:82:25:7a:73:c2:
14:89:85:ac:96:f0:7c:04:80:29:b8:93:09:86:58:56:db:24:
de:12:fb:58:55:ac:9a:7f:09:c9:5a:07:f9:3e:4a:fe:4a:b4:
d8:cf:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:14 2026 by rpki-client