
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa
File: a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa (raw, json)
Hash identifier: j699mrwX6xKEgmSUpHAvEfl5sRIuygBCRMkwBBVwFvM=
Subject key identifier: 8E:53:A1:D9:CD:CD:0F:92:80:C1:AC:1E:10:9C:CA:E3:88:C2:13:69
Certificate issuer: /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Certificate serial: 010D0C9F4328584E9D4A7617543C7642B69B2940
Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa
Signing time: Sat 25 Jul 2026 09:00:11 +0000
ROA not before: Sat 25 Jul 2026 09:00:11 +0000
ROA not after: Fri 23 Oct 2026 09:00:11 +0000
asID: 27313
IP address blocks: 204.79.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9d:4a:76:17:54:3c:76:42:b6:9b:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Validity
Not Before: Jul 25 09:00:11 2026 GMT
Not After : Oct 23 09:00:11 2026 GMT
Subject: CN=6f8e8d8b-b804-4e31-a129-eeeb30a4c070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7c:0e:aa:7e:68:ed:d0:ca:08:19:05:7a:53:
40:5e:b3:8f:ce:75:4d:f9:c9:c0:04:ab:54:40:d1:
ab:b4:1d:35:45:d7:2d:d3:58:ab:5b:97:cb:3c:e3:
7b:eb:6d:64:a4:22:9d:df:48:2d:b3:f2:9d:a9:cd:
f0:fb:79:26:d4:c5:89:eb:af:86:7b:3c:ba:ba:f7:
22:1d:fa:f7:3c:a6:f7:45:09:fa:a9:9e:58:0a:e5:
5a:07:f5:b7:39:7c:5c:79:b5:03:f0:06:9c:55:64:
86:98:e3:6f:50:92:c9:82:93:de:bf:f9:39:d3:a6:
0b:dc:d1:a1:a9:cc:d6:19:4f:04:e8:2e:62:d9:2b:
90:ed:63:b9:ec:53:ac:c4:47:5e:b9:2d:c8:64:1c:
cf:a1:17:f1:81:3d:ba:90:1f:7d:9a:65:42:32:d7:
f7:d1:2f:de:f3:ad:7a:3a:0f:cd:69:94:49:03:93:
34:ef:85:85:eb:7a:71:a6:72:f9:60:0c:dd:42:30:
80:75:46:15:3d:1b:72:f5:24:0b:3a:1a:cb:ff:24:
3f:7f:37:ee:4e:7a:60:85:7e:75:af:f3:47:ae:77:
2c:03:e5:07:c5:34:48:6e:2e:8d:fa:40:9e:9b:37:
6f:05:53:b4:f0:65:df:c7:24:f5:f4:7c:f4:a7:d4:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:A1:D9:CD:CD:0F:92:80:C1:AC:1E:10:9C:CA:E3:88:C2:13:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
X509v3 Authority Key Identifier:
keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
sbgp-ipAddrBlock: critical
IPv4:
204.79.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:02:e5:29:29:9f:b2:6d:1c:d4:3d:eb:74:a7:b6:a6:b4:05:
a4:02:06:bd:f0:df:05:f8:b4:8d:a8:0f:9e:5a:42:b0:2a:1d:
de:f5:ba:cc:7f:f4:f4:8f:17:22:d3:ba:a6:24:fc:26:86:03:
8c:a4:e9:7c:01:90:be:f5:a9:87:bb:da:84:eb:61:e0:83:7c:
b8:3c:c5:a3:83:48:61:82:21:b2:9a:27:d6:f7:9d:83:4b:d9:
f2:7b:18:cb:c8:3f:be:ab:ac:47:41:a3:55:84:d8:08:83:4d:
51:89:46:f7:df:94:3a:8d:6e:d4:09:6b:9a:da:e8:5a:3b:45:
89:72:ed:0c:74:ab:d5:c2:f4:b1:24:ed:49:30:92:18:91:34:
d1:72:b0:e4:1c:23:2a:e0:ec:08:c8:50:0d:ce:68:e7:f2:e0:
34:2b:82:69:fe:e4:28:a1:fc:fc:12:92:17:54:97:62:a9:ab:
93:11:c3:19:b2:2a:e0:f3:ea:bd:88:c8:43:89:cd:f1:fb:91:
ee:5e:c2:c0:30:10:90:8b:ad:7d:dd:1b:53:50:3e:5a:63:9e:
16:3b:cf:1a:9e:85:a2:bf:58:de:d9:63:fc:97:c9:b2:14:71:
f4:79:29:c4:e3:06:ef:85:a6:a2:82:ec:44:29:ba:61:85:e5:
7e:3f:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:16:10 2026 by rpki-client