
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
File: b08285ee-0972-329c-81d0-7964b995c67b.roa (raw, json)
Hash identifier: NnmmCKSqVgWfQSn291egGgSrqHBadbKa1v3da6vioDE=
Subject key identifier: F9:53:05:D7:9C:DE:23:AB:AB:62:47:C4:A8:E4:05:1D:3E:83:3A:44
Certificate issuer: /CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Certificate serial: 010D0C9F4328584E640F74B582A2E203C4FAF100
Authority key identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
Signing time: Sat 04 Jul 2026 21:00:12 +0000
ROA not before: Sat 04 Jul 2026 21:00:12 +0000
ROA not after: Fri 02 Oct 2026 21:00:12 +0000
asID: 376
IP address blocks: 206.167.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:64:0f:74:b5:82:a2:e2:03:c4:fa:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Validity
Not Before: Jul 4 21:00:12 2026 GMT
Not After : Oct 2 21:00:12 2026 GMT
Subject: CN=6b1e1c79-f182-49f6-91c3-aeefffcd9478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:88:4c:da:02:61:90:bd:55:53:9d:07:ce:
d0:a9:76:5d:78:f7:27:82:15:d3:40:32:ae:a0:30:
24:e3:6c:f8:90:bb:bd:9c:74:b9:14:5a:ee:07:71:
f0:3b:a4:5c:95:84:0a:02:91:11:ec:77:6e:6c:b4:
85:02:5f:23:9b:80:b5:ba:8f:67:54:29:05:39:21:
09:51:7d:3c:32:35:5e:a0:6b:73:fe:30:a3:ac:bc:
54:cd:9d:88:8f:70:5a:33:7a:a1:fe:63:df:af:e7:
6d:80:22:e6:b3:a6:8c:b4:86:11:17:e2:ab:a2:6b:
c2:c9:fa:45:29:68:ae:df:77:aa:23:c2:9b:3b:4a:
97:74:2b:bc:58:21:8a:f3:ac:fb:f7:9e:f3:1a:6a:
64:73:aa:78:fb:ac:c8:2e:ee:18:3c:59:47:c8:df:
b0:d7:b1:2e:cd:ef:fb:72:c2:e1:ef:43:f6:9e:36:
fa:a9:5f:1a:a5:e4:23:a0:fd:a2:a8:6d:a7:fc:fd:
e5:1a:b0:d4:f9:22:82:6a:1f:44:35:39:de:40:0e:
70:40:74:64:0d:e0:d9:bf:1b:37:40:ca:14:5c:43:
bf:c8:37:d2:e3:7e:fb:4a:c0:87:bb:4a:dd:00:71:
fd:44:b3:0a:3a:26:b3:4e:15:a3:21:60:f5:d2:41:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:53:05:D7:9C:DE:23:AB:AB:62:47:C4:A8:E4:05:1D:3E:83:3A:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl
X509v3 Authority Key Identifier:
keyid:5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:d4:d5:e6:b1:8c:bb:ac:0b:4f:5f:f7:32:98:b7:30:85:6c:
19:06:80:5e:47:3e:bf:7d:b6:7d:c6:2a:fd:ca:a1:41:be:c2:
5f:9a:c1:44:8b:c3:4a:3d:0c:ab:ac:05:d0:f4:fb:45:ba:7b:
9c:9c:4a:99:3c:cd:df:87:aa:be:cb:b3:2c:25:3a:7f:bd:b5:
ac:89:54:ab:26:b8:9f:de:e9:af:06:a2:5f:66:8c:66:21:ee:
e3:b8:66:99:e4:92:ce:84:c2:d0:a0:4a:b3:7d:7b:7b:5a:39:
76:d1:77:73:e2:6e:bf:c0:f1:d7:10:0b:9a:e5:1f:0a:84:98:
c4:11:fa:f9:08:e0:c0:c2:0b:ef:20:36:43:3b:39:4f:c9:b3:
f7:2b:a6:3e:50:0d:09:3f:cb:70:1e:f4:79:a3:49:25:51:c5:
0b:6a:b9:d4:5b:22:d1:67:df:b6:17:29:9c:15:96:8a:0c:c7:
75:82:53:62:0a:11:42:69:cf:e5:37:f4:1a:1c:c6:4e:b7:b7:
c3:cf:22:c3:6b:7e:33:d3:4b:88:f1:bd:67:23:84:73:b6:8a:
a3:6a:9f:2b:88:86:10:3f:92:0e:f2:81:23:f1:d1:76:f1:48:
17:09:6c:96:36:6d:ac:9f:b9:ac:92:13:f3:46:ab:61:12:05:
0b:73:7e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:02:59 2026 by rpki-client