
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/db743816-314d-30a5-9761-d6c850190cc5.roa
File: db743816-314d-30a5-9761-d6c850190cc5.roa (raw, json)
Hash identifier: S8yLbNebENHbc+o7JOguwpZdpS6ge9jlw+KlaJfCO6M=
Subject key identifier: 51:57:CF:69:2D:EA:A3:CA:3B:9B:A1:C3:40:09:82:FE:49:3C:1A:5B
Certificate issuer: /CN=8b973e20-42b5-497e-831b-66d353f928d7
Certificate serial: 010D0C9F4328584F2ABD2F896BBEA98F49CCBE80
Authority key identifier: 0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/db743816-314d-30a5-9761-d6c850190cc5.roa
Signing time: Mon 14 Sep 2026 01:00:12 +0000
ROA not before: Mon 14 Sep 2026 01:00:12 +0000
ROA not after: Sun 13 Dec 2026 02:00:12 +0000
asID: 6341
IP address blocks: 156.76.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:bd:2f:89:6b:be:a9:8f:49:cc:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b973e20-42b5-497e-831b-66d353f928d7
Validity
Not Before: Sep 14 01:00:12 2026 GMT
Not After : Dec 13 02:00:12 2026 GMT
Subject: CN=13cfdb5c-5248-4992-866f-ddf1c1476bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:9a:96:5c:78:91:9c:b8:79:5f:d4:07:a0:
63:40:36:c5:21:6b:ea:58:8f:84:b1:e5:62:ce:fc:
f6:36:45:8c:c4:b4:42:0d:e8:23:47:78:03:df:b3:
ca:1e:ad:2b:b8:98:af:65:0e:01:f1:3a:5a:8e:0c:
87:56:d4:fa:de:07:4c:da:f1:dc:ea:85:fa:95:5d:
c9:e7:81:41:d8:af:99:f0:47:74:d8:99:99:11:09:
96:1a:d0:89:bc:10:b1:59:be:e4:cc:88:f8:5b:32:
3e:1b:44:3c:62:58:89:28:ec:b8:52:c0:cd:ed:bf:
47:68:e3:e1:9b:e3:e1:e0:6d:22:a8:98:d0:b3:ac:
2d:4a:a0:97:86:10:48:a0:b8:55:98:41:be:d1:69:
be:67:19:da:f7:99:7e:91:a8:d0:20:6a:ad:2a:1e:
9a:54:6b:46:a1:b7:39:6f:77:6e:74:a1:57:72:30:
75:d7:fe:60:0a:bf:22:44:1a:b1:ff:7e:8d:93:22:
2d:1b:b6:f9:d3:89:d0:4e:05:fa:f7:95:09:6d:a2:
0a:7b:23:09:54:56:d7:b9:f8:ed:6e:33:8f:5d:4b:
a6:95:19:21:d7:bf:9e:2b:3b:a3:cc:6d:14:3b:55:
6c:65:da:9d:14:4b:8d:93:10:73:11:b5:c7:b9:57:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:57:CF:69:2D:EA:A3:CA:3B:9B:A1:C3:40:09:82:FE:49:3C:1A:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/db743816-314d-30a5-9761-d6c850190cc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl
X509v3 Authority Key Identifier:
keyid:0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
sbgp-ipAddrBlock: critical
IPv4:
156.76.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:3d:04:7e:46:ef:cb:27:a7:29:d5:e1:e5:e3:6d:fb:d1:b9:
25:c4:92:05:09:7c:39:51:a3:ff:a3:35:e0:b9:4f:3b:0a:3f:
07:19:e0:0a:28:38:d7:56:7f:67:21:15:91:e6:8b:50:51:e3:
92:e0:2b:d7:97:d0:5b:65:2e:22:d9:93:da:f9:cd:8e:79:8a:
02:58:ef:47:3f:f0:1a:d3:03:7d:7d:50:13:1f:76:a7:90:b9:
5c:43:64:35:96:f0:2e:01:32:44:cf:fb:8c:04:fe:7a:35:0e:
16:c8:b9:42:45:e0:00:63:99:b2:e2:78:31:c3:2e:60:a0:2e:
f8:b5:ba:85:ac:03:bc:1f:44:44:11:b8:43:21:45:72:2d:40:
eb:21:f3:ae:65:a8:dc:8d:c5:ee:74:40:68:8f:90:f0:37:f5:
58:61:08:cf:21:cd:ad:f3:9f:7a:9f:d0:68:37:a6:b7:4a:34:
0a:df:03:3f:af:ce:12:3a:dd:40:45:16:f7:18:f6:e8:c8:e0:
8a:a3:4d:fb:2b:06:99:3f:b2:1f:f5:17:1a:6e:19:55:7f:cb:
94:4f:8d:66:3d:ed:85:fa:d9:9e:99:8c:a4:d2:c6:19:99:84:
53:23:a7:6b:4a:93:cb:c3:b2:d5:02:29:ff:f0:58:c6:a2:bd:
d1:95:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:54:53 2026 by rpki-client