
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/426ad1f7-251c-380a-82a1-028890c6c42f.roa
File: 426ad1f7-251c-380a-82a1-028890c6c42f.roa (raw, json)
Hash identifier: ZWgkSEUB25is0v9tDkAAhnc6g40f6fc7Y9dgYx8gAxo=
Subject key identifier: 40:3A:69:E8:BB:C7:CD:F3:BB:2D:38:D1:7E:69:D4:D1:8D:41:80:FB
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584F5CFD50A7ADE2B91E03A45500
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/426ad1f7-251c-380a-82a1-028890c6c42f.roa
Signing time: Fri 02 Oct 2026 01:00:12 +0000
ROA not before: Fri 02 Oct 2026 01:00:12 +0000
ROA not after: Thu 31 Dec 2026 02:00:12 +0000
asID: 7203
IP address blocks: 199.223.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5c:fd:50:a7:ad:e2:b9:1e:03:a4:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Oct 2 01:00:12 2026 GMT
Not After : Dec 31 02:00:12 2026 GMT
Subject: CN=351dd57e-acde-4bd5-a73e-9b418f23788c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e8:da:69:ca:26:79:84:76:68:90:ef:06:f3:
7d:8c:bd:92:06:d7:20:e1:70:a1:bc:75:cf:27:19:
04:6f:1e:df:31:ed:df:2e:ab:6b:42:23:a0:ff:53:
fd:4d:02:15:ff:2f:4c:80:99:87:27:31:36:2a:20:
f3:66:6c:3b:ba:19:4d:80:80:ef:39:80:8f:3f:bb:
52:7b:a1:c6:bc:98:c5:a8:a6:0e:75:e1:6c:12:8c:
d8:e3:34:8c:8d:2b:77:fb:88:74:fa:c2:c8:4e:e1:
51:c2:2b:eb:70:59:35:84:80:35:6a:c3:17:01:f0:
42:05:3b:9f:29:a0:15:70:46:46:68:83:ca:94:9b:
86:d9:8c:63:e1:fd:a4:c9:99:8f:f2:13:d7:a6:35:
26:aa:dd:47:5f:4e:54:1d:72:f8:a3:ad:4a:4d:95:
bc:bd:37:08:32:d4:e0:a6:e1:7e:f2:8d:e4:ae:5e:
aa:85:79:d6:8a:9e:3b:ba:2a:79:4c:39:46:9d:62:
51:da:cf:07:5b:01:ed:ba:4d:28:69:11:4b:22:d5:
a0:e5:07:ec:da:a3:09:7d:9f:a7:bb:bf:e8:18:de:
9a:41:ec:78:01:05:96:e5:26:f8:fa:30:e5:36:eb:
aa:43:d9:e1:0a:f4:d7:f1:a3:50:35:24:fa:71:8b:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3A:69:E8:BB:C7:CD:F3:BB:2D:38:D1:7E:69:D4:D1:8D:41:80:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/426ad1f7-251c-380a-82a1-028890c6c42f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.223.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:fc:bb:cc:a9:32:49:69:06:e9:67:41:6e:59:38:e9:72:67:
ea:ff:11:d5:5d:cd:de:d7:51:23:08:8e:02:a0:32:e0:0c:28:
a5:93:34:ac:71:70:81:9e:d5:f1:83:19:f4:d3:12:da:ae:44:
0b:a8:2e:af:1d:d2:33:aa:70:45:7e:47:54:3b:83:00:b9:71:
95:75:e8:4d:d9:d1:cb:d5:02:27:f5:3c:6e:36:69:dd:5f:38:
c3:09:b3:c1:5f:f0:08:37:d1:d8:10:9a:fd:c7:32:1b:b6:db:
2e:f3:82:3c:95:be:67:41:7e:bb:41:3e:d4:4e:f1:f5:09:db:
76:e5:47:bb:8c:1b:b7:a9:2d:f4:50:57:75:5f:ce:6f:7b:ee:
1f:db:80:92:cf:d8:87:5b:e6:4f:b6:97:15:62:9d:bb:c4:2f:
f0:46:1c:e8:8f:47:59:a1:c0:51:b4:57:d6:29:79:41:de:9c:
01:7c:c3:31:b1:8c:10:ee:66:cb:14:f4:c3:32:ae:4c:74:e3:
21:8b:30:71:65:cd:37:d3:b8:46:be:66:65:60:28:8a:49:0a:
70:53:5e:4c:16:77:2b:24:1c:7e:6e:11:8a:73:0d:34:b3:b1:
33:b7:ca:e5:ba:07:c9:18:14:dd:34:50:54:3f:f0:32:68:14:
67:7d:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:44:35 2026 by rpki-client