
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cadf68c1-d1bb-3466-972a-0de815519a7f.roa
File: cadf68c1-d1bb-3466-972a-0de815519a7f.roa (raw, json)
Hash identifier: 7VM2SR+c4f5wXOhn5GWMEXimPFIhrNxowPBexpUlvpc=
Subject key identifier: 7D:5A:EE:2D:19:A3:36:24:ED:E2:B0:9D:DA:3F:8B:FA:08:DA:A2:C6
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E7E9503F6AFCD096930654780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cadf68c1-d1bb-3466-972a-0de815519a7f.roa
Signing time: Tue 14 Jul 2026 09:00:12 +0000
ROA not before: Tue 14 Jul 2026 09:00:12 +0000
ROA not after: Mon 12 Oct 2026 09:00:12 +0000
asID: 31898
IP address blocks: 208.76.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7e:95:03:f6:af:cd:09:69:30:65:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 14 09:00:12 2026 GMT
Not After : Oct 12 09:00:12 2026 GMT
Subject: CN=1e50322b-5a1b-4d3a-a8ca-e17d174c7fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:14:06:2a:79:3b:a7:af:5d:32:e1:2a:2b:
0a:12:06:f7:d1:7d:39:73:56:5a:10:81:ae:cb:01:
63:a9:96:6d:93:55:05:83:ce:b9:18:29:a8:17:90:
1e:ea:06:07:c9:77:44:da:8c:35:af:b1:aa:08:bf:
5a:1e:c6:9d:e4:7a:4f:61:64:40:12:9e:60:86:36:
1d:05:1f:7c:3c:c7:9a:e7:32:d5:f4:9e:25:d3:50:
6f:36:6c:38:1f:07:5d:ac:3c:74:9e:21:2a:bd:00:
06:77:f9:0e:04:a9:3d:1f:6b:c2:5a:6b:d3:c1:11:
a2:8c:ed:f5:4e:4c:78:a4:57:66:04:2e:bb:6a:bf:
a2:f6:85:51:45:7e:75:c8:fa:ce:24:fc:06:3b:4e:
0a:e8:df:88:27:77:b0:7d:8e:63:f8:0e:8b:7f:30:
0a:0f:b2:74:10:22:cc:eb:58:22:de:38:8b:b1:8c:
37:7c:c7:f2:16:63:48:06:00:7b:0c:9f:d1:86:14:
c6:c9:bd:9d:af:e7:88:d9:d8:b7:18:d2:82:41:20:
f8:8d:24:0d:b4:84:50:64:c5:bc:4d:35:f3:de:fe:
50:48:48:0e:04:86:5d:f4:b0:e2:a6:09:3c:23:e3:
11:ff:6a:49:51:02:6c:25:38:f1:f1:8b:95:8d:43:
fb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5A:EE:2D:19:A3:36:24:ED:E2:B0:9D:DA:3F:8B:FA:08:DA:A2:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cadf68c1-d1bb-3466-972a-0de815519a7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.76.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:58:92:68:eb:4c:5f:fe:90:a9:52:a5:e7:b8:68:c3:c4:5d:
15:63:4e:76:ef:6c:d0:ab:22:f0:2b:d3:52:ed:74:29:72:3f:
c8:c7:5a:60:34:9e:b5:fa:f5:15:13:cb:17:98:e3:2f:d8:33:
72:ec:3b:26:61:6b:42:da:4b:38:c7:15:24:bc:1c:06:e6:da:
fd:6d:f6:ba:fa:93:f6:27:36:f2:c0:01:b2:f1:6e:39:5d:27:
04:55:bb:9c:c6:3d:2b:52:c9:a5:5d:9b:f7:32:77:fc:be:b9:
b1:56:7d:31:48:c6:78:2c:c5:4c:de:1c:83:3c:aa:03:4d:6d:
48:1f:45:39:e1:57:fa:11:77:8e:d7:35:b4:d1:ea:d1:98:4c:
4b:bb:7d:ef:e3:8b:d6:84:cf:cf:98:82:26:7b:f9:bd:67:eb:
56:d8:ad:b5:fd:07:97:39:90:a1:8b:65:33:78:2a:a7:96:33:
ba:6c:ce:64:7e:1a:03:34:df:42:68:b5:b0:4a:cc:a6:0d:26:
43:03:16:2a:db:a3:48:26:2b:f6:58:14:53:aa:3e:13:0a:9f:
34:12:69:3a:af:41:9e:2e:e1:ae:ec:aa:b9:bc:b3:bb:0b:41:
d1:9c:44:a5:00:53:cc:22:16:3e:6c:bf:f3:c3:bf:ba:40:97:
dd:36:5e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:08 2026 by rpki-client