
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa
File: 8658f928-bb2e-351c-baa0-b043397f7b78.roa (raw, json)
Hash identifier: Rt6HrrlNibTFalekptNWcto0ni5glmXe9kMwV/BBWhE=
Subject key identifier: 38:C2:B8:66:91:03:F5:B0:11:A8:CB:C2:3C:46:57:DC:A1:E7:D2:CF
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584DADAAD46A17468A84012B5B80
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa
Signing time: Thu 30 Apr 2026 13:00:31 +0000
ROA not before: Thu 30 Apr 2026 13:00:31 +0000
ROA not after: Wed 29 Jul 2026 13:00:31 +0000
asID: 13414
IP address blocks: 209.237.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ad:aa:d4:6a:17:46:8a:84:01:2b:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Apr 30 13:00:31 2026 GMT
Not After : Jul 29 13:00:31 2026 GMT
Subject: CN=a2f4def4-2428-4cc0-8675-197212869eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:f0:5b:5e:26:71:02:1f:27:d2:cf:fe:55:
0c:92:62:35:02:74:52:e3:e0:27:5c:07:fa:60:65:
ef:86:53:86:04:3b:c2:0c:39:49:c9:1f:e5:4d:ba:
5e:8a:3d:82:1e:01:fe:a6:38:98:37:b2:cb:b0:f6:
63:3d:5b:cb:36:da:8a:b1:75:4b:c7:6c:d7:d8:37:
1b:f7:96:be:c2:18:67:6a:1f:33:5d:35:15:0f:d2:
d9:77:84:c9:02:35:4e:7d:5b:57:bd:46:fd:db:5a:
12:3a:7c:d1:8a:42:81:07:16:42:9f:3a:9e:45:b6:
14:d9:b2:23:af:08:80:b5:02:59:e0:28:fe:3f:17:
ef:80:a5:a6:36:4d:90:52:b2:7c:35:79:3e:a3:9f:
a9:2e:bd:cb:9c:a8:c6:fc:5e:b0:61:22:77:44:6c:
68:bc:60:6f:14:f5:7b:ac:6d:29:ca:79:87:5d:ef:
0d:a7:73:a4:97:0e:96:f5:2f:8d:68:df:98:f8:1b:
b1:78:e0:2c:6e:cc:45:ce:96:5d:7d:17:60:38:c1:
50:37:29:0f:3a:b2:04:2c:de:a6:a1:2b:cc:e9:df:
bc:3b:41:b0:ba:c3:78:c6:43:9b:da:90:e5:21:77:
1a:29:39:ef:a5:61:1b:39:4b:b2:1a:b6:f9:ae:4c:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C2:B8:66:91:03:F5:B0:11:A8:CB:C2:3C:46:57:DC:A1:E7:D2:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:06:37:c4:90:19:e2:2a:0b:10:c0:bf:57:0c:34:02:af:89:
7e:26:22:38:10:a9:de:02:cb:79:fe:17:f7:2f:95:ef:8f:9f:
ee:d5:9d:30:c2:c9:af:c4:3a:3e:db:41:fa:a2:90:f9:4e:7c:
a9:9c:d4:95:06:96:b6:05:63:c4:fe:f5:1b:17:2b:06:b4:c7:
e2:0b:71:fb:c1:57:34:7e:8a:14:11:f7:8e:fc:12:4d:ec:10:
93:7b:08:5b:bd:be:30:94:74:90:3a:3a:2b:96:3f:11:59:fe:
24:c8:37:d1:6a:92:f2:42:63:6f:03:5d:4d:70:0c:06:a8:89:
b0:02:b3:d0:7a:a6:7a:37:99:b1:ef:c4:df:bb:d6:c7:ac:33:
6b:b4:c7:21:47:9f:40:fb:55:03:97:31:c4:cd:a6:83:80:e3:
4b:3b:f3:6b:03:cd:08:d8:c0:ac:3a:57:f6:61:fc:a6:be:67:
20:05:9f:eb:c4:dd:ff:71:56:fe:1b:cd:1c:25:20:91:08:78:
b5:d0:97:1c:e6:ed:65:65:0a:b6:5b:eb:d3:12:c3:49:30:23:
dc:e6:0a:02:66:64:a9:4d:6b:bb:d2:06:2a:a3:ff:18:57:3d:
31:b0:9e:a4:35:1a:2e:0f:ec:6e:c0:16:c7:31:89:37:63:64:
8d:76:1c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:25:40 2026 by rpki-client