
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0acd3b23-2291-35fc-9328-920f9040939a.roa
File: 0acd3b23-2291-35fc-9328-920f9040939a.roa (raw, json)
Hash identifier: zFycAKlRPvzRdkFaa6HgdXU+dhRj1GVdhWeDvZljeQw=
Subject key identifier: 9B:62:C4:92:B6:39:2C:45:14:3E:97:9D:2E:23:1C:A2:98:AA:40:BD
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584F655E245FA11F7B53FBE91000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0acd3b23-2291-35fc-9328-920f9040939a.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 33363
IP address blocks: 24.173.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5e:24:5f:a1:1f:7b:53:fb:e9:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=ffaf9675-bf9b-4d67-9de5-0c7fc1e6099e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:61:b2:8e:5e:52:3d:70:c9:90:db:a6:f1:
58:31:e3:ee:33:c4:f7:09:65:c5:30:37:6e:e8:ea:
31:d5:3d:cf:79:c1:d3:ce:94:78:e7:6b:b1:7b:22:
00:5e:c3:17:a0:94:81:1d:e1:91:ad:0a:98:b2:20:
4f:da:e4:b3:2a:f3:25:3c:01:f5:33:d5:0e:c2:6e:
4c:35:1f:41:c4:5c:7e:13:53:a2:aa:30:03:d4:30:
0f:0e:b6:41:a4:32:17:a6:5a:50:2d:fd:79:b8:b1:
86:84:5f:7e:9e:a5:79:db:9a:f0:50:46:b3:81:1d:
67:f0:67:5b:8f:ae:bf:dd:88:30:d0:6b:68:c3:d6:
dd:df:9b:5d:cf:0d:73:a8:a9:4d:b0:3f:56:03:ad:
1b:91:57:cc:cd:bf:9f:79:aa:81:e4:2e:34:a4:8a:
34:2a:1c:00:72:85:50:7b:8a:fd:d3:af:ac:87:01:
93:84:5e:bb:e4:44:d8:49:c1:85:58:cc:f0:a5:f7:
ec:70:1a:c4:c4:4d:a9:48:1a:aa:2e:a4:61:d1:1d:
40:d0:5e:1e:f8:a6:b6:18:b2:1b:9b:62:68:99:20:
d8:57:52:6d:45:91:9d:db:28:5e:12:a2:b8:db:ca:
a9:67:93:f1:78:ec:46:33:32:3b:28:17:2e:3f:02:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:62:C4:92:B6:39:2C:45:14:3E:97:9D:2E:23:1C:A2:98:AA:40:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0acd3b23-2291-35fc-9328-920f9040939a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.173.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:bb:54:46:03:7c:7e:fc:a8:96:0f:58:00:de:88:94:dc:67:
fa:28:2b:4b:7c:d5:d5:a0:7c:f9:42:47:05:83:08:57:c8:24:
25:9d:e7:51:32:c2:4c:df:17:83:04:2e:aa:ff:40:3a:4c:40:
7f:a2:0f:9c:5e:7f:62:f4:00:1a:9f:45:c1:8f:d5:53:07:1d:
c0:c7:ca:43:2a:25:19:f3:9e:00:04:f1:75:74:98:47:10:26:
01:ef:4d:cc:6c:cd:17:e7:19:a6:11:80:29:30:62:d4:89:77:
35:f4:94:20:04:75:90:c3:74:11:49:63:a1:b0:1a:c0:61:3d:
d2:a0:b6:80:4f:9d:32:5b:14:c9:0f:e7:fe:8c:bf:a5:fa:f5:
ee:49:4e:58:c0:15:ee:6a:b8:b0:4e:e2:20:1e:f8:d3:55:8b:
50:5d:21:96:60:85:4e:45:78:ec:c3:a1:78:dc:07:57:13:13:
ad:93:dc:a9:c9:2b:13:e2:f3:48:3e:3f:64:ba:d8:fb:1e:0f:
06:67:22:5e:05:8c:6a:92:a1:49:a5:bf:da:98:1e:12:1d:29:
cc:c7:50:a4:14:95:1e:be:9f:77:3a:70:b8:90:ec:8e:04:18:
fb:2d:d9:98:66:60:dc:33:f6:48:f7:25:a8:3a:70:79:93:a5:
27:d8:e9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:47:48 2026 by rpki-client