
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa
File: a1e68bbb-553c-3456-9cb1-105008ad29db.roa (raw, json)
Hash identifier: lGv2tgYJF9mGEyf+YnRyDKOzdpnwtz+X2v6jan1cZEw=
Subject key identifier: 15:E9:CD:0E:B2:61:8D:7F:58:68:20:F2:5D:AB:63:A6:DE:82:E3:E6
Certificate issuer: /CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Certificate serial: 010D0C9F4328584EED5208336AFD024F2470C480
Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 16509
IP address blocks: 216.147.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:08:33:6a:fd:02:4f:24:70:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=adde9aa7-67c0-4de6-ac72-9d305add469f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:3f:4e:02:e0:73:d5:cb:ce:f3:7e:ba:b3:
a6:9a:b3:d5:43:13:21:f0:bd:dd:aa:e3:39:fa:07:
6f:e4:c0:7a:e3:e0:c1:8b:45:b4:d0:0a:e7:5f:f6:
ad:b7:67:fd:e3:07:da:82:41:d5:ae:ae:20:56:cc:
b8:54:f4:31:ca:4b:6b:a2:1d:11:4f:e8:f0:2b:da:
c2:bf:13:0e:f2:37:32:e6:55:74:47:cf:03:30:27:
d4:24:94:8b:5b:89:02:3e:08:49:6a:83:16:50:88:
bb:af:1d:8e:d3:9e:3f:57:01:29:7b:01:3c:33:e1:
0b:0c:96:9f:c2:1a:d0:26:7e:7d:06:59:57:64:92:
75:9d:a1:cc:4f:76:d0:51:f1:a7:2c:b1:38:4b:7c:
c4:22:c3:ac:d4:10:0e:96:09:bb:52:e8:6c:bc:d1:
eb:1b:f3:1a:6a:aa:45:e1:db:2e:5f:2a:c9:79:7e:
12:52:d2:98:28:07:52:5c:27:a0:ab:1c:ab:53:6e:
8c:a7:29:a5:0d:4a:b1:1a:c1:fc:02:31:6e:42:10:
cf:50:e5:33:fa:eb:1f:72:00:16:b6:94:ea:09:5b:
4c:f7:90:e7:de:77:ed:e5:b6:ff:9d:cd:92:34:37:
3b:fc:2c:ad:5c:c4:51:4c:3e:6b:d3:5c:80:bf:05:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E9:CD:0E:B2:61:8D:7F:58:68:20:F2:5D:AB:63:A6:DE:82:E3:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
X509v3 Authority Key Identifier:
keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
sbgp-ipAddrBlock: critical
IPv4:
216.147.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:c7:87:e2:a5:df:ff:9a:bb:3e:9b:59:7b:71:c9:0b:68:ff:
b0:bc:3e:f8:1b:df:03:9c:b2:b1:1c:ee:da:f9:bb:86:08:c9:
25:64:1b:b3:84:59:a8:13:ab:dc:0f:dd:89:f5:9a:9e:86:09:
c1:e4:26:ec:31:69:11:c2:ca:2f:b9:a7:58:10:0c:ec:8d:06:
b3:4d:29:1f:03:d1:30:7e:8a:bd:ed:4f:fb:2d:c3:13:90:d0:
df:30:34:1a:2d:cd:10:db:cc:f9:fd:16:0f:b9:49:9e:6e:8c:
46:59:07:dd:c8:00:6c:ea:39:1d:d0:3b:51:78:be:cf:b4:11:
42:c3:ed:d9:05:1c:b7:9b:56:14:95:4b:72:dd:01:43:20:3f:
8d:a7:37:6b:7d:d3:8b:67:01:57:14:6d:d7:03:65:61:b0:2d:
15:9d:bd:c6:5f:1c:cf:6d:22:60:bb:47:54:54:a9:d7:2e:f6:
0e:90:5e:87:f4:ff:fe:92:8d:7b:f7:55:bc:48:50:9d:67:73:
e4:13:07:fe:27:04:cb:a6:ac:9b:ec:cf:48:86:29:e5:a4:a6:
ab:23:01:e4:3e:ff:32:ad:90:ea:b1:62:a9:61:4d:30:80:4f:
39:6a:87:b1:fd:3e:2f:5e:91:5f:25:13:cc:69:9c:5f:70:38:
1b:6c:fb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:47:43 2026 by rpki-client