
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa
File: afcd93bd-2515-3100-bccc-fb4b5902b55e.roa (raw, json)
Hash identifier: aHa0rxfPdKPPQnljacjRAELeLLQzid3XKBVUyyxAAX0=
Subject key identifier: 2A:5C:E9:B0:0C:FD:4E:65:17:96:0D:9A:D8:41:3A:F6:0B:D1:5D:C6
Certificate issuer: /CN=791fee1c-1b1f-448c-8937-9a315eb8e9de
Certificate serial: 010D0C9F4328584E8DEFA65188E5E34A3D0CF580
Authority key identifier: BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa
Signing time: Sun 19 Jul 2026 21:00:12 +0000
ROA not before: Sun 19 Jul 2026 21:00:12 +0000
ROA not after: Sat 17 Oct 2026 21:00:12 +0000
asID: 271
IP address blocks: 192.197.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8d:ef:a6:51:88:e5:e3:4a:3d:0c:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=791fee1c-1b1f-448c-8937-9a315eb8e9de
Validity
Not Before: Jul 19 21:00:12 2026 GMT
Not After : Oct 17 21:00:12 2026 GMT
Subject: CN=8f36fb32-8af5-417c-a1cf-58afd95d1103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:df:9b:ba:8e:28:85:2b:fe:3e:e6:f1:80:
1a:b7:df:c6:7f:f9:96:e5:47:94:49:8f:24:7f:ec:
6b:4d:26:cc:2d:28:0f:ea:ac:e5:e7:0d:1a:8c:c9:
2b:ee:4c:0e:68:4a:ce:01:79:4b:0f:ac:c3:0f:c1:
f3:f4:63:ff:04:40:9c:2b:0d:60:19:9a:e3:fd:f6:
de:09:49:31:24:78:e8:a8:d2:53:68:dd:d9:03:b5:
1d:c5:e3:60:fb:72:34:ea:f9:94:40:d0:26:35:2a:
0c:a5:70:d8:91:6c:d5:e3:83:ba:84:97:17:1e:73:
d0:2a:1f:4b:e3:be:9f:eb:e2:89:5d:7e:dd:3a:fa:
2b:55:af:7c:fc:f5:12:4b:a2:74:9e:09:2e:96:e7:
57:f9:4a:53:2e:f6:1e:b4:5d:ed:98:b0:5b:63:71:
4a:25:55:54:59:05:85:b5:34:dc:94:89:98:7c:fb:
5a:93:f9:d7:51:35:26:81:5f:b2:f0:71:ca:d7:20:
d4:7e:5a:13:ef:36:e3:86:96:f9:35:83:3d:7f:48:
3c:08:8e:61:6f:b2:bc:2b:39:89:9e:25:eb:ff:8d:
d3:93:8d:66:8a:d2:80:84:be:c9:b9:fc:5c:2f:6b:
80:ed:14:74:01:8e:25:1c:46:66:bc:2b:ab:5e:f1:
8e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5C:E9:B0:0C:FD:4E:65:17:96:0D:9A:D8:41:3A:F6:0B:D1:5D:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl
X509v3 Authority Key Identifier:
keyid:BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer
sbgp-ipAddrBlock: critical
IPv4:
192.197.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:ab:03:81:dc:ae:61:61:20:ad:c6:ef:13:55:81:a8:a1:9f:
de:e0:6d:7b:5c:70:94:19:3a:c0:3a:aa:72:36:ac:ac:98:ac:
b3:78:e8:ee:03:70:7c:1f:af:1f:54:e1:b3:56:7a:77:6c:11:
32:47:e2:e0:96:9a:95:07:9e:5e:30:22:d4:d3:32:86:b0:02:
89:e7:7b:52:47:8c:df:bd:38:63:c9:fd:c2:89:7d:4f:e3:3e:
b0:4b:f4:50:37:ee:fd:39:75:75:19:32:7e:25:3e:43:10:51:
89:de:d4:9b:a7:65:5d:b2:be:7f:37:ed:5d:4b:4f:ba:7f:9d:
f2:b3:9e:fd:b6:cf:bf:13:fa:8e:03:f3:ad:31:a4:c7:f6:82:
37:1e:cb:23:02:8a:d2:4f:11:0d:5d:7b:d0:8d:71:60:ea:8e:
2d:cd:dc:5b:48:76:4d:c3:07:0e:53:4b:c4:79:86:f9:28:e1:
22:95:43:f7:f8:d4:d0:0a:cd:ee:8c:29:23:4f:0b:4b:7a:fd:
bb:b0:85:ed:1f:c2:9e:c6:84:57:1d:ea:47:06:3f:85:73:74:
82:71:8c:67:7e:5f:dd:d6:f1:99:9c:29:c1:14:a1:9d:91:07:
e3:3c:e7:15:5e:ed:2b:c4:00:cc:83:14:9f:8a:5f:03:8f:2c:
24:8b:12:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:24 2026 by rpki-client