
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa
File: a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa (raw, json)
Hash identifier: rPAc3JULLrk3j+DcPr4UCHIVzDAbUVaG+r8N3qVxOu4=
Subject key identifier: 3D:28:E3:40:45:55:34:20:1C:78:BF:01:19:A1:53:A6:43:10:2A:EB
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F4328584E66DA18A489409DE5CB435680
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa
Signing time: Sun 05 Jul 2026 21:00:11 +0000
ROA not before: Sun 05 Jul 2026 21:00:11 +0000
ROA not after: Sat 03 Oct 2026 21:00:11 +0000
asID: 15164
IP address blocks: 209.71.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:66:da:18:a4:89:40:9d:e5:cb:43:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Jul 5 21:00:11 2026 GMT
Not After : Oct 3 21:00:11 2026 GMT
Subject: CN=66d6e9dc-3dc5-4067-b230-50729d5cdad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:23:e1:3d:00:54:21:ea:ce:33:d0:54:00:
32:0e:60:41:b2:ea:11:7a:34:82:6c:b4:a2:45:a1:
0b:41:76:9f:12:7e:6a:10:86:50:b5:fe:08:d0:c7:
15:79:53:8e:0c:39:2d:58:ea:d2:ad:85:30:f4:97:
21:fb:b7:35:48:35:ab:4a:79:49:ea:8c:41:5f:5a:
f1:6c:5c:c0:e4:e0:7f:88:66:2a:d3:b5:c2:ef:69:
a1:ff:30:24:c8:98:de:bb:eb:ab:9b:9b:36:33:06:
be:81:28:3f:32:e9:9a:e9:a5:c9:05:36:e0:ea:c5:
df:b6:1a:5b:33:f6:b6:d4:ec:26:03:a9:f2:83:fd:
23:33:67:03:1a:f2:ca:5e:1d:77:b7:89:d5:59:bb:
58:3b:8a:21:35:53:00:08:b6:66:7b:b7:30:bd:4e:
27:d9:3f:02:86:c6:c0:7c:7c:8d:bd:db:1c:75:01:
59:29:21:e7:86:11:16:d1:c7:ab:64:b4:63:62:57:
c8:4c:7c:88:44:3b:09:5b:84:3d:a0:b0:85:f4:a8:
8c:8d:38:23:d0:ec:58:d9:7f:32:59:a5:64:8d:c0:
35:9d:fc:6f:e4:55:0f:b5:32:0e:25:a2:9d:4f:bb:
5e:c7:00:4e:8f:30:32:a0:ae:ca:a5:3a:67:d8:b7:
b3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:28:E3:40:45:55:34:20:1C:78:BF:01:19:A1:53:A6:43:10:2A:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
209.71.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:3d:7f:b9:05:cf:e8:e4:c9:f1:f2:99:62:45:ea:3d:85:ae:
aa:d5:ec:8e:14:24:2b:07:f7:5d:be:60:d5:27:58:36:4e:5d:
17:06:87:eb:57:8e:7b:00:df:99:0d:f1:93:d5:c3:e0:2c:87:
cb:de:a2:b3:df:f8:46:68:99:28:9f:dd:68:d3:a0:81:66:f4:
12:7a:52:35:53:7f:ba:5f:11:5a:28:39:d1:ee:c7:d8:fe:2e:
fc:91:9c:f1:80:ed:90:ff:0e:48:86:fc:d6:08:ba:57:f8:07:
be:dd:0d:e7:a7:0b:9f:ae:96:72:7a:9f:62:7c:ec:cb:19:06:
64:d2:66:89:27:d5:05:9d:e9:02:87:08:1f:ff:c4:ed:13:83:
2c:32:06:d9:f1:dc:1b:4d:4d:24:48:c9:a7:92:03:40:c7:9e:
b6:56:39:70:ca:ee:b0:c2:8e:b6:65:1e:ac:de:59:5b:55:a0:
21:84:c5:ed:d8:9d:88:05:a5:78:0b:8a:32:75:99:e6:7a:a4:
03:c0:cc:e3:10:04:5d:a3:07:0a:7a:12:78:a9:cc:d4:de:88:
3b:5d:4b:3b:0c:5a:08:af:a0:4c:7e:0f:06:17:9b:a8:f0:4f:
de:6d:66:b7:3b:c9:9f:20:03:93:9a:e4:62:e3:66:3a:81:68:
84:3e:70:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:02:50 2026 by rpki-client