
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa
File: a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa (raw, json)
Hash identifier: hl/JFU8bCAaIrzPnzghjiMcwRsBr0DgYI/AiZlyjooA=
Subject key identifier: D7:2F:E4:5D:2A:AA:1F:39:7D:94:5A:4C:15:E5:0A:EE:98:52:2D:71
Certificate issuer: /CN=2831c461-e175-4265-a0ea-565d8e6179b8
Certificate serial: 010D0C9F4328584E7204BD88BCBD0CCEDCC85A00
Authority key identifier: 3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa
Signing time: Thu 09 Jul 2026 21:00:11 +0000
ROA not before: Thu 09 Jul 2026 21:00:11 +0000
ROA not after: Wed 07 Oct 2026 21:00:11 +0000
asID: 36610
IP address blocks: 199.68.144.0/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:72:04:bd:88:bc:bd:0c:ce:dc:c8:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2831c461-e175-4265-a0ea-565d8e6179b8
Validity
Not Before: Jul 9 21:00:11 2026 GMT
Not After : Oct 7 21:00:11 2026 GMT
Subject: CN=b8092f20-ca8a-406e-acea-656524f27ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:02:c3:17:62:1d:a1:db:05:42:2a:93:17:
d2:a8:2b:31:6a:69:90:e8:03:df:92:97:b0:dd:99:
8e:29:2a:c6:bf:2b:04:fc:36:72:35:0a:1c:50:ec:
84:c7:a3:f0:94:c0:b6:b3:3e:bd:b3:e1:27:81:e4:
0d:f7:70:2c:9a:24:ad:0d:f3:ed:2c:dc:28:a2:8d:
43:b1:22:5e:31:b0:d0:b5:b7:24:55:0b:f1:80:a1:
d3:ff:bc:20:47:8b:9e:5b:a9:bc:db:c4:32:63:10:
bd:26:85:52:25:54:aa:dd:c5:5a:07:10:0d:69:7b:
a5:2e:3e:fd:83:05:fa:c6:a1:ec:a9:dc:a0:a8:63:
4b:e8:4c:af:d8:74:ed:44:4f:33:a3:18:da:d7:53:
3d:13:d2:71:15:d4:ff:e2:e2:ae:30:41:e2:ac:44:
7a:84:8e:0b:76:84:d2:c2:36:24:9f:ed:f8:7a:b1:
d6:dd:46:6b:0f:2b:6d:16:a8:d3:d4:0b:da:dc:3e:
6b:c3:14:f0:ac:39:ed:e2:6b:c5:ae:e8:10:cd:e7:
19:6a:59:c6:38:90:62:a9:68:5a:5a:01:d2:47:98:
66:62:e5:66:c1:e9:33:91:7e:73:cd:ab:a5:92:e9:
2c:ca:f7:0c:8c:53:7f:a1:fe:3e:b9:2b:e7:75:f7:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2F:E4:5D:2A:AA:1F:39:7D:94:5A:4C:15:E5:0A:EE:98:52:2D:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl
X509v3 Authority Key Identifier:
keyid:3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
sbgp-ipAddrBlock: critical
IPv4:
199.68.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:ba:b4:e4:cf:ef:da:ab:da:c2:cc:1c:1d:1f:8f:55:71:53:
3d:55:fe:42:7c:e8:05:b5:69:e7:f6:70:4d:46:3f:26:6e:7b:
7c:37:1c:74:3d:99:8d:2f:69:e5:11:4f:61:13:3f:ff:50:80:
3e:e2:8e:10:cf:bc:97:44:c2:22:b0:64:3c:69:fc:28:65:3e:
39:04:35:af:e1:a1:ca:c0:dc:ca:0c:93:72:5f:0c:b2:f7:a2:
5d:80:bf:c1:6f:7a:78:d8:c5:90:0d:ac:3e:3c:a8:e8:be:8b:
33:84:7a:75:30:b8:a6:da:db:c1:14:69:d5:ae:6e:3f:1b:5c:
ae:4f:45:8c:ac:33:10:29:75:c7:72:3e:f6:48:85:c8:79:47:
9a:61:83:5f:e8:31:01:5a:e9:e0:f5:98:c4:5b:4a:cf:d4:5c:
50:1f:3e:5e:e4:cf:fb:27:a4:77:f5:c9:3f:78:48:41:0c:3f:
bc:3e:10:d3:d0:de:06:23:90:d7:23:b9:6f:a5:0f:97:c3:8e:
a2:56:ed:a2:19:03:3c:de:25:55:48:24:f4:a8:d5:64:31:56:
3c:fa:fd:6a:60:28:42:15:f1:7f:43:cb:ce:9c:ea:53:5e:fc:
24:1d:fc:83:46:f4:46:2c:33:e1:22:f6:b1:fa:ac:14:05:6a:
e5:63:c3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:04:55 2026 by rpki-client