
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa
File: 0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa (raw, json)
Hash identifier: JYwOxEojhzREDsIddsAxq307KCyPnXFIaTVlMwHx2u0=
Subject key identifier: 7D:57:5B:0C:1B:D3:9C:80:3F:08:50:DA:17:3A:6C:7B:C5:E9:2F:BB
Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Certificate serial: 010D0C9F4328584ED001F50B0CEFA9EC237D6EC0
Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa
Signing time: Wed 12 Aug 2026 13:00:12 +0000
ROA not before: Wed 12 Aug 2026 13:00:12 +0000
ROA not after: Tue 10 Nov 2026 14:00:12 +0000
asID: 174
IP address blocks: 208.94.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d0:01:f5:0b:0c:ef:a9:ec:23:7d:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Validity
Not Before: Aug 12 13:00:12 2026 GMT
Not After : Nov 10 14:00:12 2026 GMT
Subject: CN=d67cc33a-57a0-46fd-8ff1-627f531ef77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ab:d3:97:79:a2:9a:a9:83:cc:cc:8d:3f:c0:
75:6c:e5:68:ab:25:86:70:5d:c9:5b:40:4c:6b:4a:
27:dc:53:e8:e1:6a:50:70:01:95:db:b7:88:12:58:
51:0a:12:d6:b1:f6:b9:b5:e8:70:f0:6c:a0:61:be:
a5:13:af:ec:c5:d2:0f:72:79:28:b2:b2:aa:5d:fc:
d0:77:80:ad:6f:48:a6:df:9a:c2:f4:b5:97:c3:dc:
a8:20:dd:96:c3:cc:b4:4f:a1:49:0d:ce:b8:49:79:
ae:6c:0a:ca:b4:72:2a:5e:23:e9:44:bf:cc:00:3e:
e3:4e:65:dc:70:3f:0a:f3:58:a0:97:9a:a0:94:28:
e5:e6:65:f7:a4:a3:04:5b:07:93:59:de:d4:dc:19:
f8:c8:16:9f:f0:ae:37:8d:d7:3b:2d:aa:22:1f:3e:
64:06:a3:35:02:20:14:24:5c:23:ad:d0:16:4d:2d:
f6:77:fa:0f:bf:d3:5c:d7:de:ec:3a:52:94:fa:a8:
31:f1:00:84:01:e5:b6:25:6b:59:9b:e0:38:29:d0:
32:6b:79:93:da:96:8f:f9:4f:c3:3c:74:3b:11:14:
d7:9e:d3:31:ec:55:a1:70:08:4d:80:14:42:ec:1b:
3e:fd:ad:22:a0:69:5f:f7:a1:17:86:e3:a6:0e:f3:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:57:5B:0C:1B:D3:9C:80:3F:08:50:DA:17:3A:6C:7B:C5:E9:2F:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl
X509v3 Authority Key Identifier:
keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:b2:ad:60:cd:bd:23:eb:fb:c7:b7:f7:e4:fe:1c:98:b1:7a:
ce:2d:b6:00:bc:e7:1b:0f:d1:3b:f3:e0:bd:1f:75:29:f6:6c:
13:2c:56:89:d6:da:2d:67:e9:fa:bb:6f:76:05:87:55:6f:e7:
2b:f2:39:b3:f9:44:9b:df:c9:93:2a:6b:e4:2f:07:f9:a7:3c:
83:2f:61:d7:32:bc:f0:c5:17:db:2f:e6:40:17:30:79:ad:6b:
96:62:fc:c0:fb:2a:09:1f:fb:e1:ff:07:ff:6d:09:7b:33:0f:
ae:00:4a:92:3c:ed:64:cb:81:52:b4:e2:32:2a:70:38:2e:53:
9c:19:05:74:60:d4:1e:f0:34:74:bd:2c:8e:6b:07:61:e1:a5:
ac:5d:5e:3f:4b:9f:97:52:34:13:8c:e6:c1:f1:11:af:64:bd:
5f:50:4a:ac:4a:99:49:bf:cb:1b:47:36:25:c0:95:cb:0e:15:
20:ea:7b:87:28:cf:3c:79:40:b6:e4:6a:48:31:84:3f:d5:38:
c0:8f:9e:ac:09:a7:f2:6c:9e:5d:1c:5b:6f:ae:7a:d1:5d:48:
b1:c3:63:e7:08:79:ed:1f:ef:fb:c5:73:bb:07:b0:84:fc:2b:
71:f8:07:8d:88:7e:47:2c:eb:0c:5b:74:a9:ee:01:86:ea:df:
73:8e:42:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:08:16 2026 by rpki-client