
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa
File: db6195fd-1939-3b6e-ad36-d0a8359d831e.roa (raw, json)
Hash identifier: qn6H4F9EJwl3VRnD9u+GBC3gT+1JKH6hvWjXk42jwOU=
Subject key identifier: 54:F5:70:65:86:82:97:6F:E3:FB:36:98:A0:FB:14:D0:47:7F:E5:A5
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EA794259F93B2CCAC09993D80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 203
IP address blocks: 192.25.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:94:25:9f:93:b2:cc:ac:09:99:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=d755ae30-0065-4d6d-98b0-9ffdf49b78a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:16:a1:66:1d:af:36:2e:be:78:3b:f7:3b:23:
6b:b7:50:bc:63:b1:4b:f7:bd:c3:66:8f:d5:83:2d:
68:eb:e3:0d:65:c7:35:73:d6:c8:b8:86:28:9f:ac:
6d:67:7a:c2:30:a7:4b:cf:c4:1d:cd:53:7f:5f:c9:
b6:19:04:59:9d:eb:c5:ea:d7:4b:4f:d5:86:0c:23:
cd:63:9f:c7:af:a3:a9:7e:ef:7c:44:5b:6c:ba:ab:
1f:83:7f:75:b3:90:a2:ff:29:95:5e:c2:35:03:f1:
a6:b4:ea:d0:e8:96:af:ca:f6:78:b4:bd:23:c6:59:
4b:d0:dd:b1:aa:f1:5f:72:63:43:e3:b1:22:9d:29:
45:2d:9a:1f:ac:d0:23:f3:4c:04:c8:f0:a5:d4:10:
41:20:fb:eb:b4:c0:54:6e:b8:73:d4:3b:c8:38:e4:
9c:cc:9c:0d:8d:16:73:86:5d:c6:da:ea:87:ed:52:
b1:27:7e:23:f9:6e:0a:69:dc:17:07:0d:8d:ad:49:
72:c3:df:44:60:44:f5:c7:a8:15:5f:29:e1:6d:83:
44:85:63:72:95:df:10:a8:13:2d:e3:97:f9:dd:2d:
07:37:e3:e1:ea:09:99:b8:56:0b:b7:e9:e7:41:1d:
5e:64:d0:d0:21:d5:20:1d:0c:d9:ca:14:81:ca:6f:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F5:70:65:86:82:97:6F:E3:FB:36:98:A0:FB:14:D0:47:7F:E5:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
192.25.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:77:14:51:ff:f8:55:b6:ad:d6:ba:6f:2a:f9:3f:10:82:54:
ae:13:16:98:a1:d0:61:2b:28:bf:21:a4:a6:07:2e:79:a3:c0:
00:c2:f8:96:e2:67:5a:2e:57:49:fc:82:29:08:08:ac:ee:a7:
48:40:a5:06:5f:b8:44:b6:46:59:d7:01:26:d1:55:ab:4d:0a:
25:b2:66:db:04:40:28:f9:99:4a:33:62:fa:51:04:73:07:b6:
61:f4:4d:67:87:9c:9a:bf:3c:e9:78:18:0c:cc:63:c4:bb:33:
61:00:b7:f7:e0:be:b4:69:33:93:44:d7:4e:9b:25:0c:35:c9:
ed:ea:c0:cc:9c:bb:86:5e:12:1b:fb:b6:cb:58:a7:f8:0e:34:
08:a7:62:5f:9e:49:77:91:f5:c6:20:9d:b9:34:a7:fc:fa:d5:
51:a2:9d:9b:43:e6:0f:00:37:ee:4e:2b:01:f8:4c:61:54:81:
a4:34:48:6e:6a:70:1b:ed:8a:71:0a:e6:0c:e1:06:46:ea:09:
44:11:4b:a5:b0:e8:13:59:e1:67:c0:ee:36:d2:93:54:d2:fd:
6f:d4:8c:e8:a9:9a:57:7d:48:11:4a:45:97:c4:e8:1e:a2:13:
54:4c:8a:cf:70:e0:39:32:97:3d:77:a5:94:bc:26:4a:66:98:
d5:65:81:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:04:01 2026 by rpki-client