
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/d1d189ec-b4a5-3da6-914c-1c823cd64149.roa
File: d1d189ec-b4a5-3da6-914c-1c823cd64149.roa (raw, json)
Hash identifier: lapywjfP3UQml5j7KZRLK9/DAnoo7TemUAODcvD1Td0=
Subject key identifier: 5D:BB:23:4A:3D:30:64:A1:D7:7E:51:20:63:0D:09:6E:D9:A1:79:75
Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial: 010D0C9F4328584E7E94F97FA6C632AD4B8C1E80
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/d1d189ec-b4a5-3da6-914c-1c823cd64149.roa
Signing time: Tue 14 Jul 2026 09:00:12 +0000
ROA not before: Tue 14 Jul 2026 09:00:12 +0000
ROA not after: Mon 12 Oct 2026 09:00:12 +0000
asID: 14031
IP address blocks: 140.221.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7e:94:f9:7f:a6:c6:32:ad:4b:8c:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Validity
Not Before: Jul 14 09:00:12 2026 GMT
Not After : Oct 12 09:00:12 2026 GMT
Subject: CN=36a565ca-b948-4c2c-9c9e-af480e7f3ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3f:c8:1a:93:e8:56:21:b4:69:6e:66:c7:e9:
64:2a:8d:88:2e:6c:00:4d:14:f3:8a:bb:70:05:0e:
77:70:c9:03:c4:b6:cd:8b:41:2d:88:41:8c:53:e6:
34:e4:4c:b6:c8:92:36:3f:fc:82:0d:62:d0:ab:b5:
ab:26:a8:d1:f3:2e:17:2b:80:f2:fc:e9:a8:e0:97:
ed:19:12:9a:d7:bb:23:75:cc:17:a2:43:36:33:3d:
38:e6:80:0c:59:f1:66:12:56:51:3f:fd:fe:58:43:
62:e7:cf:71:06:fb:ab:c4:3a:8c:c2:9b:4c:2e:ad:
ce:41:87:f6:56:db:53:46:4e:79:0b:38:bf:38:11:
72:4c:78:ac:f8:42:e3:5d:0e:35:97:13:da:2a:40:
fb:f8:c2:6f:ef:40:04:0f:ce:8b:d9:d6:e1:78:86:
bc:15:15:a7:80:f5:8b:2f:1c:b4:ef:c5:4e:67:ce:
08:76:73:36:7b:e2:04:a6:18:9a:4e:8b:85:a2:4f:
c0:c8:ed:85:af:b9:df:56:d1:d6:b0:36:5d:20:10:
a7:c4:ea:4d:c2:e9:30:96:8b:21:cf:3f:53:2c:34:
a8:f2:8d:57:2d:b4:69:aa:33:ba:d3:9c:20:a4:cf:
7d:9a:9a:db:e2:80:72:5d:e5:ec:3c:e0:b9:7a:a5:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BB:23:4A:3D:30:64:A1:D7:7E:51:20:63:0D:09:6E:D9:A1:79:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/d1d189ec-b4a5-3da6-914c-1c823cd64149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
X509v3 Authority Key Identifier:
keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
sbgp-ipAddrBlock: critical
IPv4:
140.221.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:bd:56:2d:e4:3b:e3:9c:a0:e0:0f:02:66:53:4f:cf:ab:07:
9c:bc:fb:f3:f4:38:33:66:85:65:42:8a:99:c8:9f:29:e9:20:
e3:65:8c:a9:39:47:49:23:54:d8:be:bf:66:c8:d1:68:89:73:
e3:30:fa:6c:a8:b8:48:38:ec:20:4d:a0:d1:4a:37:86:56:40:
a9:68:77:38:76:1d:45:b7:01:65:f8:5c:ef:7f:e6:70:94:8f:
30:29:10:17:80:f4:82:92:88:9b:1b:4d:4c:77:e1:0e:3b:3d:
e1:07:20:17:69:d4:e3:c9:db:52:cf:60:22:f6:b8:0a:a7:14:
da:6b:11:47:be:2e:b8:83:92:2a:ec:76:8b:0f:1f:0c:e3:b5:
72:80:a2:1c:1b:b4:83:dd:df:ba:ec:72:3e:c6:6b:d5:35:1b:
ea:af:a8:cb:72:ed:48:99:cf:59:85:98:c3:65:e5:76:47:68:
42:ad:52:70:24:86:96:41:c6:d5:49:40:31:c4:b6:36:12:8e:
c7:8c:7e:88:e4:a7:66:3d:05:65:07:e7:8e:72:a8:98:d8:c5:
05:d1:22:94:ec:7a:90:08:84:f9:a2:82:7b:ab:d2:9f:4f:f2:
00:29:49:2e:12:4a:6f:11:c7:5b:76:e7:af:34:62:4d:10:55:
62:87:1d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:40 2026 by rpki-client