
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa
File: d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa (raw, json)
Hash identifier: 2+HC1A7GIkcck0SqPb9pjqKviXK+dh05Y9rnWV4QmLs=
Subject key identifier: 1E:E3:DC:37:AF:CA:BF:EC:07:91:CD:69:2E:04:C2:0B:31:FB:87:AC
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584EA787F7F409668659583FFAF0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 23473
IP address blocks: 216.171.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:f7:f4:09:66:86:59:58:3f:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=ded2d237-abc0-4977-86fd-777c6173ddb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:d2:c3:f6:37:6f:af:0b:77:b7:91:26:93:
36:6e:89:f4:5d:f0:d8:1d:a8:5f:4b:f5:f4:57:9a:
87:da:80:db:09:d0:4e:d1:71:f7:f0:24:a6:99:d6:
42:a6:60:ed:05:50:ea:7b:dc:ed:ca:b8:ae:35:6a:
f1:2f:15:62:b7:00:06:43:d6:2a:3b:d5:d2:20:9a:
a3:1e:4e:cb:ac:2e:a6:43:84:a9:8d:fd:75:9d:52:
cd:62:25:e5:5f:c2:98:d9:0c:cd:73:56:67:53:a8:
e4:bc:74:49:0b:9d:3e:8a:7c:97:20:de:f4:3e:2d:
b9:a4:3d:99:af:e7:2f:df:b5:84:16:10:5b:12:08:
f6:b6:5e:4a:9b:44:37:a2:0c:1c:3a:9b:a3:39:f4:
c2:da:fc:d2:19:2c:8d:d3:7f:55:ac:14:c6:59:b1:
da:60:fe:74:ad:aa:b2:79:91:f5:36:6e:bd:0c:ff:
c0:09:13:42:ff:41:ef:2d:d4:92:62:54:35:33:34:
3d:e1:b6:72:e1:95:4d:2c:8b:59:e9:13:51:c1:c0:
23:33:41:32:10:22:78:c0:04:c0:aa:23:3b:8a:4a:
c8:bf:42:27:61:bb:9e:3e:67:39:ef:1e:d0:e9:bd:
56:28:b8:a5:62:66:95:c3:2b:34:c9:5c:fe:15:2e:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E3:DC:37:AF:CA:BF:EC:07:91:CD:69:2E:04:C2:0B:31:FB:87:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.171.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:e4:cb:3c:f0:0e:b1:f1:9c:ef:c6:69:27:b6:bb:2e:ef:fc:
22:78:ca:13:bf:b9:65:e1:ef:4c:02:8d:c1:f2:0d:30:ef:5f:
af:d3:63:e6:c3:64:b3:d6:a1:91:75:f9:e8:79:f8:91:b9:44:
03:6b:a9:a7:dd:d1:bf:e9:dc:ec:c3:27:c7:d7:02:e0:48:4c:
1d:d0:79:de:c4:d0:55:eb:19:e6:c2:c9:91:12:de:f6:40:82:
7d:ae:63:58:c2:72:91:2d:1f:89:13:e1:54:27:f9:7b:ee:1a:
9c:f9:74:a3:73:48:43:6d:10:dc:7b:46:d3:65:5c:91:61:df:
4d:75:2c:d4:17:3f:43:62:db:65:67:98:38:88:26:9b:9c:77:
69:65:25:e9:fe:53:5b:f5:bf:96:cb:16:ca:d8:73:c1:59:9f:
34:a7:c2:64:d2:eb:a5:ea:9d:b5:ec:c8:31:6d:6c:52:ce:43:
4b:9b:8d:59:b8:d0:5e:a9:00:81:2a:52:95:36:bf:3e:d3:70:
51:b7:e8:cc:31:ff:fd:23:a7:42:bb:52:f6:fd:03:f0:bf:42:
82:22:1a:17:06:49:a9:af:e2:69:c5:f8:0d:9c:87:b3:7c:b9:
73:2b:a5:a7:d5:87:12:c4:be:ee:f1:64:cb:ef:5f:ff:cd:35:
57:1e:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:46:05 2026 by rpki-client