
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/a0ea587d-3661-3a92-985e-52bc85f90a1c.roa
File: a0ea587d-3661-3a92-985e-52bc85f90a1c.roa (raw, json)
Hash identifier: ozEJNh/6Iw4XW8MkHTbtfjyle8QdXI+swUX8avJbGaU=
Subject key identifier: 69:6B:B4:A3:33:21:1D:A2:3F:A2:36:61:93:FF:E3:AB:7D:73:2E:1B
Certificate issuer: /CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Certificate serial: 010D0C9F4328584E640F5473297CD8D5EE16D980
Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/a0ea587d-3661-3a92-985e-52bc85f90a1c.roa
Signing time: Sat 04 Jul 2026 21:00:12 +0000
ROA not before: Sat 04 Jul 2026 21:00:12 +0000
ROA not after: Fri 02 Oct 2026 21:00:12 +0000
asID: 64199
IP address blocks: 198.178.119.64/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:64:0f:54:73:29:7c:d8:d5:ee:16:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Validity
Not Before: Jul 4 21:00:12 2026 GMT
Not After : Oct 2 21:00:12 2026 GMT
Subject: CN=12d99aa9-c1a7-479e-bf30-fa7457d66504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:1c:d3:86:29:9f:f8:c6:27:94:7d:bc:65:
5c:ab:35:56:ff:ad:f3:44:b3:8c:19:26:f7:26:cc:
07:c6:2f:d2:67:31:39:3e:d4:ce:e1:33:16:b5:e9:
14:08:4f:b8:e5:1c:de:4b:ec:2d:a5:9e:78:ff:5d:
79:50:58:5c:c2:58:f7:ae:53:bb:60:9f:b4:6f:49:
3d:c9:43:66:32:ef:b8:35:e5:c6:86:dc:a1:46:97:
f9:64:87:b6:3d:2a:2d:ed:99:84:1b:ca:05:0c:53:
d0:75:b1:cc:dd:6f:db:9b:46:a6:8e:99:98:8e:99:
01:5d:79:b4:0b:4f:96:03:89:05:6f:c7:ee:f1:de:
34:ce:e2:6f:29:d3:ef:3f:13:e4:47:7a:9f:e1:0b:
12:48:14:db:69:65:51:46:58:7c:03:34:7e:e9:d9:
25:c8:f1:bc:5c:38:c6:6c:96:12:47:7d:04:43:b2:
b4:4c:b0:15:1e:95:de:ab:5f:cd:14:d1:fa:86:44:
cf:ae:12:5d:c4:99:df:43:9f:a8:7a:e0:3e:c2:8f:
48:e5:1b:4b:05:e2:f6:2a:ad:34:01:dc:8b:fe:94:
f6:9a:5a:22:9d:e1:6a:cc:9f:0a:c9:42:be:a1:52:
c8:36:83:fa:3f:ea:10:7c:3f:b4:bc:35:1b:d8:b0:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6B:B4:A3:33:21:1D:A2:3F:A2:36:61:93:FF:E3:AB:7D:73:2E:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/a0ea587d-3661-3a92-985e-52bc85f90a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl
X509v3 Authority Key Identifier:
keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.178.119.64/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:dc:bb:04:1a:40:21:27:be:b0:e1:5f:ca:f8:a3:97:49:82:
c3:21:ba:6b:bb:f5:44:c9:46:1f:2d:23:7b:57:02:af:28:ce:
de:aa:05:ac:5c:d0:89:57:ee:29:03:13:51:91:42:2d:0a:f7:
63:be:4b:91:de:90:79:62:26:b0:a9:9c:98:66:e8:bc:a4:5f:
47:55:ce:69:fd:8d:13:90:bd:7b:19:85:82:c2:66:b5:7b:af:
0b:aa:0a:5c:8f:32:9d:8d:aa:d9:07:9a:12:aa:17:4b:c8:3f:
96:6e:67:b1:5d:20:84:d6:ea:f1:68:08:e2:83:c4:17:c3:97:
4a:3f:49:b9:6f:14:9b:2b:fc:60:57:8e:68:53:02:9a:55:b8:
12:d1:33:bd:d9:9d:30:d3:c1:48:27:3a:d3:11:98:52:05:bb:
7e:c0:b5:c5:64:45:06:5c:a3:9d:84:2c:87:e1:06:21:0c:6d:
69:d2:44:c9:56:fb:16:2f:29:27:e7:c6:73:2e:2e:e4:e1:87:
af:30:91:ec:44:a5:f4:d9:8e:dc:a6:d2:23:a2:f9:f7:34:8c:
6b:2c:96:cd:98:0a:37:50:a7:ba:bc:a3:bc:1c:e0:d0:09:09:
8d:5b:2a:a0:85:94:e5:c7:5a:34:90:a9:29:6d:28:aa:22:bd:
40:60:49:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:51:44 2026 by rpki-client