
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/03f961f3-6b43-39af-89bc-92927876bcab.roa
File: 03f961f3-6b43-39af-89bc-92927876bcab.roa (raw, json)
Hash identifier: Fq3J73kjSNbVCr2rWbT5/bMAG9qMcdhXafwWEfKbKEo=
Subject key identifier: DB:0A:C6:CA:BA:30:68:16:43:5C:30:54:00:ED:9E:DE:F0:49:6F:C9
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328584F497CF2F3C2DC9743DF3F5DC0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/03f961f3-6b43-39af-89bc-92927876bcab.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36492
IP address blocks: 172.102.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:f2:f3:c2:dc:97:43:df:3f:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=aaeb2f5c-febd-462a-819d-294700a496ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a7:81:15:37:4a:09:7f:8c:7a:02:69:ea:59:
48:fa:a9:0a:ee:d4:37:e1:36:8d:c1:4c:70:fa:fa:
12:c4:cc:2a:e3:5d:c7:45:5d:95:68:e9:93:a4:9d:
c7:89:ea:7a:6d:f5:bd:2e:8c:5c:47:dc:24:72:0a:
1e:a7:03:fe:3c:85:09:90:95:26:02:17:5c:c5:70:
cc:04:e0:4f:07:58:e6:00:b9:1a:e2:40:66:97:55:
1f:06:50:25:c9:43:c6:33:db:11:b3:26:66:1f:6f:
0a:49:03:ad:78:a6:a5:38:ee:01:47:ea:c9:ba:a4:
cd:f6:97:cc:20:3a:fb:e5:fd:e3:2b:8f:19:a0:1d:
ec:90:54:c1:f5:c8:54:3d:45:8a:f2:d6:56:41:b1:
2c:81:71:1d:e4:13:20:ed:b5:70:4b:ee:f6:09:f0:
28:bd:c0:03:d3:1f:22:d3:d0:38:1e:0c:df:5a:a8:
5c:57:a6:c3:ce:ac:1f:75:ac:65:54:4f:96:f1:3b:
f1:4a:39:11:45:db:a9:3b:eb:d3:e8:49:2d:71:21:
ee:e2:74:d4:6e:bb:cf:c1:64:95:73:90:c6:34:88:
92:7b:32:b7:9e:e4:49:2b:3a:39:4d:3f:db:09:db:
45:40:eb:14:05:12:8f:b1:b6:a5:d8:25:38:ce:09:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0A:C6:CA:BA:30:68:16:43:5C:30:54:00:ED:9E:DE:F0:49:6F:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/03f961f3-6b43-39af-89bc-92927876bcab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
172.102.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:e8:11:f9:c6:65:6d:30:a7:ed:e7:b6:d8:dd:5b:b0:8e:98:
ae:38:c6:c9:54:b6:17:46:93:ac:da:ea:f3:dd:ed:09:89:6b:
94:32:16:db:9c:de:18:0a:b4:af:47:d4:d7:a7:78:8a:1b:cd:
3b:00:ba:da:35:40:4d:92:08:50:0e:5d:0a:4e:00:ab:c3:b8:
81:a3:c7:98:92:e8:5e:8e:0a:1a:f1:93:24:38:54:85:32:ee:
57:b7:86:d4:78:68:5d:99:8e:9e:18:7b:e9:b0:c8:ac:e2:57:
e6:5d:fb:4a:40:5e:64:8b:98:70:bd:b9:b7:6d:35:e5:65:46:
a6:1f:d4:cc:c9:36:d9:25:95:74:89:91:3a:3a:35:5b:76:ea:
04:84:ee:73:43:ce:65:13:a2:c3:02:5f:85:24:da:cb:65:b4:
ac:54:75:42:78:fb:15:fb:e9:00:56:c7:72:99:3e:4e:56:8d:
14:c3:04:00:5c:db:60:2b:8d:86:db:f3:7c:c8:3b:b3:ee:05:
2c:79:e1:ae:ba:29:69:9a:ea:0e:5e:0e:b5:92:db:7c:eb:15:
fc:61:44:8e:bd:4c:c3:ac:4d:7f:5e:4f:b7:20:60:25:06:ab:
55:56:30:b8:53:30:82:47:17:e4:6c:97:1a:57:8e:07:12:a4:
72:67:80:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:12:44 2026 by rpki-client