
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/407b4528-0b5f-3711-889f-62a6ac6815da.roa
File: 407b4528-0b5f-3711-889f-62a6ac6815da.roa (raw, json)
Hash identifier: Mb4KruWSdsEfL5UCCKu02AZ2arHy6Q0TP9fswTwCBng=
Subject key identifier: A6:90:31:94:A9:92:A6:BE:23:EC:E9:F0:4B:A4:74:3E:FF:5A:86:F1
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584D91C00462760C0AE1143F4D00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/407b4528-0b5f-3711-889f-62a6ac6815da.roa
Signing time: Mon 20 Apr 2026 13:00:33 +0000
ROA not before: Mon 20 Apr 2026 13:00:33 +0000
ROA not after: Sun 19 Jul 2026 13:00:33 +0000
asID: 262287
IP address blocks: 206.127.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:c0:04:62:76:0c:0a:e1:14:3f:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Apr 20 13:00:33 2026 GMT
Not After : Jul 19 13:00:33 2026 GMT
Subject: CN=c987bd2c-b530-4b2f-8195-ec16e3486603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:08:0e:9a:df:54:d4:53:e6:1a:33:42:f3:
8b:82:7a:23:b3:2d:b9:3a:31:d1:36:15:3d:16:63:
8f:60:2a:1d:cd:65:6b:c3:d1:47:47:b8:c7:c0:d9:
9b:5b:36:e7:ff:f7:24:f8:58:ce:e1:2d:0f:19:f9:
d7:00:40:c7:f8:fa:30:7f:a7:b2:b9:33:71:cb:82:
02:9c:f8:65:f2:7b:be:df:08:37:6a:26:a5:9d:2b:
38:12:19:36:2a:a4:44:0e:66:4b:9a:bb:6c:f4:02:
dc:86:70:5a:fe:d1:93:9e:f3:f2:5c:cf:d6:e1:76:
31:1a:ab:32:cd:96:a9:46:50:9e:9d:00:88:eb:79:
e0:8f:15:12:66:48:09:7c:70:9d:f9:6d:4a:fc:f0:
e5:41:5e:0e:ea:64:db:ba:ed:26:89:de:a9:1c:f7:
d6:fa:1d:35:49:32:25:46:af:b6:ea:5b:60:28:c6:
f8:2c:2c:23:92:12:4a:66:8a:9a:25:fa:4f:63:85:
3b:92:4b:a0:d4:75:ea:16:dc:1b:5f:24:82:5e:c5:
9d:ba:a0:95:15:49:9d:34:05:f9:c7:82:16:d3:a0:
e4:2b:13:b1:df:2c:7f:12:d2:43:0b:bc:f4:bd:3b:
27:ad:33:a0:23:2b:87:b4:85:43:58:04:66:92:6a:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:90:31:94:A9:92:A6:BE:23:EC:E9:F0:4B:A4:74:3E:FF:5A:86:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/407b4528-0b5f-3711-889f-62a6ac6815da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
206.127.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:35:74:34:e8:89:5a:9d:be:0d:82:bf:0a:f4:c0:a4:02:45:
40:46:73:89:f8:00:76:58:3d:a7:5a:2a:c2:4e:95:e3:4f:a8:
83:99:dd:71:7f:a6:84:48:44:90:76:20:a3:71:57:cc:3c:f4:
ca:68:58:63:8a:d6:00:12:d4:fb:cb:ce:c4:06:02:1d:97:a2:
16:c7:18:27:11:e2:a9:a0:b8:05:1e:00:66:7e:d2:3c:bc:c4:
d4:87:30:46:28:fb:e2:27:7f:13:25:8f:49:0b:98:aa:dd:41:
63:33:53:53:da:11:94:e7:a6:c4:dc:b3:9f:f9:22:85:e0:99:
b3:f1:f2:73:79:a6:54:95:01:3c:d0:4a:15:3f:f6:6f:69:f4:
6e:c1:0d:8b:cc:59:9d:29:d4:8d:6c:fb:bb:9c:f0:d9:c9:a2:
fd:e6:b0:e6:16:07:c0:11:14:c5:97:bd:80:9b:74:e2:7e:41:
8f:a7:7c:71:eb:c9:5e:b6:07:09:57:65:ed:15:79:eb:99:c0:
57:b2:fc:c6:13:f3:2b:b0:0e:71:9a:5e:c4:76:ea:59:40:16:
db:38:ab:40:20:3b:40:7a:8b:eb:e1:c9:95:53:1e:95:02:06:
35:e6:71:7d:e2:cc:d1:ff:62:5a:45:35:c6:90:57:3b:93:8a:
ca:7a:da:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:45:15 2026 by rpki-client