
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa
File: 514b984c-cac0-3f94-a6d5-e507ad0ad953.roa (raw, json)
Hash identifier: PijIzzsbydc62racQVYllO1LLQbe1A3JnRukm7eiqIA=
Subject key identifier: 69:DD:AB:DC:9C:A1:F3:DE:53:A8:33:3F:7B:9B:EC:04:3B:30:0A:6E
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584F4975BB83999BC7AA2A1CB520
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 400591
IP address blocks: 204.8.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:bb:83:99:9b:c7:aa:2a:1c:b5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=398b76d3-092c-4759-a0b9-9b7e9f7889d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d5:76:86:cb:d0:8e:db:e3:88:ab:96:ab:62:
94:c9:44:e7:83:c0:e2:1e:d4:ed:76:00:f9:9e:a1:
fe:a7:8d:51:f6:28:94:e8:57:bf:44:8d:05:a9:d7:
bc:35:45:0b:3b:f5:85:65:2a:ac:a0:42:15:62:68:
8e:f5:5b:de:15:b0:f5:bc:f0:00:f9:4c:0f:ca:2d:
fe:79:4d:94:49:5f:a1:f4:09:e3:66:3d:ee:d5:86:
14:ad:81:18:01:02:74:19:1e:7c:d6:85:48:11:21:
d0:c1:f6:56:91:e0:54:cc:2e:cb:ce:09:17:1d:fa:
07:bc:c4:b4:4c:db:74:12:d6:ab:85:97:5d:d2:13:
81:a2:e5:13:d8:00:60:fb:33:28:b7:72:bc:46:3b:
71:91:cc:3c:7e:23:fd:30:23:6f:1c:69:8f:4b:c6:
1b:39:aa:e0:ed:06:3e:15:dc:cf:df:eb:20:fd:31:
45:3a:49:bf:2a:97:95:09:39:85:bf:86:ff:07:1e:
0b:fb:35:34:cc:9e:8f:19:33:2b:1b:09:1e:bb:7a:
ea:4a:cc:07:4a:47:0a:43:00:68:e4:35:a9:c2:0c:
9f:ff:a2:9e:79:65:a7:c7:26:e2:8d:67:59:4f:8f:
c3:9a:8e:f2:62:d9:98:19:b8:74:88:34:0c:dc:c2:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DD:AB:DC:9C:A1:F3:DE:53:A8:33:3F:7B:9B:EC:04:3B:30:0A:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:55:d7:cf:8f:6e:c5:0b:76:ba:23:40:e6:ca:71:f1:0e:17:
1f:92:97:c4:a7:96:4d:07:a2:7e:c4:30:d1:92:91:36:6c:67:
63:87:78:f3:c6:e1:c7:45:b7:99:85:6c:bc:c3:57:6a:fa:10:
b1:a7:bf:1c:02:8f:b5:8c:b6:00:9a:6f:9f:cf:13:3b:59:bf:
06:ac:d3:e0:61:4a:ea:5e:bc:f5:47:7c:95:2d:10:35:86:4b:
cc:cf:f4:1d:d7:b1:18:09:4c:73:c5:c3:27:05:53:ab:d2:37:
40:37:3c:f5:29:4a:0d:69:4c:59:b0:7b:49:ab:14:72:fa:97:
f5:ed:d2:b1:c2:5b:ef:22:93:8e:ac:d8:29:8d:f2:23:ab:dc:
b7:2c:2b:06:a5:06:82:b5:18:e7:52:4e:6d:e8:17:0f:94:85:
96:e8:af:a6:87:dc:01:e6:26:16:17:72:cf:6c:4f:ff:25:ef:
ff:90:16:52:7d:6f:6c:38:13:3c:08:59:c7:0c:31:02:49:61:
73:6e:3d:2d:5b:1b:56:01:ac:bc:ca:db:f7:10:e7:b6:c5:2a:
49:fd:7c:a6:17:68:d4:29:a1:88:9c:3b:95:c2:7e:59:59:c7:
42:05:c0:8e:62:b2:3a:5f:09:a9:d4:41:a2:ba:85:40:07:af:
a7:80:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:47:24 2026 by rpki-client