
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ef08fe9c-e77e-320e-a4e6-a4faacafa7fe.roa
File: ef08fe9c-e77e-320e-a4e6-a4faacafa7fe.roa (raw, json)
Hash identifier: XQ2AuJu0rpHWMNxfqtH9YPSl0cwbI7JUpP7t4wH0zKQ=
Subject key identifier: 4D:97:93:06:55:19:B4:65:4B:B2:56:85:55:B1:70:2B:41:46:F1:A9
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328584EA78877643B2995E176A2B2A0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ef08fe9c-e77e-320e-a4e6-a4faacafa7fe.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30148
IP address blocks: 72.167.12.0/22 maxlen: 24
208.109.0.0/21 maxlen: 24
208.109.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:77:64:3b:29:95:e1:76:a2:b2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=c7951777-1176-4e01-a838-5c066fe4ecf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:d9:f6:7e:42:ed:5a:ec:50:48:7c:74:31:
a4:ba:68:e0:59:46:21:c2:95:30:67:12:c7:0b:8f:
e7:74:d7:35:ff:89:81:8e:7d:73:c8:e2:ce:40:78:
44:7b:38:dd:6a:00:e1:53:43:58:9c:b6:22:f8:70:
ea:37:d4:0a:43:b0:09:18:9d:54:3f:d5:d0:3a:f8:
3b:d8:0c:91:59:4f:d6:b3:1d:a0:62:46:dd:d6:76:
a4:ec:2d:ec:e4:52:6b:15:9e:35:85:51:86:16:9a:
35:05:31:cc:50:b9:36:d7:c7:93:e8:d6:12:e0:5a:
82:f9:66:71:66:73:82:d1:2b:37:5e:3b:bd:fc:30:
07:1b:62:d2:c6:e7:c8:d9:31:04:34:72:ae:09:d0:
74:db:b9:d0:2a:8f:6d:91:77:ba:af:76:da:f6:c4:
d8:d8:87:97:13:79:2b:05:f0:c0:ff:ff:65:ec:7a:
c5:89:bb:07:7f:1b:ce:b7:5c:18:31:f7:f4:aa:9f:
74:41:ab:eb:2c:67:1a:6a:10:f9:65:8d:5f:94:bd:
a6:f1:93:49:fd:48:ee:73:7d:b8:5f:9b:c2:8b:bc:
74:ec:e7:c0:f9:c1:3f:48:6d:11:22:00:85:76:3c:
7c:f7:a6:30:9f:e8:e2:08:cd:3d:41:ee:23:17:3d:
10:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:97:93:06:55:19:B4:65:4B:B2:56:85:55:B1:70:2B:41:46:F1:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ef08fe9c-e77e-320e-a4e6-a4faacafa7fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.167.12.0/22
208.109.0.0/21
208.109.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:d2:0b:1a:1d:7e:10:e0:3b:d7:c7:1e:7a:89:4a:81:98:59:
82:dd:f7:d9:89:80:58:1a:8a:2e:35:f4:c4:69:8e:ef:1a:5e:
c2:3d:8d:21:4a:ac:4b:56:2e:b4:aa:57:63:73:c5:e7:85:60:
d0:18:5a:d1:7d:74:22:f7:14:45:af:dc:b0:6d:5e:d0:b5:51:
04:22:82:27:6f:b2:d5:db:44:89:15:99:1a:f0:8c:72:62:c3:
d0:15:8d:19:2c:25:e9:87:04:71:b2:0e:cc:02:e9:ca:0b:49:
a6:7d:33:bd:ee:b1:d5:23:4d:cc:20:02:45:3a:f9:ee:0f:7d:
cb:5c:14:64:c8:c6:85:ae:eb:f0:34:81:cf:be:15:d3:c6:ed:
82:f8:ab:ae:4e:c4:d6:a8:3c:bc:d4:bb:ea:2c:6e:38:31:cb:
77:5d:7d:42:9d:b1:de:90:df:49:94:01:b8:e6:e4:03:cb:1a:
e5:84:3d:bb:88:41:06:d6:21:a4:05:b6:fa:56:ad:78:f0:e1:
e0:dd:bd:05:62:95:08:c5:61:46:86:07:c3:32:d7:ce:1b:d7:
5a:fd:8b:d4:c4:5c:4f:04:36:79:57:ce:83:51:a0:76:18:d6:
94:96:3f:1e:8c:30:e9:1d:6f:9c:84:69:91:35:3d:9f:a3:21:
d7:c3:ca:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:16:58 2026 by rpki-client