
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/2157483a-f9e3-3888-b16c-c96c49936cd3.roa
File: 2157483a-f9e3-3888-b16c-c96c49936cd3.roa (raw, json)
Hash identifier: iaUGhyXJ1nY8bkPmc4nUcArYuyLAkMJIT43oP7GxFtw=
Subject key identifier: 76:76:2E:A1:D3:FB:99:BA:55:5F:C6:FB:DA:44:2E:FC:8A:68:7A:5A
Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial: 010D0C9F4328584F0ED2294F363A042148DD4150
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/2157483a-f9e3-3888-b16c-c96c49936cd3.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 834
IP address blocks: 208.123.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:29:4f:36:3a:04:21:48:dd:41:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=f7e908fc-0d4c-4e80-9ced-fc183ff96b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:0c:10:90:fa:f8:7c:04:b5:ac:29:52:dc:
be:2f:2c:bb:b0:78:ea:b6:80:90:cc:9c:4a:9c:d3:
b2:dc:f3:5c:68:24:ed:fa:e5:d6:db:3d:c7:54:21:
ed:b6:d5:65:14:56:9d:77:ef:9f:b2:be:6e:c9:a5:
a3:a0:2b:ac:f7:51:a5:54:21:2c:f1:4a:d6:e7:91:
f2:e9:17:9d:4e:84:0a:49:06:71:fa:ce:db:db:61:
2f:dc:72:dc:bc:45:ab:05:f7:3c:c7:e5:cc:d0:f4:
50:30:00:0a:31:0f:4b:19:1b:f5:18:50:74:e0:ae:
1f:ca:5f:c4:b8:3f:4a:f7:6d:09:b2:73:27:d1:e2:
0e:36:9f:df:11:96:9e:67:a8:3c:06:b1:a1:25:f7:
f2:64:6c:8e:b7:b6:67:95:a7:25:8c:16:5f:d1:32:
c7:a6:02:b6:97:61:5f:8f:f3:ce:65:17:b1:19:7a:
bf:bd:55:a2:8b:0e:fc:47:46:c0:bc:69:cb:30:ce:
43:b6:be:30:45:5f:95:2d:c3:cf:50:f0:20:59:12:
84:9a:61:8e:f8:c2:6d:2f:4b:44:41:90:7d:59:4f:
2f:61:30:9e:c6:9a:aa:d3:13:93:7f:95:21:6b:37:
80:27:6b:30:36:df:5d:2e:97:60:bf:b5:e3:6e:50:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:76:2E:A1:D3:FB:99:BA:55:5F:C6:FB:DA:44:2E:FC:8A:68:7A:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/2157483a-f9e3-3888-b16c-c96c49936cd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
X509v3 Authority Key Identifier:
keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
208.123.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:b7:10:85:b7:ea:71:7d:b4:4b:43:5f:f5:f3:42:d5:1c:db:
74:72:2f:f5:04:f8:95:3a:d0:da:5e:da:b4:0d:cb:03:38:8a:
f3:bf:18:af:07:d6:4a:83:13:9a:2b:ff:4c:b3:e1:e3:34:48:
93:dd:f1:10:fe:71:14:a4:4f:0f:1b:d0:89:f2:3f:13:78:1b:
98:4e:d4:93:b0:59:b5:10:fa:41:0b:c8:1d:31:ec:ea:e2:ab:
95:b4:0f:32:20:82:02:8a:aa:4a:3a:51:f0:ce:86:c7:6f:6b:
99:37:45:39:43:5b:75:70:dc:6e:6a:67:37:43:01:f0:37:7c:
de:1b:e6:9a:df:01:eb:15:29:dd:32:d2:99:1a:37:c3:ca:0f:
d3:90:83:74:13:ab:15:6a:1c:54:80:94:e4:0d:eb:6d:f7:71:
ba:09:b7:df:0c:1f:ba:70:ee:45:c1:d7:90:61:0b:dd:d8:92:
ba:45:87:02:93:ab:d0:ff:1d:07:be:10:d3:91:c1:be:31:cb:
e1:81:b3:eb:01:53:e0:dd:f7:2e:56:06:ac:57:3a:14:a4:37:
36:cf:6a:f4:c2:2e:6b:c6:52:0c:be:90:07:cd:60:cd:03:13:
67:57:ec:da:fe:31:b6:f9:3c:ea:2c:42:da:e1:b7:c7:8d:52:
32:81:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:17:30 2026 by rpki-client