
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/d402ec43-9e08-3318-b9b6-cce578a54cb9.roa
File: d402ec43-9e08-3318-b9b6-cce578a54cb9.roa (raw, json)
Hash identifier: RB9QFXh+oeVPIWHxWzHoA3T8IKKqUY1nsLqUTc8ogVk=
Subject key identifier: 50:80:2B:09:E3:FC:64:1B:C8:F6:4B:B2:0E:49:90:E4:3B:12:01:EA
Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial: 010D0C9F4328584F093CF246E3D9FD013E09EBC0
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/d402ec43-9e08-3318-b9b6-cce578a54cb9.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 16509
IP address blocks: 216.24.225.0/24 maxlen: 24
216.24.226.0/24 maxlen: 24
216.24.227.0/24 maxlen: 24
216.24.228.0/24 maxlen: 24
216.24.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:f2:46:e3:d9:fd:01:3e:09:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=987cb684-4be7-45ec-bdc1-203ee90ca244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:c1:7d:67:70:ee:37:79:37:6f:45:97:a3:
86:e8:d4:ef:fb:a4:fd:08:8d:03:62:00:79:a2:4d:
a6:8a:a3:56:d6:16:00:59:dd:0d:5e:94:f2:c1:20:
02:bf:3e:4f:3f:a9:9e:23:db:37:4c:f0:f7:2b:d2:
7d:ed:19:39:4f:de:c5:f7:5f:0e:80:cd:60:b4:a5:
10:ea:eb:fd:82:0c:bc:4c:f4:26:f3:57:c4:c5:d1:
ff:cd:15:cb:30:b4:cc:7b:6c:7b:6c:7b:50:75:e5:
ed:18:36:fc:02:f3:a4:5b:c1:1e:bb:bf:66:74:9b:
13:a3:9d:53:28:f5:ad:85:d1:f0:60:17:bc:d9:8e:
f0:f0:b8:84:b8:6c:58:5f:f8:99:0d:81:38:df:cd:
8e:1e:28:ec:83:94:67:ec:d3:95:ba:1a:2c:9d:0c:
a1:f9:b0:4a:51:cd:2c:50:e7:7f:58:74:46:02:07:
86:58:98:92:57:f8:3c:f6:d6:2c:e1:8b:ce:25:31:
63:49:2c:91:4f:af:4c:a7:9a:9a:cd:38:4a:66:4a:
6a:02:21:33:a2:c1:27:a7:43:e9:23:b3:ca:fb:7b:
df:ec:27:0c:62:91:86:95:4b:d4:5c:cf:ad:52:de:
30:07:8d:bb:b2:45:f7:8e:f2:87:ef:95:59:07:04:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:80:2B:09:E3:FC:64:1B:C8:F6:4B:B2:0E:49:90:E4:3B:12:01:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/d402ec43-9e08-3318-b9b6-cce578a54cb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
X509v3 Authority Key Identifier:
keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.225.0-216.24.229.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:c9:14:f9:e1:94:fe:6d:c1:27:02:c2:ff:4b:73:7f:da:75:
72:df:db:c3:97:5e:99:1f:08:72:d7:ae:fa:66:70:c7:8a:69:
cf:d0:63:18:04:b9:87:1c:a6:d0:54:88:72:31:02:95:cc:02:
95:b6:37:8b:4b:37:0c:74:c0:73:d3:3d:29:bf:3c:a2:a6:43:
cb:70:85:c7:28:99:5d:83:cf:ad:f4:aa:02:97:94:52:9c:54:
d4:ac:73:15:aa:30:28:6b:24:b4:cd:44:9d:6a:dd:82:e2:b2:
62:bd:8f:8d:f4:48:50:c3:d9:52:63:83:dd:c4:91:f1:b8:78:
cb:04:9b:2b:da:f1:3c:c8:09:eb:ce:5e:6b:e2:e0:23:e8:fd:
ee:b8:fc:43:e0:4d:b1:03:00:04:35:1e:02:82:a0:51:49:67:
7c:63:c5:46:c3:19:6f:de:00:f0:03:9a:72:a9:3b:63:0c:bf:
c1:fc:9d:f1:12:41:ba:2d:c9:ad:71:0c:4d:6f:18:fb:b7:57:
94:91:70:29:41:61:53:f2:da:fc:6b:88:91:8d:bd:d7:64:e1:
fe:d5:d6:de:4c:c4:72:e5:b7:65:b9:b1:6f:78:85:d3:8c:91:
9c:8e:6f:45:14:dc:69:d2:3c:f5:c8:e1:d3:37:8a:a9:6a:2e:
4d:38:56:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:13:59 2026 by rpki-client