
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/331e8ec2-9b76-3ad2-adc4-8b38edd7012a.roa
File: 331e8ec2-9b76-3ad2-adc4-8b38edd7012a.roa (raw, json)
Hash identifier: aHoZDIoFvGF+1UHIvf5yi49/obzhNnb15PHEUEQMlm4=
Subject key identifier: 34:17:18:CB:4A:C3:84:92:A6:5C:19:E0:E9:5B:1D:C1:55:C0:06:A7
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584F225D224EBF7A5CDE9E9A5180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/331e8ec2-9b76-3ad2-adc4-8b38edd7012a.roa
Signing time: Fri 11 Sep 2026 01:00:12 +0000
ROA not before: Fri 11 Sep 2026 01:00:12 +0000
ROA not after: Thu 10 Dec 2026 02:00:12 +0000
asID: 137409
IP address blocks: 45.74.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:22:5d:22:4e:bf:7a:5c:de:9e:9a:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 11 01:00:12 2026 GMT
Not After : Dec 10 02:00:12 2026 GMT
Subject: CN=c3c88a95-4193-4ed5-b8b4-09244e2baa78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4c:e2:c0:6c:e0:17:39:6d:f3:1e:0d:92:86:
4a:5b:8b:5c:99:dd:94:40:ad:8f:d4:66:23:d4:56:
7e:af:71:bc:2b:ac:07:20:bc:ff:56:9f:d9:95:7f:
51:4c:0c:1f:01:ed:29:ce:3c:31:77:de:3d:5c:f6:
c3:b5:ba:d9:fa:c1:c7:36:1a:75:f5:96:b0:4d:3c:
9e:47:20:f6:f4:a3:16:81:eb:e4:99:bb:ac:e4:5d:
8b:df:36:59:ac:32:4a:fe:81:aa:2a:62:b6:fc:5a:
4f:c7:79:e4:a7:17:03:f3:19:05:23:6b:8e:52:95:
8a:52:b5:51:56:95:99:a8:3c:f7:b1:1e:65:96:4d:
de:9c:61:d0:f0:c8:e7:b6:a2:f9:b3:bf:62:a2:fa:
c8:45:24:0c:7f:70:62:80:49:d2:81:b4:83:db:37:
ed:32:98:94:80:f5:8d:2d:a0:1d:e7:42:13:2d:af:
53:9e:c8:f3:17:68:c3:d4:33:c8:9f:92:17:f2:5b:
6f:42:cb:1b:5b:20:d5:c5:24:be:9f:2f:98:f0:e1:
70:05:bb:fe:ff:aa:e1:e8:2a:e7:f0:74:89:c4:90:
3c:7b:ec:c0:d5:e5:a0:2e:52:eb:39:5f:78:ea:18:
62:05:2a:a3:79:ec:11:b3:33:9d:da:3c:51:aa:7e:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:17:18:CB:4A:C3:84:92:A6:5C:19:E0:E9:5B:1D:C1:55:C0:06:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/331e8ec2-9b76-3ad2-adc4-8b38edd7012a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:a1:cd:75:9c:1e:39:99:f9:1d:3e:63:5c:d2:69:ea:84:5d:
c4:75:30:dc:45:c6:ce:11:37:23:2f:54:69:a0:7b:68:21:56:
91:04:89:15:b2:75:29:3e:d2:0a:8f:4f:a5:d0:60:73:12:d4:
bc:0b:8a:4a:8e:b7:5b:0c:89:17:91:73:e7:17:41:c2:5e:fb:
39:d9:5b:e9:70:ee:db:c6:12:e6:e7:4d:28:21:ec:79:91:76:
16:79:9d:7e:47:70:c0:04:28:86:4e:25:d1:56:45:cb:1b:ba:
93:dd:b3:44:47:4d:5c:a6:a6:0f:ae:8e:6a:2d:a6:8a:90:bb:
ee:ec:91:9c:43:e1:4e:3c:9c:e4:60:7a:70:0a:6c:ce:1f:49:
e3:39:b2:a2:ee:a7:5b:73:f7:c6:1d:f7:6a:32:c9:7a:ae:49:
d3:3f:5a:93:c3:6d:87:7f:77:8d:92:1d:fa:42:4b:e6:3b:1a:
85:e2:3a:12:d2:fb:50:15:14:be:eb:0b:db:8e:57:82:e2:f7:
a9:f8:7c:b2:fd:ca:20:0f:4b:a4:b0:bd:c0:e8:87:00:55:63:
27:f1:43:6d:a2:78:88:b5:83:a1:0f:6d:f6:ed:65:6d:e6:16:
0d:a5:84:00:71:38:40:bb:db:2a:68:68:b7:ce:7b:fa:9f:fe:
da:3a:3d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:02:16 2026 by rpki-client