
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/3477e30a-a9ae-3e6e-9dce-69f329f05f4f.roa
File: 3477e30a-a9ae-3e6e-9dce-69f329f05f4f.roa (raw, json)
Hash identifier: CGBOm+yK9LlXH/2sKhBnTm0eeTV/8yV1eLqRHBZlkbA=
Subject key identifier: 9D:E8:2A:33:02:0E:8F:CC:25:92:CE:A4:1E:E2:5F:86:12:06:05:84
Certificate issuer: /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial: 010D0C9F4328584E815F8D736D73DF89C9574800
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/3477e30a-a9ae-3e6e-9dce-69f329f05f4f.roa
Signing time: Wed 15 Jul 2026 09:00:13 +0000
ROA not before: Wed 15 Jul 2026 09:00:13 +0000
ROA not after: Tue 13 Oct 2026 09:00:13 +0000
asID: 393891
IP address blocks: 67.206.186.0/24 maxlen: 24
67.206.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:81:5f:8d:73:6d:73:df:89:c9:57:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
Validity
Not Before: Jul 15 09:00:13 2026 GMT
Not After : Oct 13 09:00:13 2026 GMT
Subject: CN=2aa20ba6-9395-4cde-901f-73578119d139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:54:01:c6:c7:2e:be:fd:36:d1:03:b2:aa:
0d:5d:bf:7a:4a:60:32:2d:1d:e4:53:a5:c0:23:f7:
29:11:dc:c2:b0:64:4b:7f:78:50:ec:0b:d2:51:b1:
ed:39:e3:45:5a:bc:59:8f:20:50:4e:04:fd:79:e7:
ab:8b:0d:a5:2e:92:22:12:7c:a5:c2:9c:64:38:fc:
42:76:ec:32:a6:e6:3e:74:e6:c3:7a:30:89:75:62:
48:60:4f:55:97:a5:6d:c6:0b:21:5a:af:ba:fc:82:
56:da:d1:5e:22:83:29:f4:30:96:9f:65:68:b0:53:
d7:2b:90:85:e3:d1:1b:1e:68:91:63:a3:63:88:ba:
cf:dc:e0:98:18:cf:08:88:74:be:73:48:67:af:34:
9b:33:67:cf:c8:00:3c:ac:74:57:28:04:2e:c7:00:
e1:99:23:67:c8:de:a7:d8:cb:e8:74:91:62:f9:73:
8d:9d:48:ec:e5:78:9f:63:4e:ab:3a:ac:61:22:e1:
c6:2c:ec:94:0a:f2:37:11:a5:6e:95:b6:a8:0f:eb:
3a:5d:ca:c9:c8:b0:70:da:09:8b:45:3f:c6:cc:6c:
c0:cc:cb:6c:37:41:00:4f:36:4e:57:2f:24:d4:0c:
19:60:99:c8:d0:17:db:6e:94:5c:c4:cd:8c:77:3a:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E8:2A:33:02:0E:8F:CC:25:92:CE:A4:1E:E2:5F:86:12:06:05:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/3477e30a-a9ae-3e6e-9dce-69f329f05f4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
X509v3 Authority Key Identifier:
keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
sbgp-ipAddrBlock: critical
IPv4:
67.206.186.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:ce:a3:46:2d:72:3f:23:4f:77:03:4e:ab:74:f9:39:b3:2f:
b3:e1:55:10:a6:5f:8e:b0:97:1c:81:6b:52:0f:e0:a0:a2:12:
61:62:cb:39:5a:87:70:c5:6b:fb:75:14:ff:f7:c0:4c:1c:22:
2c:40:c3:75:93:a7:8f:e3:0e:b2:aa:af:41:a6:8d:c1:ea:86:
89:39:ce:a7:3a:ba:98:4d:94:25:24:ad:b5:ce:4a:d7:7c:c0:
f7:e4:6b:f2:1f:64:61:e9:b1:dd:ae:b9:c4:66:16:34:8f:6a:
66:2a:7e:e7:5a:25:f6:7e:24:56:f1:22:c7:00:81:8a:6d:9e:
5e:07:bc:f1:cd:cf:75:ba:62:d1:49:5e:c6:b7:8a:24:a4:42:
92:67:32:16:a6:3f:d7:5e:db:a0:82:65:9a:4f:7a:7d:e5:e9:
c2:6c:9d:c8:bb:03:cb:0d:9d:b4:d4:ab:ef:71:8e:56:8e:b2:
ff:d4:9d:9c:1e:3d:10:90:43:37:dd:8c:0b:d6:38:83:0b:d9:
7a:7a:87:cc:1e:2b:de:94:d5:94:e1:9c:76:d1:28:ec:db:17:
3e:85:0d:c8:24:8d:f5:8e:a2:77:a6:48:98:52:96:92:4c:aa:
14:6f:1a:17:e0:83:09:cd:1d:f2:ee:02:bb:8c:f1:ee:de:2a:
e0:42:77:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:31:22 2026 by rpki-client