
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecf35372-9221-37b1-818f-bf66b0bb748d.roa
File: ecf35372-9221-37b1-818f-bf66b0bb748d.roa (raw, json)
Hash identifier: xKsSiAXJfIkOQgV0sGIpA+e2HfF8H95sqt5ex6hzLPw=
Subject key identifier: A7:10:7A:DE:0C:D6:ED:A6:CD:BB:8B:8A:EF:C3:23:F0:B1:EE:EC:D6
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328584EA7A076B048361D7CB6047500
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecf35372-9221-37b1-818f-bf66b0bb748d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 36040
IP address blocks: 208.117.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a0:76:b0:48:36:1d:7c:b6:04:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=40e677c2-c573-49b8-ba72-72ec6013be03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:4b:3d:d9:08:18:86:13:41:d6:61:b8:09:
09:85:5b:e9:fe:2f:24:87:58:ea:43:b4:96:43:95:
57:3f:34:ca:53:49:f3:07:f8:cb:96:51:8a:bd:53:
1e:bf:d1:fb:ba:46:7d:99:2b:6e:a1:ca:71:08:10:
ac:48:10:33:16:65:0c:99:dc:28:2d:e9:0c:b5:2c:
10:d5:5e:97:08:b7:5b:ac:62:fb:00:a6:47:d6:6f:
bc:c9:f6:6a:3b:f0:8a:98:6d:98:58:f2:4b:c9:0a:
43:83:83:4c:0f:70:21:7e:69:ad:36:9d:74:d6:e4:
7c:10:66:42:13:ff:2b:96:42:0c:54:3e:44:3c:0e:
9b:4d:d0:b4:79:b2:af:37:7e:08:8a:8c:03:88:4f:
f1:d6:11:dc:c2:25:c4:23:12:3f:cf:0e:9e:94:9f:
6b:49:3a:b8:cf:18:30:37:1d:d8:85:b4:1a:5d:1b:
dc:7c:76:9e:fe:d7:e8:f7:56:4f:17:f6:e0:8b:6b:
09:ea:c8:6d:6e:78:78:88:b2:75:8b:63:c4:43:06:
1b:56:97:9e:9f:75:23:e7:18:69:71:9b:a5:fe:0d:
21:5b:22:d5:3b:0d:e3:e4:ec:dd:cc:f2:d7:04:e1:
d4:7d:c9:10:61:04:76:77:19:7b:31:19:15:f1:3c:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:10:7A:DE:0C:D6:ED:A6:CD:BB:8B:8A:EF:C3:23:F0:B1:EE:EC:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecf35372-9221-37b1-818f-bf66b0bb748d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:62:56:25:2d:d1:fd:08:a9:7f:cc:b9:83:5d:57:53:8d:3e:
f9:ac:49:29:4d:e6:55:48:87:05:95:fb:f7:5f:78:bc:8a:c4:
13:95:a5:d9:a7:2a:61:bd:4a:5e:66:7d:a2:d4:54:2e:94:90:
6b:8a:3c:ae:09:21:73:05:85:1a:29:fa:da:93:f0:48:e6:e7:
1c:3a:d9:b8:27:35:03:5e:ff:30:0c:a1:a3:b7:3f:25:9d:93:
4a:bb:f5:31:0f:a3:ed:a1:58:4a:74:5e:16:60:28:50:ea:5a:
b1:da:8e:50:00:b6:57:f5:aa:00:4e:eb:5c:73:a6:d7:58:49:
38:e3:2a:e9:23:f3:13:f1:b5:50:6d:b1:8e:c0:af:78:58:38:
d3:9d:c1:ba:89:3e:78:03:88:44:8b:0b:33:d1:40:97:0c:05:
97:1d:42:0b:85:82:37:29:43:03:54:3a:c0:94:4a:ac:c1:61:
aa:9b:1d:fe:b6:51:82:3d:b3:11:11:e0:8d:fc:4b:1d:f8:06:
6c:2c:9d:bb:5c:e4:e0:3f:2a:36:71:d2:98:18:bd:23:74:0f:
09:8e:27:4b:c1:6b:1a:90:20:de:bd:ce:e7:62:dd:98:c7:56:
dc:f5:f2:55:a1:f4:98:be:ba:1d:fd:c2:96:9d:25:83:c8:a1:
41:09:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:17:11 2026 by rpki-client