
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/c17155b0-361b-3db1-81e1-0de8e5bc0044.roa
File: c17155b0-361b-3db1-81e1-0de8e5bc0044.roa (raw, json)
Hash identifier: eBBtWlQGZwfJRj7ShhLk64+UDXz063jWr7+D32m1t9g=
Subject key identifier: E9:51:E8:66:8C:6E:7D:96:F5:50:82:2C:80:05:DB:A7:96:03:CD:12
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584F42AB51BAAA3CF9FD911CAE80
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/c17155b0-361b-3db1-81e1-0de8e5bc0044.roa
Signing time: Tue 22 Sep 2026 14:43:59 +0000
ROA not before: Tue 22 Sep 2026 14:43:59 +0000
ROA not after: Mon 21 Dec 2026 15:43:59 +0000
asID: 137409
IP address blocks: 16.5.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:ab:51:ba:aa:3c:f9:fd:91:1c:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Sep 22 14:43:59 2026 GMT
Not After : Dec 21 15:43:59 2026 GMT
Subject: CN=40ff0a8b-9bd9-4e74-b6a3-9a39ebf051f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:68:f2:06:3f:51:36:76:06:2f:6c:0a:3f:
49:48:ac:fd:64:a7:4b:72:b7:f3:cc:75:f0:52:4d:
aa:d3:39:2e:88:0a:f5:ca:89:82:73:39:f4:10:39:
4d:2c:a5:a0:93:1f:50:e1:14:8b:38:50:e7:f1:24:
6d:66:14:86:2f:c8:88:84:64:31:71:75:4e:e9:4a:
da:f2:5e:03:85:df:44:44:64:95:d1:bd:b4:dd:3e:
28:db:55:67:e9:8c:62:0a:9a:75:4d:14:59:ee:e4:
73:a4:22:84:4d:ca:3a:90:ed:65:73:bb:6e:df:bd:
9d:98:20:b0:a0:6d:ff:31:85:74:74:ef:50:c8:59:
4d:29:18:cd:56:03:5a:9b:a5:7b:90:3f:b2:ab:b7:
de:10:45:c3:e5:1c:0c:91:42:03:22:f4:f7:4b:92:
08:58:33:56:40:6a:92:64:89:9c:80:10:90:6f:9d:
50:62:ce:a0:d0:0f:bb:b6:86:06:72:da:2a:66:5c:
ee:32:ea:3a:13:f9:91:21:6c:97:ac:6a:75:7e:59:
b6:c1:e4:a0:3d:f3:50:cc:5e:69:eb:5e:53:6a:c4:
3c:19:b9:5f:40:0c:e4:54:87:6e:2d:de:7f:56:14:
b1:6a:7a:e5:eb:50:d6:da:a6:ab:2a:0c:32:07:57:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:E8:66:8C:6E:7D:96:F5:50:82:2C:80:05:DB:A7:96:03:CD:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/c17155b0-361b-3db1-81e1-0de8e5bc0044.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.5.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:01:c0:27:fd:ca:f3:b0:6d:87:cf:eb:73:6a:8a:5f:b7:0e:
55:b7:60:e3:3e:5f:01:f4:41:e9:ba:62:de:85:84:d6:09:97:
42:81:75:b6:5f:a5:71:64:6b:a5:ac:7c:75:a2:dc:f0:49:15:
40:4e:6e:49:34:52:a4:69:86:c1:85:f7:b5:f1:51:f5:aa:85:
2e:df:fc:b0:df:e9:3a:92:68:ad:f3:26:5c:52:46:84:a4:a9:
29:74:96:2e:51:90:48:9b:d8:94:79:04:35:4a:3f:3e:29:63:
02:19:db:5b:b5:da:95:52:16:2f:3b:5f:4a:e8:e7:68:9f:ce:
6e:46:f5:ac:22:52:a1:0c:96:c1:14:4e:c9:c9:5a:09:c8:fd:
fd:e6:77:34:b3:89:c4:bc:83:23:11:41:2c:46:cc:3e:fc:38:
82:05:f9:ce:fc:8c:c7:a5:c2:a2:e3:ad:f9:5a:87:13:99:5c:
fa:ee:ca:e9:a4:81:06:fb:0a:ea:42:7a:47:51:6c:2d:74:f5:
e8:9c:fd:29:da:67:ea:70:38:ae:78:40:99:ee:5f:37:5e:8a:
4c:c0:b5:a8:42:7a:71:0a:1d:98:83:c2:0f:58:80:52:7b:15:
bf:2c:36:87:bb:38:11:0e:13:2e:bd:c6:b8:0f:84:bd:fe:64:
27:ea:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:24:32 2026 by rpki-client