
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/fa929d22-5b04-3656-bfd5-92174907d027.roa
File: fa929d22-5b04-3656-bfd5-92174907d027.roa (raw, json)
Hash identifier: 6TCR/AIxh8S/Nb1F2u2djnwU8NUiKCSE94Hixiw8azk=
Subject key identifier: B1:3A:0E:C9:38:55:52:74:8E:5D:E1:83:69:18:31:0C:52:D9:B6:5B
Certificate issuer: /CN=249f7a2c-0438-4d20-8f0b-095a38d1046f
Certificate serial: 010D0C9F4328584E8DEFB3EEB95A54A17D33A600
Authority key identifier: 35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/fa929d22-5b04-3656-bfd5-92174907d027.roa
Signing time: Sun 19 Jul 2026 21:00:12 +0000
ROA not before: Sun 19 Jul 2026 21:00:12 +0000
ROA not after: Sat 17 Oct 2026 21:00:12 +0000
asID: 7441
IP address blocks: 207.189.128.0/21 maxlen: 24
207.189.136.0/22 maxlen: 24
207.189.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8d:ef:b3:ee:b9:5a:54:a1:7d:33:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249f7a2c-0438-4d20-8f0b-095a38d1046f
Validity
Not Before: Jul 19 21:00:12 2026 GMT
Not After : Oct 17 21:00:12 2026 GMT
Subject: CN=ad3368d5-9025-47d6-8b64-eb3a2fa73950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:3c:8b:20:29:78:82:23:37:6f:c5:e1:1f:
b8:a2:c7:58:bf:be:50:36:f3:0f:c9:c2:63:b0:52:
80:c7:6c:44:45:bf:99:be:20:b8:96:f6:1d:59:a3:
56:16:38:e3:ba:44:3a:7a:37:62:9b:17:dc:f4:20:
e3:03:78:31:f0:3d:90:56:6c:39:51:17:6f:ec:7c:
89:1e:35:88:4c:dd:d5:be:ed:dc:34:b1:04:b1:43:
6e:ea:dc:12:22:b5:30:31:d4:ef:8b:9e:e3:7b:0e:
4d:66:77:01:3e:0a:49:36:cb:a5:d7:0e:18:f6:39:
b6:21:50:39:97:dc:46:23:ea:74:de:a2:5e:a7:72:
df:a0:0b:a9:81:d3:7f:dd:b5:81:6a:80:1e:4b:e2:
e7:95:0d:ff:c9:b4:57:6f:ce:fc:b9:53:41:13:38:
c1:97:21:d9:8c:51:49:d5:30:60:26:1f:3a:3c:94:
e8:f1:74:59:27:c8:26:23:b9:8d:9a:2d:8c:8f:d0:
98:bd:91:a3:75:f3:4f:ad:00:71:5e:ea:ab:47:8e:
81:40:b5:f0:1f:f6:f4:13:4c:31:6a:b8:ba:1b:06:
9e:32:e9:05:5a:71:f4:98:5c:21:84:e4:2a:9a:e8:
fb:89:25:d3:dc:e2:db:98:6a:e3:e7:9d:94:02:dd:
16:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3A:0E:C9:38:55:52:74:8E:5D:E1:83:69:18:31:0C:52:D9:B6:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/fa929d22-5b04-3656-bfd5-92174907d027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl
X509v3 Authority Key Identifier:
keyid:35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer
sbgp-ipAddrBlock: critical
IPv4:
207.189.128.0-207.189.141.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:c7:cc:83:a4:67:47:9a:f0:30:8b:60:76:a2:3e:25:9e:b5:
8b:e3:4a:f5:89:96:1e:a6:b5:ff:45:2f:70:cb:54:f6:a9:a8:
5c:0f:de:ad:67:01:13:23:1d:b4:ca:66:28:bd:fa:bc:02:f7:
82:b3:b6:ca:5c:a2:94:d9:4b:68:ac:1c:5b:e5:e8:34:fe:ef:
67:f9:ca:c1:2f:b3:51:d8:8f:6f:b7:66:90:25:9d:85:a6:33:
e9:7d:39:77:46:97:0f:6a:26:9a:74:26:c0:a8:97:69:a9:a8:
b0:cb:45:e0:d0:b4:f2:04:ae:e7:95:e3:e4:53:39:5f:9a:92:
2d:bf:6c:38:9c:31:b6:25:3b:bf:d3:29:b9:6c:e0:2b:8e:73:
55:d6:81:e3:97:28:ed:98:93:e6:5f:f7:92:5d:f2:75:12:62:
65:a2:79:52:f9:d9:04:89:58:90:95:c6:3e:1e:3a:c0:ef:c7:
c3:e1:85:b4:66:4c:82:ef:9c:2d:1f:a3:eb:5f:42:94:d5:d1:
1d:c9:3b:82:1e:55:f7:e1:c7:08:37:e1:cd:81:e2:50:a1:0a:
1d:c3:46:d4:d4:5c:8e:da:d3:a3:7e:56:25:09:62:5c:96:31:
2e:16:2e:b1:31:3b:b6:46:c9:45:bd:7d:8a:87:2f:19:2c:05:
21:a5:5d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:35 2026 by rpki-client