
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/e09ae028-1896-3d05-a63e-8637d4dbb674.roa
File: e09ae028-1896-3d05-a63e-8637d4dbb674.roa (raw, json)
Hash identifier: wjH9iqmrneqLMHYP1uPfgOWwj1Qs/d62DBERZCpHVmk=
Subject key identifier: 87:12:2E:DA:6B:0E:E9:4A:28:6C:53:3D:C1:17:7C:7A:1F:22:0A:D9
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584EA2DFBF7CC59E27C98ACB3840
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/e09ae028-1896-3d05-a63e-8637d4dbb674.roa
Signing time: Mon 27 Jul 2026 09:00:12 +0000
ROA not before: Mon 27 Jul 2026 09:00:12 +0000
ROA not after: Sun 25 Oct 2026 09:00:12 +0000
asID: 4540
IP address blocks: 135.136.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a2:df:bf:7c:c5:9e:27:c9:8a:cb:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jul 27 09:00:12 2026 GMT
Not After : Oct 25 09:00:12 2026 GMT
Subject: CN=a3b867cc-10a6-499b-8852-47d5145d8cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:7e:3e:3a:0d:d0:4c:f2:82:7d:5a:40:8d:
b8:9f:2d:c6:bc:67:37:15:fd:0e:28:c6:f9:67:d6:
9d:53:90:27:b0:47:e3:dd:5f:cd:0f:62:a6:7e:12:
58:e6:50:ad:f5:05:1c:aa:42:ef:91:a5:02:22:a1:
c2:82:1b:a0:dd:c7:e9:8e:3f:7d:f2:10:c5:41:64:
25:34:42:cc:17:9c:db:2f:a9:af:6e:3e:e0:b9:38:
ae:f9:5f:99:a3:cd:b8:9e:38:ff:72:d5:38:bd:20:
9f:e7:c3:4e:6a:66:68:10:18:6c:c1:f0:7e:c7:d4:
2c:70:b0:9c:6f:ac:70:23:8c:2c:cb:cb:ce:cc:b4:
31:c3:f0:2c:f2:5e:55:00:08:26:3f:88:55:ef:88:
c9:90:26:26:bc:cd:55:f4:cb:69:9b:1c:64:0e:93:
87:c6:a3:d4:8f:5d:67:de:bf:fc:9b:05:ed:8f:02:
36:c5:db:d2:79:0a:40:6b:00:1d:cc:1c:9e:d5:72:
33:f0:eb:58:dc:8f:11:b2:bd:49:34:2b:11:00:58:
bd:d0:f6:49:9f:a0:5c:ff:fc:20:d7:3f:54:b9:52:
cf:23:e2:26:05:cd:cd:76:52:42:a8:bb:48:64:73:
a0:0a:86:a4:4c:c1:c9:ac:1f:78:bc:33:3c:f3:75:
ec:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:12:2E:DA:6B:0E:E9:4A:28:6C:53:3D:C1:17:7C:7A:1F:22:0A:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/e09ae028-1896-3d05-a63e-8637d4dbb674.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
135.136.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:80:1a:1e:e0:ce:81:c8:bc:1a:5e:7a:18:ed:29:80:7e:22:
13:64:cb:03:5f:ee:58:5a:07:18:dc:a6:6c:16:5a:cd:18:e0:
0e:0d:a4:6b:b6:a1:74:1f:02:dd:62:b4:1b:90:14:10:81:58:
48:36:ca:57:50:89:ac:84:15:e1:dc:19:1d:cc:b8:5a:72:58:
48:d0:2c:3f:4c:33:07:d6:1c:6c:87:1c:6f:a5:c4:41:52:cc:
5c:f9:49:53:35:51:26:a7:9b:50:d9:6c:65:d8:92:10:d0:10:
35:66:4c:75:3b:98:e0:03:fd:ad:ff:15:b0:05:10:32:8d:5c:
a5:d4:66:41:67:68:a3:25:a4:fd:90:30:25:b8:0c:8b:11:83:
24:7a:89:db:87:9f:3c:3a:99:2b:90:3b:3d:1f:b8:8e:fc:bf:
84:d9:10:97:c5:6e:4e:c6:b7:10:76:58:46:eb:88:14:3c:12:
d5:e5:0d:33:2e:9a:83:15:8a:e6:1d:fd:40:64:a0:54:86:bd:
38:c1:b6:fe:10:bd:e0:8f:9b:e0:10:3b:72:aa:10:e1:d6:7d:
17:03:92:06:82:18:96:50:46:8e:36:da:37:44:a9:28:18:3b:
a2:e9:11:9d:b8:10:d9:3a:06:4c:ea:97:81:e5:c8:48:aa:b3:
4c:1a:5d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:23 2026 by rpki-client