
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/9eef125f-77b3-31cb-99e8-0d08eaa9bba7.roa
File: 9eef125f-77b3-31cb-99e8-0d08eaa9bba7.roa (raw, json)
Hash identifier: qclIjFYrA0X7uMEGUsEFVaIksCumuGTDwtdvOx4SFIY=
Subject key identifier: 06:8D:49:65:3B:A8:2E:A9:B6:60:C3:AC:96:5A:B5:89:7B:64:AE:42
Certificate issuer: /CN=2831c461-e175-4265-a0ea-565d8e6179b8
Certificate serial: 010D0C9F4328584E7204DFC116FF8BE754D74BC0
Authority key identifier: 3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/9eef125f-77b3-31cb-99e8-0d08eaa9bba7.roa
Signing time: Thu 09 Jul 2026 21:00:11 +0000
ROA not before: Thu 09 Jul 2026 21:00:11 +0000
ROA not after: Wed 07 Oct 2026 21:00:11 +0000
asID: 36610
IP address blocks: 199.127.208.0/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:72:04:df:c1:16:ff:8b:e7:54:d7:4b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2831c461-e175-4265-a0ea-565d8e6179b8
Validity
Not Before: Jul 9 21:00:11 2026 GMT
Not After : Oct 7 21:00:11 2026 GMT
Subject: CN=67dfd6e8-d7fb-44f8-9769-1b28188bd68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:f6:09:f9:68:64:7e:66:53:15:c9:5d:ad:
78:d1:c8:99:78:42:25:b4:fd:bf:b5:e9:f9:79:2f:
67:a1:bb:52:56:13:d6:ca:b5:ee:0e:d2:29:58:53:
25:f3:b4:3b:d5:0a:b2:41:18:0d:1e:82:6e:9a:8e:
0a:c1:f3:d7:ea:b2:2d:99:4f:20:78:88:3f:36:fb:
8a:70:bb:b8:27:47:bb:5e:3d:61:bc:f2:20:de:93:
b5:1c:01:2a:a8:34:cf:c9:5a:70:f2:59:9e:72:5a:
59:bc:44:d7:71:c5:0a:d2:7a:a8:0f:30:e0:2a:07:
03:31:f5:b2:47:0b:23:5d:bc:f9:d3:bf:30:2f:00:
20:0c:2a:ed:2c:ef:8c:70:fd:64:76:e1:37:b3:25:
ea:db:02:2b:ee:53:46:ca:6d:4f:4d:46:26:eb:ee:
85:2c:de:fa:4e:a5:d6:b0:db:38:5d:2c:de:88:ae:
24:3d:4f:cb:4a:63:28:56:bd:a9:ce:3f:7a:1b:db:
19:1e:ce:46:d8:60:a0:00:55:91:40:62:0d:9d:a4:
6a:66:f9:02:31:4c:c0:e3:66:8f:89:81:e0:a0:81:
e3:64:97:64:4b:0c:44:9f:ba:9f:98:0e:8b:f8:d7:
f2:8c:88:44:72:63:bd:24:79:c4:f4:30:25:4f:cb:
1c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8D:49:65:3B:A8:2E:A9:B6:60:C3:AC:96:5A:B5:89:7B:64:AE:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/9eef125f-77b3-31cb-99e8-0d08eaa9bba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl
X509v3 Authority Key Identifier:
keyid:3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
sbgp-ipAddrBlock: critical
IPv4:
199.127.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:94:43:ad:df:85:1b:6d:ff:79:e0:0a:0b:01:5d:f3:f8:50:
37:f0:6a:c5:37:0a:a3:b4:8e:28:23:9b:d3:61:c0:36:08:d3:
0d:05:1b:27:15:50:7b:fc:39:b6:ef:b8:72:58:4d:72:ac:94:
cd:c7:74:e2:a8:e7:48:1e:19:5b:e6:27:21:4f:cf:a0:f3:32:
b6:62:d1:15:3b:13:13:64:32:37:c0:21:92:31:63:86:2b:2c:
d2:22:8b:b5:ed:b5:ba:38:be:80:8e:bd:8c:95:f1:0e:f2:48:
45:49:4e:3b:82:7f:9c:43:87:86:2d:0d:d0:2b:d6:2e:52:cf:
da:e4:19:8f:f8:a9:ee:08:0a:7b:b1:67:1c:9c:d1:e7:a2:a4:
cc:85:50:92:24:5e:fe:51:80:43:48:99:48:e0:70:6c:6d:15:
7d:32:70:ff:be:f6:fa:6c:9b:c8:f4:98:9f:73:7d:f4:35:12:
a4:ea:d4:a0:a6:d9:22:6a:56:76:2e:07:80:47:94:4f:bf:e9:
2b:99:b7:ac:34:c0:68:63:e0:cd:dc:74:87:73:b9:49:92:d9:
85:a6:27:ef:a4:68:0e:c2:79:87:cb:79:75:79:32:78:05:7c:
37:85:b2:a7:96:27:95:80:75:05:75:7c:d7:4d:66:33:c7:a5:
e7:77:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:10 2026 by rpki-client