
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/0067ebcb-fc2e-3580-a5c5-d3712116833e.roa
File: 0067ebcb-fc2e-3580-a5c5-d3712116833e.roa (raw, json)
Hash identifier: M+/ScNJv2h8QBkY/tk8mSCfRqN1ITNgwytalnCT6ZQw=
Subject key identifier: 0F:F6:78:BD:91:62:23:8A:CE:89:68:99:9E:F2:BA:82:2A:0A:08:6A
Certificate issuer: /CN=23e8b687-5694-47a8-8a0b-d3828a99b77a
Certificate serial: 010D0C9F4328584EA788C75B1040DC2AC030EE40
Authority key identifier: ED:73:21:DD:47:64:1D:F3:7C:BF:2E:0A:28:35:8E:5C:32:FD:D8:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/0067ebcb-fc2e-3580-a5c5-d3712116833e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 20206
IP address blocks: 206.168.244.0/22 maxlen: 24
2607:9340::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:c7:5b:10:40:dc:2a:c0:30:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e8b687-5694-47a8-8a0b-d3828a99b77a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=5980e85f-5e14-46f6-b8f8-3d5f0275e875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:94:2b:35:1e:64:43:90:40:91:ea:9d:46:5c:
5c:5a:34:0d:46:c0:bb:bb:e0:b3:71:9f:25:0f:c7:
13:42:55:37:70:ee:0f:ae:0e:b1:d7:44:6f:c8:80:
99:e9:fe:3e:57:22:87:f2:95:46:44:9d:af:25:54:
34:e4:1e:42:a3:fd:0a:e6:c1:72:ed:0f:66:ce:1f:
01:d3:5f:fa:c9:b4:8b:ad:06:b4:e3:b8:4d:08:0d:
ef:bb:e6:7e:71:3a:a3:d6:7d:7e:2f:2c:4a:b1:a8:
e3:cd:31:3d:ed:5c:4d:e7:ee:c6:37:1c:70:4d:e4:
e9:70:8e:ff:95:02:20:c2:ab:3c:24:57:cf:dc:ab:
c9:ff:b5:58:e7:0f:67:b5:60:ba:ed:e5:e8:83:8e:
c5:64:67:53:00:9a:28:f3:0c:8b:f6:27:e2:80:7a:
06:27:98:b4:9e:f1:de:3b:1c:a7:3b:51:9a:2d:84:
46:a0:f4:d0:00:6f:23:63:07:79:3a:99:75:32:0b:
91:ef:ca:39:62:af:9c:b0:ae:24:05:fc:37:6a:27:
7c:3b:6a:0f:d8:48:ec:b6:94:91:e0:03:75:88:30:
2f:f7:d3:d3:1c:61:10:f1:d0:48:5e:98:85:36:e5:
30:4b:fa:72:00:6b:d5:b9:ac:bb:21:ed:40:f6:76:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F6:78:BD:91:62:23:8A:CE:89:68:99:9E:F2:BA:82:2A:0A:08:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/0067ebcb-fc2e-3580-a5c5-d3712116833e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.crl
X509v3 Authority Key Identifier:
keyid:ED:73:21:DD:47:64:1D:F3:7C:BF:2E:0A:28:35:8E:5C:32:FD:D8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.244.0/22
IPv6:
2607:9340::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:fe:e2:93:7e:55:27:ad:ba:10:5f:3c:83:92:63:70:60:9f:
48:c7:f3:f0:b0:9c:f6:50:12:c6:8c:22:94:33:6e:21:69:f8:
ec:9b:71:69:89:1d:08:6b:54:8b:8d:0f:56:4e:26:7a:6e:40:
b9:c2:5b:f5:7a:32:f0:20:4f:a2:99:b7:7e:b4:1b:01:34:30:
28:61:00:98:ca:28:19:29:01:af:08:a8:5b:8e:94:70:a5:37:
06:dd:3c:9c:b1:19:42:97:30:63:5a:b4:4e:f7:79:9f:6b:15:
ff:d4:3c:67:d8:3f:d4:fd:32:ce:a9:18:e9:3e:9f:70:cf:69:
67:8b:42:56:e8:15:db:1e:6c:6a:fb:8e:e0:0c:f8:0e:7a:6d:
d6:33:d8:58:f8:93:58:be:50:e2:3a:6a:90:12:90:90:b5:c6:
d6:be:67:00:0c:2d:3d:69:00:1e:0b:af:4d:32:bb:16:20:f7:
44:ed:44:41:46:d7:68:06:5f:91:70:50:b2:2e:c3:a2:9c:05:
fc:28:4f:68:2c:dd:e9:79:1e:79:f6:5b:f1:8c:c7:f3:b7:73:
82:a6:cb:8f:e3:f3:8b:23:12:fc:ce:c4:db:23:bd:e1:32:db:
e6:d1:f6:bd:c2:6d:05:87:bd:e1:ae:69:73:53:ad:7c:39:e6:
d4:89:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:40 2026 by rpki-client