
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa
File: f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa (raw, json)
Hash identifier: reYnkjVbtI7jV5/697rggP54lnge8RlByqR2uG7opxo=
Subject key identifier: C7:16:C3:C8:2F:F6:2D:23:C2:5B:06:97:C1:A9:4A:C5:F4:CC:88:2B
Certificate issuer: /CN=2831c461-e175-4265-a0ea-565d8e6179b8
Certificate serial: 010D0C9F4328584E7204C10B8A35DCFBB8C23A00
Authority key identifier: 3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa
Signing time: Thu 09 Jul 2026 21:00:11 +0000
ROA not before: Thu 09 Jul 2026 21:00:11 +0000
ROA not after: Wed 07 Oct 2026 21:00:11 +0000
asID: 36610
IP address blocks: 208.77.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:72:04:c1:0b:8a:35:dc:fb:b8:c2:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2831c461-e175-4265-a0ea-565d8e6179b8
Validity
Not Before: Jul 9 21:00:11 2026 GMT
Not After : Oct 7 21:00:11 2026 GMT
Subject: CN=649305f4-f045-4770-9db3-5233b29446fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:bd:1e:a3:63:e2:5c:09:1f:e1:25:40:04:
e3:48:d1:8a:64:d1:1b:31:72:72:51:e7:b0:5d:3c:
02:02:25:97:e8:b2:5b:aa:00:9b:47:d0:6f:f2:d9:
48:06:8f:a6:f5:3a:e5:a8:c2:2f:89:9e:5d:f3:89:
4a:59:7c:9c:21:4c:22:a2:58:e8:62:ab:e9:4b:99:
23:f8:50:76:5f:72:d7:e6:02:a7:6b:c5:38:d9:f7:
38:e1:cd:54:27:47:16:40:4b:81:a0:c4:9c:be:f3:
25:9b:60:74:55:79:50:c8:4a:24:66:6f:cd:9a:b4:
5c:1a:cd:cc:97:8f:67:e0:99:e0:23:ec:16:ea:09:
3c:0e:f8:b7:4b:22:f2:14:6e:3e:e4:23:e0:ad:ee:
3e:9f:da:dd:46:d5:78:28:7b:3b:aa:a5:54:cc:d3:
a3:e4:dc:6f:86:42:ad:3f:86:3f:f0:5f:d1:90:4a:
2a:cf:58:b4:07:2e:d8:1f:2e:dc:da:58:8e:0f:2d:
e9:59:94:f7:bb:c7:30:1b:90:bd:6b:6d:34:f1:a0:
9a:ab:84:1f:42:c6:a8:da:a3:f9:e2:6a:12:06:97:
4b:5e:e8:48:f7:cf:42:84:6a:54:1a:e4:37:48:d6:
ab:26:e6:bc:27:8f:25:48:0c:82:89:99:e5:48:e8:
a7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:16:C3:C8:2F:F6:2D:23:C2:5B:06:97:C1:A9:4A:C5:F4:CC:88:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl
X509v3 Authority Key Identifier:
keyid:3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
sbgp-ipAddrBlock: critical
IPv4:
208.77.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:f6:d3:70:c1:38:f5:6b:84:29:c0:46:a4:38:46:11:c3:81:
c2:c2:d4:cd:ae:7f:f1:e9:30:0b:bd:11:94:8d:d5:b5:bf:b5:
71:c4:66:f4:d8:d8:66:4e:68:84:6a:77:cc:3e:60:8c:2e:7c:
54:80:9e:be:76:a7:79:bb:84:96:d5:9e:62:48:9b:22:c8:8d:
75:b0:b9:0b:57:6b:99:c5:ce:aa:c0:36:6e:8c:85:a3:b2:ba:
0d:81:d0:6f:97:d6:74:d2:9c:10:2a:bf:b2:ae:0e:20:93:40:
03:bf:97:a6:75:38:b1:07:ee:ef:82:e0:ec:d4:5d:c4:09:87:
37:af:07:00:f7:71:dc:cd:10:0f:6e:e6:2e:83:93:6b:2d:69:
8d:55:c9:e2:7e:23:de:56:df:88:b5:4c:16:28:94:36:d2:86:
e4:f2:f3:a8:74:d7:4a:29:59:34:34:f5:89:fe:b8:74:5b:86:
e8:41:cb:a1:68:6b:1a:06:08:27:78:91:29:bf:da:89:96:08:
da:f4:1a:c8:49:e9:6f:aa:e3:97:6d:dd:20:67:7f:7b:f4:8a:
83:88:4a:2c:05:a5:3b:be:85:74:52:40:c6:f1:13:ad:f0:0e:
bb:27:11:ab:d6:13:31:0b:1b:f8:b1:ad:6a:56:40:c0:eb:0d:
8e:48:3f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:22 2026 by rpki-client