
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/ff35560c-30d0-3666-b661-e312b1343c17.roa
File: ff35560c-30d0-3666-b661-e312b1343c17.roa (raw, json)
Hash identifier: B/CnADNTTygDbsvLZTYdEAkfDsTs9k5sWVJVVkLEWrk=
Subject key identifier: AE:9B:D9:6A:01:17:73:FD:C5:68:07:2E:29:55:C6:82:A4:D4:29:C1
Certificate issuer: /CN=7386a5e1-ba73-408c-a7e4-df88e2f52603
Certificate serial: 010D0C9F4328584F3CE274D610A56995F8550880
Authority key identifier: 8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/ff35560c-30d0-3666-b661-e312b1343c17.roa
Signing time: Sun 20 Sep 2026 13:00:12 +0000
ROA not before: Sun 20 Sep 2026 13:00:12 +0000
ROA not after: Sat 19 Dec 2026 14:00:12 +0000
asID: 46606
IP address blocks: 207.204.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3c:e2:74:d6:10:a5:69:95:f8:55:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7386a5e1-ba73-408c-a7e4-df88e2f52603
Validity
Not Before: Sep 20 13:00:12 2026 GMT
Not After : Dec 19 14:00:12 2026 GMT
Subject: CN=965f96b3-ca8f-4ac5-94f1-28ac184f3def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bd:02:37:ea:27:bc:d1:ec:05:b4:5a:03:72:
0e:9f:2c:76:2a:e3:32:44:07:f3:9b:f0:71:67:1b:
ad:8b:b4:13:6e:17:af:0d:eb:dd:1c:68:93:03:38:
d9:57:2b:dd:1a:97:79:cb:9e:8e:50:c6:12:dc:dd:
70:87:e8:e2:48:ef:50:ad:95:71:cd:10:1b:e8:95:
d8:ff:d9:02:c4:d3:6f:0c:fd:4a:d9:8b:5d:a6:84:
6b:ed:0a:54:fd:0e:ac:f4:58:2e:72:03:e2:01:e3:
46:70:56:07:6f:8b:55:ca:6d:02:22:71:8f:48:79:
3e:02:f6:8b:8c:2e:c6:5b:59:3a:28:d0:20:5f:0a:
c0:29:32:de:91:1a:83:cb:2f:78:a7:c2:10:fe:51:
d4:b8:7e:69:37:1e:8e:bb:8e:d6:7c:d4:10:d5:44:
3d:bc:06:ac:d4:a9:0c:88:e7:21:02:a7:73:f6:16:
47:af:46:ee:e8:ec:d3:0b:9f:ed:8c:0d:f6:44:34:
04:98:d4:31:98:b8:53:35:00:a9:2a:c0:5a:84:5a:
a9:e0:0a:65:54:45:85:66:66:30:2a:76:af:53:19:
e3:4e:2f:77:36:9e:38:ad:d4:48:ba:35:b7:f7:6e:
d6:7e:54:9a:dc:e5:fc:8e:8c:1a:c1:84:31:e3:d3:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9B:D9:6A:01:17:73:FD:C5:68:07:2E:29:55:C6:82:A4:D4:29:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/ff35560c-30d0-3666-b661-e312b1343c17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.crl
X509v3 Authority Key Identifier:
keyid:8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer
sbgp-ipAddrBlock: critical
IPv4:
207.204.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:16:98:fc:2a:9e:87:8c:e9:1f:bd:32:c4:18:e5:e2:b6:25:
dc:a4:e1:83:c5:65:19:b0:da:13:23:a9:ae:00:33:04:93:9b:
d6:5e:a2:6e:a5:d0:08:70:f9:e5:0a:7e:dc:38:e6:39:80:4a:
06:3e:3f:c6:da:34:88:52:5f:06:ed:47:11:fa:82:37:70:b1:
6f:c8:43:1f:14:b5:c8:4e:5d:40:a5:b8:a3:a8:98:f3:72:53:
4f:35:c0:b5:75:55:02:23:74:72:12:07:3d:1d:7a:8e:f2:9b:
91:18:bb:7a:dd:8b:88:7e:a5:06:21:7a:db:58:8d:8b:99:1b:
ca:b5:ab:7e:f4:0b:27:4a:fb:cc:02:e0:d1:25:b8:93:45:1c:
1a:61:a9:ed:1c:90:7d:29:e5:a7:00:41:45:f9:d2:cd:eb:63:
9e:06:ea:66:51:7a:b0:ae:c2:14:0c:86:d9:84:26:b3:ae:7d:
09:a2:d7:04:0f:a4:3f:57:83:b0:67:c2:7f:c1:d0:59:0e:d9:
ec:f2:35:73:51:b5:dd:78:28:db:b6:3f:6a:52:26:aa:4c:4e:
19:06:8f:bd:3d:cd:bd:3a:d3:99:9b:75:bb:96:bd:d0:21:8d:
2c:02:8e:1d:ab:d3:2b:2d:66:8e:56:24:63:02:d7:70:d0:d5:
f5:f3:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:39:35 2026 by rpki-client