
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/625be0c0-475e-3286-a030-2b66e8ea5ada.roa
File: 625be0c0-475e-3286-a030-2b66e8ea5ada.roa (raw, json)
Hash identifier: wqoJf1pHKujWDLilkvaySrRJZifKpMZfVISWvL9yAa4=
Subject key identifier: B6:41:C8:EB:57:E6:18:F9:FB:CC:4F:E9:8B:60:05:7E:74:AD:57:3D
Certificate issuer: /CN=0a684002-9100-46b0-8a9b-64ee2e7bda6a
Certificate serial: 010D0C9F4328584EA7908C47B1804F7BB7DC72F2
Authority key identifier: B9:83:6E:9B:8D:E6:6D:0F:B6:D3:03:46:0B:31:28:21:E3:FE:33:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/625be0c0-475e-3286-a030-2b66e8ea5ada.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 40764
IP address blocks: 208.89.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:90:8c:47:b1:80:4f:7b:b7:dc:72:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a684002-9100-46b0-8a9b-64ee2e7bda6a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=82f70768-c5ea-4d5f-a1e3-496962542c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:a2:f9:d1:30:be:df:75:51:10:b2:7c:26:
63:81:c1:18:d3:70:20:5b:c2:0f:23:62:6a:52:b2:
9c:0a:ac:38:c4:f4:88:ad:10:14:24:c1:d2:74:7e:
ef:01:b4:7e:bc:8b:f8:5d:5b:06:fc:a1:53:bc:a1:
21:56:24:c9:75:6c:57:a1:fd:3c:96:b5:52:ba:f8:
8d:31:d9:f3:fa:8b:15:17:90:18:46:8f:05:9c:40:
5c:f0:6e:9f:2b:fa:55:0e:d3:d8:97:77:86:30:4c:
6d:29:82:c6:ee:00:3c:8e:69:f1:30:0a:60:26:d7:
fe:10:11:f8:d3:2d:ee:43:8e:95:a1:37:51:ae:b3:
d7:38:13:69:20:79:a8:87:e7:54:85:da:2d:87:ef:
0a:a0:d5:11:fc:c0:a3:69:34:75:53:be:ca:6a:43:
7c:84:59:19:a4:d0:7f:23:fa:0a:ca:24:a0:1e:55:
2f:80:9e:97:ad:97:dc:77:6b:da:98:29:92:3d:5b:
0a:9c:e6:55:97:05:74:e3:6a:26:6f:99:17:41:71:
29:a3:cf:a9:d6:d8:68:06:95:88:6d:54:51:a7:5b:
9f:1b:a6:6b:88:15:84:08:b1:6a:56:98:76:d4:38:
bc:35:7b:ce:8b:c9:0d:1e:a2:f3:59:70:53:dc:f8:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:41:C8:EB:57:E6:18:F9:FB:CC:4F:E9:8B:60:05:7E:74:AD:57:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/625be0c0-475e-3286-a030-2b66e8ea5ada.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.crl
X509v3 Authority Key Identifier:
keyid:B9:83:6E:9B:8D:E6:6D:0F:B6:D3:03:46:0B:31:28:21:E3:FE:33:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:4c:78:3a:71:12:77:a8:09:2e:cd:cb:57:82:c1:ce:65:97:
fa:db:62:50:3b:8e:03:93:2a:bd:db:ca:e8:b5:e3:23:64:f8:
94:0d:09:91:ea:0c:52:a4:f2:55:17:bb:3c:5a:bb:c7:52:69:
03:ec:93:93:1a:a3:7f:c5:c8:83:e0:ab:cb:70:cf:46:17:2d:
c8:eb:c0:2d:04:38:fd:6d:e4:b3:3c:24:12:1d:4d:c9:1c:cb:
9d:ef:5d:5e:00:1c:b5:41:56:4e:e4:69:91:9c:0a:02:a4:75:
71:55:7c:be:09:21:84:cb:16:1b:aa:c3:c0:1d:08:31:ac:8b:
24:01:f2:40:66:73:c1:48:ed:80:b7:7a:3a:e4:dd:de:da:d1:
dd:fa:3f:0e:ee:91:5b:87:31:46:2d:c9:2b:c4:66:40:ff:62:
be:99:5d:4d:d0:0d:a8:ce:32:7c:47:24:ad:08:84:e6:ad:f5:
80:99:a3:3c:77:b2:d1:ec:23:8c:3a:2b:3a:33:99:d6:27:ed:
b0:d8:92:8a:9b:a4:60:e1:e3:bf:2d:0f:ec:36:77:d9:ea:29:
f9:4f:42:cf:21:80:8c:b1:3e:b0:07:7f:c7:e9:c3:a6:5b:72:
6b:dd:bd:d5:d2:6c:4a:90:79:1d:13:88:ea:a9:9b:f2:89:0a:
e0:5b:ce:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:56:46 2026 by rpki-client