
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa
File: d336f765-c7fe-3817-b529-a6906fb694ea.roa (raw, json)
Hash identifier: 4t+usOJFaTG6A4SQJirOwGTMJNA8deUdpzuF8s8EuQQ=
Subject key identifier: E2:92:CD:B2:32:DC:59:84:D5:8A:8B:43:8E:CF:7F:F8:D8:1E:46:A9
Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Certificate serial: 010D0C9F4328584EA78823E759DE4F6B4767B090
Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 40628
IP address blocks: 204.61.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:23:e7:59:de:4f:6b:47:67:b0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=51ccb220-56de-4e85-852e-48bdbb47ecbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:ab:f3:da:d2:ef:a0:4e:0b:c1:7f:37:69:
f7:d2:da:3f:08:4a:35:c7:69:f9:25:74:a2:60:c2:
8a:e0:ae:cd:fe:06:b1:ba:0b:b4:b1:19:26:4e:8c:
a1:74:8d:44:1e:20:d8:d1:12:69:0c:d2:b8:94:19:
a1:8b:30:20:50:62:a9:83:a5:cf:a6:b4:79:28:00:
f2:69:b8:35:cc:9f:fc:18:68:a5:4f:9d:83:74:ce:
69:c2:b3:17:af:66:e9:73:b5:3e:c4:b7:3f:dc:0a:
19:39:b9:64:a3:ff:31:f1:4e:ee:f8:34:28:22:7a:
76:d4:cf:a0:59:4e:86:85:4a:c7:6a:5d:28:12:93:
91:2c:92:25:6a:9f:9f:28:68:2b:a4:2b:7f:b3:84:
49:56:e3:86:26:f4:48:38:33:f1:cf:5f:4d:62:73:
51:ff:a1:11:5f:3a:15:b6:1b:d3:f9:39:13:a1:b6:
50:7a:a1:03:45:58:ca:76:a2:af:27:6e:95:01:58:
ca:f2:bd:f6:59:dc:d9:db:37:de:0c:dc:62:76:ed:
27:8a:e4:07:c8:b0:ff:d2:8e:80:56:b6:49:4b:82:
6a:f7:3c:19:51:19:94:6d:b6:8d:a7:96:57:4c:c0:
12:67:eb:10:96:b9:00:54:df:2b:9a:c7:28:9f:4c:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:92:CD:B2:32:DC:59:84:D5:8A:8B:43:8E:CF:7F:F8:D8:1E:46:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl
X509v3 Authority Key Identifier:
keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
sbgp-ipAddrBlock: critical
IPv4:
204.61.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:a6:3e:17:ef:97:f1:1d:21:aa:89:d9:bb:e2:5e:34:43:0b:
7e:c1:38:04:41:20:24:02:ce:90:cc:e2:ea:db:b4:39:94:d9:
4e:55:ed:6a:0f:6e:67:7d:38:12:3e:8a:b6:80:54:c6:7c:ae:
d2:dd:c6:eb:ad:47:11:3f:36:97:58:06:01:e3:3f:51:53:33:
c6:24:09:4f:91:06:a1:5f:97:4c:04:84:4e:9b:5a:fa:33:0d:
d8:69:67:c0:c7:07:cf:3f:07:1b:38:b1:26:b4:bd:73:eb:91:
4c:1f:8f:d0:9d:8e:cd:9a:5c:b3:2d:15:08:aa:d0:ac:b5:c8:
73:4b:61:db:f8:0b:90:18:f7:39:e6:24:27:4e:96:43:ee:dc:
84:fa:e6:8e:c6:d0:e3:51:ec:84:a0:8b:06:9b:71:4b:66:c4:
83:0e:2d:bd:8e:70:bf:47:84:cd:df:b9:f1:a8:fb:d5:3d:6e:
45:ea:06:dd:47:52:60:17:82:b7:2e:d7:f3:7f:ab:95:28:44:
08:05:59:04:b7:02:74:74:55:53:74:5c:86:39:b9:73:7e:4d:
46:29:dc:3c:cc:5b:96:78:4a:91:1b:83:5e:d8:f6:20:b2:b5:
76:1e:73:09:c2:95:d5:fd:d0:d4:04:6c:fa:31:7e:71:05:31:
39:82:d5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:02:10 2026 by rpki-client