
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/975416ca-3764-3fb0-91a9-a7e762bbbe6c.roa
File: 975416ca-3764-3fb0-91a9-a7e762bbbe6c.roa (raw, json)
Hash identifier: Lh5e94EKREm/f1o3lSgG5gqj88qec/VypbBU0/5WNFE=
Subject key identifier: 6E:81:1A:82:A2:43:B8:1E:29:AE:8B:A0:8F:6D:A3:9A:67:28:C8:5B
Certificate issuer: /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial: 010D0C9F4328584E9BE50BD38669A7C57814E380
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/975416ca-3764-3fb0-91a9-a7e762bbbe6c.roa
Signing time: Fri 24 Jul 2026 21:00:12 +0000
ROA not before: Fri 24 Jul 2026 21:00:12 +0000
ROA not after: Thu 22 Oct 2026 21:00:12 +0000
asID: 23491
IP address blocks: 198.252.136.0/24 maxlen: 24
204.152.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9b:e5:0b:d3:86:69:a7:c5:78:14:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
Validity
Not Before: Jul 24 21:00:12 2026 GMT
Not After : Oct 22 21:00:12 2026 GMT
Subject: CN=4a24501c-8769-46ff-af7a-6af88a9095cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:24:f0:ff:40:68:89:99:de:82:e9:5c:b8:
9e:3d:ec:5a:9e:a4:fa:3d:c5:6a:e0:59:50:5a:45:
ed:5e:53:53:40:4c:26:ad:36:a3:17:e8:d0:43:39:
4e:d3:69:29:85:44:d0:1c:41:31:c2:25:b9:2d:0a:
e4:a3:b9:3b:b8:b9:bc:a5:01:35:9c:77:f9:5e:81:
04:84:54:0b:9a:9a:ce:56:31:e7:21:7b:6e:c3:fa:
51:ae:e0:be:f4:92:15:92:e2:68:92:b7:78:a2:cc:
3e:b7:d6:7b:cf:53:49:32:db:d2:36:16:2b:9b:52:
e4:cb:d0:06:b0:e3:7c:95:4c:40:5a:3b:e4:e9:fc:
95:18:61:a6:51:70:26:ec:cd:84:44:01:05:32:42:
b0:1c:65:1e:a2:bf:45:36:b3:26:8e:ee:8f:88:49:
19:f2:68:61:ce:7b:ea:87:52:1f:96:c7:ab:94:49:
4d:5a:1e:16:31:0a:39:e8:92:22:64:27:68:20:47:
49:41:8c:78:22:42:52:7d:6e:30:4a:6a:8d:1b:82:
23:b8:1f:01:45:c4:2e:c9:12:1d:30:e2:f1:b0:39:
fd:00:91:bc:ef:41:86:d6:c1:2c:74:da:6c:78:f4:
52:42:db:21:ee:4e:63:8c:2e:88:84:d9:82:c7:b3:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:81:1A:82:A2:43:B8:1E:29:AE:8B:A0:8F:6D:A3:9A:67:28:C8:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/975416ca-3764-3fb0-91a9-a7e762bbbe6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
X509v3 Authority Key Identifier:
keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
sbgp-ipAddrBlock: critical
IPv4:
198.252.136.0/24
204.152.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:f9:a4:80:42:85:b0:e8:38:1f:43:12:6f:64:62:17:91:82:
a6:51:5e:2c:71:ff:38:b9:5b:33:8a:3c:09:a4:10:89:d2:30:
f9:bf:ef:b5:eb:66:86:dd:49:9f:a3:c9:ef:8c:79:93:b5:d5:
74:ff:ef:5f:ba:1d:ed:8f:13:57:1b:41:91:03:1b:40:66:13:
99:17:0c:ec:22:55:e0:d2:b1:90:89:c2:2d:42:42:3e:73:9e:
bd:2d:35:23:a4:3a:56:fa:9c:df:b8:ba:6a:37:54:5d:b7:c7:
ba:08:c8:f3:27:56:21:fa:db:b9:44:65:90:a2:6f:f9:62:a4:
b5:84:f6:3c:4b:c7:a2:8e:57:a2:c0:59:25:7b:41:97:87:71:
50:55:68:fd:df:87:dd:4f:1d:9f:96:00:83:e9:bb:9c:56:33:
4c:b8:cc:98:25:dd:e3:54:06:21:74:4d:86:7c:32:e7:51:71:
5d:fc:f1:b0:f1:ad:6a:59:96:19:54:dc:f4:6c:85:f3:46:1f:
f5:51:d1:cb:67:fa:57:ea:80:18:68:47:5e:aa:2c:46:15:70:
ea:92:99:f1:43:7b:57:de:f8:06:97:e7:00:01:e7:7c:80:ce:
c4:b0:9e:78:4b:6e:9e:d0:9a:20:c0:30:d7:78:62:d5:d6:ef:
6e:c3:26:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:39 2026 by rpki-client