
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/af868b4a-df56-3a8f-adee-7750259a727e.roa
File: af868b4a-df56-3a8f-adee-7750259a727e.roa (raw, json)
Hash identifier: gMOTiGCLsqPAsQ2+4SFIh9r8Ey/A2Ap8WuyOWfHc2l0=
Subject key identifier: D1:EA:44:A9:1D:02:D8:9E:19:93:12:DA:4F:D4:A8:6C:F4:DD:5B:0E
Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial: 010D0C9F4328584E94EA5F494D04AA5A20DE9600
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/af868b4a-df56-3a8f-adee-7750259a727e.roa
Signing time: Wed 22 Jul 2026 09:00:11 +0000
ROA not before: Wed 22 Jul 2026 09:00:11 +0000
ROA not after: Tue 20 Oct 2026 09:00:11 +0000
asID: 23470
IP address blocks: 209.222.96.0/24 maxlen: 24
209.222.97.0/24 maxlen: 24
209.222.98.0/24 maxlen: 24
209.222.99.0/24 maxlen: 24
209.222.101.0/24 maxlen: 24
209.222.103.0/24 maxlen: 24
209.222.104.0/24 maxlen: 24
209.222.105.0/24 maxlen: 24
209.222.106.0/24 maxlen: 24
209.222.107.0/24 maxlen: 24
209.222.108.0/24 maxlen: 24
209.222.109.0/24 maxlen: 24
209.222.110.0/24 maxlen: 24
209.222.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:94:ea:5f:49:4d:04:aa:5a:20:de:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Validity
Not Before: Jul 22 09:00:11 2026 GMT
Not After : Oct 20 09:00:11 2026 GMT
Subject: CN=13bc145e-632f-4f9d-9294-a20007df8955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:a2:d1:08:cd:26:c3:ef:2b:7b:84:c6:3d:
2c:b0:7e:70:d1:50:7f:23:5c:88:a5:42:af:6b:16:
c9:54:25:94:b1:10:30:9a:ee:1d:f2:8d:41:25:29:
ff:95:b9:d2:ca:a4:dc:6b:bc:e4:47:df:e3:f7:ff:
20:4b:40:0d:23:81:74:59:36:e2:65:27:f8:1d:3e:
08:51:1a:d3:27:8b:2a:46:75:1f:84:a8:1f:24:b7:
7d:52:b4:f4:b5:2c:8b:bf:83:ee:a4:a5:bf:e2:69:
6e:1a:d0:16:61:9a:0d:e5:5e:2e:aa:d4:11:16:ef:
3b:b1:cf:62:18:2b:17:17:d7:32:07:d4:e5:0d:13:
9e:d0:3d:1d:de:19:e6:e8:97:f5:7c:b1:1c:b5:d8:
e9:d4:ca:9b:8f:e5:86:7b:1e:8d:63:38:6a:a9:21:
29:82:96:5a:cb:7f:e2:96:3f:d4:52:9d:70:70:a6:
5c:0e:92:da:bf:28:a6:63:08:3f:79:55:d5:86:88:
9c:db:e2:b3:84:69:9d:15:b1:59:1c:73:97:0a:28:
6c:24:f6:3d:db:e3:e2:80:c3:6c:59:22:f4:82:90:
01:76:0c:f8:29:de:5f:80:37:cc:d1:a3:68:17:3e:
a1:f1:53:82:24:23:17:c1:57:73:5c:43:13:1c:f2:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EA:44:A9:1D:02:D8:9E:19:93:12:DA:4F:D4:A8:6C:F4:DD:5B:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/af868b4a-df56-3a8f-adee-7750259a727e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
X509v3 Authority Key Identifier:
keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
sbgp-ipAddrBlock: critical
IPv4:
209.222.96.0/22
209.222.101.0/24
209.222.103.0-209.222.111.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:8f:44:10:5f:a7:15:e4:11:8e:8e:57:30:a5:17:eb:98:4f:
79:83:e5:05:33:a6:ee:4d:0a:f9:53:a3:9d:5c:f3:1e:07:33:
42:cd:1e:21:00:16:bd:3b:20:70:af:2a:e1:c9:70:63:12:59:
fd:fa:f8:c8:12:8a:1e:f9:f8:0b:7a:ce:51:d1:b4:e1:70:8d:
ba:ba:ac:c5:da:8e:ff:30:a8:3b:2f:4a:23:28:f9:5e:a3:75:
87:ec:70:55:4f:df:e8:c6:88:48:6c:eb:5e:f5:71:d3:6c:ff:
3d:cd:46:bb:c0:54:4e:81:a1:6d:62:cc:8c:0b:84:de:c6:9a:
28:93:ac:ed:e6:ec:88:03:85:96:b1:d7:93:69:40:27:d8:55:
99:7d:ed:90:83:93:8e:f5:01:92:f8:05:55:54:32:02:3c:a2:
e1:5d:87:1b:ec:50:34:98:62:cf:73:5f:11:eb:4e:82:a5:a6:
9b:d7:d6:32:40:c2:87:f1:98:a7:af:9e:0d:cd:42:5d:b7:a8:
47:b4:a3:e4:72:3b:c3:fd:95:14:53:4b:f7:c1:ad:d3:2f:bb:
43:2c:f3:b6:d7:d7:64:ae:57:30:cd:6a:07:17:03:38:9e:b0:
b6:d3:1f:8a:aa:a8:c6:75:c2:64:70:54:f7:ba:6a:6e:05:24:
23:e8:98:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:02:25 2026 by rpki-client