
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c7602d02-1c9d-3b84-af3d-046d07d25405.roa
File: c7602d02-1c9d-3b84-af3d-046d07d25405.roa (raw, json)
Hash identifier: SI/7Wyg6BKn3VJ7dFtiTOfaTY35LQOQ32PpPQqh/C94=
Subject key identifier: 1F:67:3D:47:79:74:86:9F:63:36:CE:4F:15:C9:B5:0E:24:86:DE:F1
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584E958D4830AF4D6F789E5E3000
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c7602d02-1c9d-3b84-af3d-046d07d25405.roa
Signing time: Wed 22 Jul 2026 14:28:37 +0000
ROA not before: Wed 22 Jul 2026 14:28:37 +0000
ROA not after: Tue 20 Oct 2026 14:28:37 +0000
asID: 398721
IP address blocks: 217.28.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:95:8d:48:30:af:4d:6f:78:9e:5e:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Jul 22 14:28:37 2026 GMT
Not After : Oct 20 14:28:37 2026 GMT
Subject: CN=01c75014-da04-4b3c-9279-9f6d57a11c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:b1:dd:90:0c:2a:43:9d:6f:bc:7d:9e:83:
9e:af:83:02:32:8e:ae:3c:5a:5e:7a:77:66:b6:32:
61:f8:37:71:5a:05:9b:2e:0c:93:f5:a1:d8:63:82:
74:50:ad:61:32:30:6b:83:9d:0f:60:12:4e:cf:b4:
e0:39:2c:eb:9a:5f:5d:83:3c:a1:49:c9:43:4f:89:
0b:d6:25:93:7f:bc:3c:ee:16:9a:60:92:53:26:11:
b1:1a:af:a9:15:d4:e0:38:55:66:97:ce:4c:31:ec:
46:61:8c:bc:fa:f9:ca:3f:5a:18:21:00:08:ca:0e:
bf:fd:f7:cc:5b:0f:28:bd:b5:2d:76:fa:ea:6c:1d:
05:b7:7d:8f:95:e7:c0:9c:40:51:19:3f:01:3d:aa:
de:5f:74:cd:ef:8b:61:45:d0:2b:0f:ec:06:04:33:
bb:4c:e1:08:08:83:84:35:47:29:64:47:d5:d2:7a:
5a:e6:9e:13:f0:2c:d6:61:07:8f:2f:c9:48:9a:b0:
26:4b:b0:f2:89:3a:ab:cf:b7:86:1d:55:dc:ac:bd:
2c:9c:a5:3f:22:0b:a1:88:a8:8d:35:9c:4c:b3:1f:
05:48:b6:e4:d2:5b:bc:2e:18:1d:1e:f1:d5:84:62:
5e:4a:9b:9b:41:d8:2f:19:e0:3d:44:46:59:1b:99:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:67:3D:47:79:74:86:9F:63:36:CE:4F:15:C9:B5:0E:24:86:DE:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c7602d02-1c9d-3b84-af3d-046d07d25405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
217.28.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:1f:c0:43:70:54:a1:d2:45:2c:75:e4:0a:ac:03:b1:15:57:
39:32:e9:b2:d2:eb:00:b9:dd:8a:96:23:07:5a:61:df:dc:67:
1c:f8:d2:f2:da:71:6c:9e:1b:5a:56:c2:0d:29:03:01:f6:0d:
bc:6f:f9:ed:f9:18:47:78:ab:01:d1:86:ad:f9:2f:5e:0a:2e:
5f:f3:71:01:74:c8:ec:79:cc:fb:bc:48:68:9a:32:a7:38:dd:
67:0f:52:e3:7a:ce:4b:44:42:20:3b:03:be:33:81:6b:57:f0:
3f:be:62:d3:70:88:b3:9c:c0:93:ef:1c:8f:71:2c:88:83:51:
ab:7c:16:30:f2:91:d4:2f:9d:77:11:76:26:af:74:69:6d:df:
4c:54:2a:39:34:95:a2:d1:c2:8d:98:06:5d:7a:59:72:6d:e5:
3e:73:8a:d2:a4:75:19:23:22:d0:9e:a6:12:6c:a6:cb:63:f9:
6b:3b:33:07:05:11:cf:81:17:42:6f:af:af:73:ba:09:73:b0:
21:66:b1:52:9d:09:87:f8:4f:65:9e:75:59:cf:db:44:80:24:
18:a8:97:39:27:95:3e:21:66:77:a9:c3:70:17:d7:d0:ec:26:
f3:ae:62:26:9e:d5:03:36:94:9a:8c:45:c1:98:58:0e:75:fb:
9e:31:06:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:50 2026 by rpki-client