
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cadf68c1-d1bb-3466-972a-0de815519a7f.roa
File: cadf68c1-d1bb-3466-972a-0de815519a7f.roa (raw, json)
Hash identifier: /BfwCRNQTHMks6+mdYL6ac2yyq7mMF1dCCpFAlp5LwA=
Subject key identifier: E6:DF:BC:A3:CD:6F:95:DF:53:38:54:CF:71:EF:3F:3D:00:95:49:4E
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D9E5027B09865FED38989EA00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cadf68c1-d1bb-3466-972a-0de815519a7f.roa
Signing time: Sat 25 Apr 2026 01:00:24 +0000
ROA not before: Sat 25 Apr 2026 01:00:24 +0000
ROA not after: Fri 24 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 208.76.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:50:27:b0:98:65:fe:d3:89:89:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 25 01:00:24 2026 GMT
Not After : Jul 24 01:00:24 2026 GMT
Subject: CN=6a17878e-4b3b-45ca-9264-901d94d7ce16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:df:12:e1:b5:d3:74:0d:34:94:d0:8d:13:
fa:cc:cb:61:23:66:a4:5c:d9:a0:4e:3b:8a:61:ba:
6a:7c:96:d2:e0:32:bd:86:f4:94:08:0d:1e:d0:56:
79:84:74:f2:05:f2:0d:13:c5:12:78:6e:35:af:db:
14:7f:04:5e:c2:2e:68:97:8c:53:9c:7a:bd:11:8e:
c4:70:47:2b:1a:3f:81:aa:40:4b:48:cd:f8:78:d1:
63:27:6c:25:4a:7c:01:30:a3:48:5b:04:05:bf:1c:
a7:f9:37:c7:93:7f:c3:9d:9f:46:3b:0d:f0:a2:41:
69:46:96:d4:4e:de:93:6f:de:98:7d:56:04:1e:5a:
d9:5d:87:fd:11:a7:80:50:05:ee:15:bf:32:19:98:
01:83:c8:9a:c7:7d:a1:4c:79:37:23:9d:e9:01:fc:
57:b1:04:e3:94:7f:21:8e:b4:5b:43:72:c2:a8:a6:
d3:f6:f2:b2:ba:31:a3:82:20:64:de:b8:5c:4f:60:
fe:e3:27:d7:a0:3b:f9:df:88:db:2f:97:a0:a5:f2:
f6:ed:5a:ed:d9:ff:0c:4a:e1:49:e3:2d:3d:77:bb:
19:1e:4e:20:32:a6:01:ec:56:e7:7a:19:9f:3b:86:
8f:ff:63:0e:e5:51:83:14:02:79:ab:e0:dd:5f:ae:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DF:BC:A3:CD:6F:95:DF:53:38:54:CF:71:EF:3F:3D:00:95:49:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cadf68c1-d1bb-3466-972a-0de815519a7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.76.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:ab:ea:2f:4d:0b:2e:14:21:c7:fa:db:3b:e4:c5:35:ec:db:
aa:96:dd:62:6a:c0:ff:6c:e0:86:84:71:fa:36:be:e0:ab:54:
60:cf:93:71:30:9c:c3:5e:91:b0:d5:a8:1b:46:d2:3e:c7:a6:
2d:9f:18:c1:e1:cc:81:b8:59:12:ea:ff:62:5e:57:85:69:27:
a0:e3:24:fb:1d:30:e9:06:e8:af:9b:80:f6:96:4b:80:4e:81:
a2:7b:01:ff:dc:ff:53:8f:c2:b0:2a:5c:b6:a1:75:a9:7d:1a:
f8:8c:b0:ad:b5:75:2d:55:8c:bb:10:5f:85:cb:5e:a6:b7:0b:
05:d5:56:45:23:a8:53:0b:d3:3a:87:74:18:1f:79:c2:35:0d:
d7:20:2c:39:e3:5f:6e:0f:cb:ca:b7:d8:6d:28:5c:4d:3f:ab:
93:49:08:b2:9f:19:a7:dd:09:53:c4:cd:8c:d7:b6:2b:68:b1:
28:b5:df:32:11:5f:fa:f8:25:49:77:06:58:7a:a8:2e:37:92:
1d:a4:ac:5b:e5:42:33:bb:a0:53:bb:5b:40:db:49:19:65:65:
4d:61:5e:56:57:34:5c:ab:8d:02:c8:4b:4f:2e:ff:88:f3:d4:
50:cd:90:9c:b4:29:dc:7d:7f:33:6a:ec:ec:9e:f6:3d:30:a9:
d8:1a:f8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:39:34 2026 by rpki-client