
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa
File: 423c23a3-fd63-3040-9f8b-286fc8843cee.roa (raw, json)
Hash identifier: WxvsOd0gfeDbICCnJ3PZLCSMEg8Hg46V9mFq51irbFo=
Subject key identifier: 3D:36:F5:F6:A1:F9:07:80:27:5D:9B:C2:1B:21:AB:47:41:6C:96:3B
Certificate issuer: /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial: 010D0C9F4328584E9BE505E6ADECA16E1E0E41A0
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa
Signing time: Fri 24 Jul 2026 21:00:12 +0000
ROA not before: Fri 24 Jul 2026 21:00:12 +0000
ROA not after: Thu 22 Oct 2026 21:00:12 +0000
asID: 7057
IP address blocks: 216.8.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9b:e5:05:e6:ad:ec:a1:6e:1e:0e:41:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Validity
Not Before: Jul 24 21:00:12 2026 GMT
Not After : Oct 22 21:00:12 2026 GMT
Subject: CN=c7d7b298-e859-48ee-af68-c0fdbb5fa147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:b6:ec:d5:f7:19:45:eb:a5:45:47:93:43:
f4:de:1d:62:2c:c1:26:07:df:69:17:03:c1:ab:66:
e0:ac:f7:f0:c8:0f:6b:b1:1b:48:86:90:43:88:00:
30:c9:b0:da:a0:00:80:f2:a9:58:b5:f6:e8:9b:5d:
8e:cb:f4:42:c8:66:63:06:6d:6e:e1:66:1f:a9:98:
0e:5f:1f:6c:f2:22:3a:74:cf:a4:05:0e:de:6d:9d:
3d:f6:71:8d:8b:c7:74:26:dd:65:b8:c7:40:2c:cb:
01:c4:e7:77:73:ed:63:f4:ec:74:de:e5:3c:94:ad:
18:62:a3:17:6b:ab:d8:c2:85:1e:ae:ec:6c:92:82:
18:09:23:e9:4e:cd:8a:53:77:d8:a2:2c:64:1e:f1:
e3:71:13:f5:f0:00:3a:3a:c1:28:80:bd:36:f0:2a:
ec:fc:1c:04:f3:ad:1b:87:63:77:7f:9f:93:48:b4:
bf:58:14:b3:9d:b5:e1:92:79:80:99:70:9b:3d:16:
32:bd:44:d0:17:56:16:a7:36:fc:37:8c:30:80:a8:
41:f9:f4:af:f2:f3:a0:75:3f:76:74:6e:15:c1:cf:
ca:2c:90:61:77:08:55:5c:1f:86:6a:61:4a:18:ff:
98:81:2c:26:82:af:84:d2:74:93:ab:11:ec:65:a6:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:36:F5:F6:A1:F9:07:80:27:5D:9B:C2:1B:21:AB:47:41:6C:96:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
X509v3 Authority Key Identifier:
keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.8.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:d8:0d:89:68:4b:5e:d9:87:fa:ff:35:c5:31:a9:25:b2:e7:
a0:e9:a5:11:71:94:3f:6e:f5:1b:b3:b8:d6:12:c6:5c:16:21:
5e:04:4a:26:f4:d6:ee:d8:9c:d1:6c:7d:af:b6:33:82:67:06:
ea:a6:a3:91:07:a0:f4:4d:9d:c8:18:82:10:20:75:4d:67:d3:
e6:47:ba:5f:1f:33:34:0f:c0:21:9f:88:32:c1:99:17:01:50:
fb:bb:dd:b8:b1:e4:33:26:bd:47:ac:fb:0b:91:06:59:5a:c4:
3d:bb:aa:64:58:0a:e3:22:4f:af:c3:51:d1:9f:f9:2b:62:ca:
fb:df:33:28:bb:7b:5d:5f:b6:f5:48:0c:b7:30:f3:68:1d:67:
04:b7:05:f7:2a:cf:cc:b3:4d:83:81:52:99:81:f5:50:93:bb:
c1:c8:8f:ad:13:dd:cc:f2:ef:af:f8:54:b9:cb:db:68:a9:82:
e5:78:84:94:ac:ff:6e:04:a7:00:7a:c3:6e:d8:e0:ac:58:31:
78:4a:9b:87:cf:3a:f7:19:3f:a6:e3:99:ea:c0:a3:73:28:72:
4f:db:a7:b3:6b:f6:e0:8c:f9:e4:5b:73:01:7e:3e:5b:5b:85:
f1:04:88:be:68:47:d9:31:5d:43:1c:7f:2e:a2:2c:07:99:00:
85:fb:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:09 2026 by rpki-client