
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa
File: 7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa (raw, json)
Hash identifier: amLEa206lFqqRWT8/hl9mV3XA6raQtmgP1WGMjYLrNI=
Subject key identifier: 0B:16:7D:36:FB:C1:84:8F:27:11:0C:6D:36:6D:3E:53:0C:85:FE:C6
Certificate issuer: /CN=700690a7-1957-45e2-8744-ee9735b07319
Certificate serial: 010D0C9F4328584F2D87B8EB01E738D6675B5380
Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 1025
IP address blocks: 209.209.24.0/24 maxlen: 24
2602:fcb8::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:b8:eb:01:e7:38:d6:67:5b:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=0627e2c5-e6dc-4c86-8fe2-1361c240abf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4b:74:c0:a8:9d:3e:9c:6d:5d:a4:ea:02:13:
46:87:cb:0e:43:e3:d7:bf:0e:0f:70:ef:48:af:84:
d6:f1:6a:87:b2:97:7a:bb:1d:bc:48:68:60:c3:8f:
c3:e5:06:59:64:36:f5:6f:d9:15:30:8c:25:c8:7b:
34:bf:db:78:44:08:e0:3c:1d:4b:06:4e:21:66:c1:
af:50:76:71:35:6b:ec:23:b8:8f:49:4d:be:7c:29:
29:c2:5f:4f:cb:14:8a:c5:7f:b0:94:72:29:07:ce:
be:97:43:f6:f1:a4:24:dd:94:8f:9d:cb:e8:b9:05:
6f:8e:b2:a3:d0:5b:68:7c:30:ba:dd:54:78:79:e8:
7c:33:12:41:65:d2:fd:07:d9:dc:8c:4d:3b:9f:c5:
2b:c0:58:41:8a:bf:89:76:61:61:eb:5b:10:ba:92:
14:5c:40:6d:8c:a8:65:9b:8d:e5:5c:05:33:fe:d9:
73:0a:13:d2:f3:40:f9:84:51:d5:d3:68:a7:fc:8c:
22:ee:68:be:35:f8:18:c2:33:88:d3:d6:0c:85:84:
98:d4:58:31:ed:c0:a3:c3:20:82:1a:76:fc:63:20:
fb:95:eb:00:a6:f3:0e:ad:78:92:d8:d3:78:0e:b8:
3e:77:1a:e6:8e:9a:6c:25:3f:3d:f0:a2:35:93:37:
2a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:16:7D:36:FB:C1:84:8F:27:11:0C:6D:36:6D:3E:53:0C:85:FE:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl
X509v3 Authority Key Identifier:
keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
sbgp-ipAddrBlock: critical
IPv4:
209.209.24.0/24
IPv6:
2602:fcb8::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:30:f0:f3:8a:0d:f0:5e:0d:6d:c8:9a:b8:1d:45:b4:f2:21:
31:a9:b1:62:88:21:5b:51:89:a1:b7:ff:db:2e:d6:b2:39:1e:
4b:03:9f:ba:40:4a:c1:32:68:4f:de:4e:c4:ac:34:ee:85:d6:
23:75:10:dc:ab:9f:34:71:3b:96:39:a2:00:6f:fa:9c:03:37:
88:3b:20:dd:e1:49:e7:b1:79:a5:ee:f3:56:82:ef:2c:33:89:
7b:49:09:ae:03:7f:da:f2:44:5a:3d:10:25:bc:00:10:f0:77:
0f:de:63:88:46:dd:d3:cd:42:b1:83:ff:1a:67:06:3c:54:e6:
af:f0:04:db:5b:bc:4d:1c:de:ee:e8:b5:07:f1:ab:96:49:2b:
03:2e:ee:df:79:ff:f9:91:f7:c0:38:9b:b9:46:82:08:89:00:
85:d7:6b:b9:e7:97:28:c6:66:e3:86:ac:6c:3e:9e:32:54:b2:
bf:8a:07:e4:ae:1d:dd:36:48:2d:21:2b:6b:54:8b:09:24:a3:
26:cd:0e:2d:54:eb:b2:54:53:6d:9f:88:a8:5b:83:91:da:4c:
54:78:23:20:60:c7:b9:bf:ec:f3:d5:d6:0a:2f:0b:5c:87:5f:
3f:74:b0:ed:02:ed:a6:59:99:bf:37:8c:c5:1f:15:fc:47:e7:
b1:13:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:09:03 2026 by rpki-client