
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa
File: 2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa (raw, json)
Hash identifier: y7XS2sUsAi4dXkn0Id7N+br9GrtIinSslDuoiavxx5w=
Subject key identifier: E6:20:7F:21:79:60:04:E7:00:E9:02:3A:CB:95:DE:69:66:45:BE:93
Certificate issuer: /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial: 010D0C9F4328584DFBD5DE638CBFE6DF32918380
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa
Signing time: Thu 28 May 2026 13:00:12 +0000
ROA not before: Thu 28 May 2026 13:00:12 +0000
ROA not after: Wed 26 Aug 2026 13:00:12 +0000
asID: 16766
IP address blocks: 208.122.32.0/21 maxlen: 24
208.122.40.0/23 maxlen: 24
208.122.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fb:d5:de:63:8c:bf:e6:df:32:91:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
Validity
Not Before: May 28 13:00:12 2026 GMT
Not After : Aug 26 13:00:12 2026 GMT
Subject: CN=b91d0666-3888-4639-87a2-01528fc61508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:69:75:4d:13:fe:10:49:9e:b0:1c:09:52:
00:cc:40:4b:59:56:b6:c5:43:3f:68:33:3a:bb:da:
8f:25:29:92:f3:f6:aa:d4:a6:cd:66:16:d1:ef:b4:
88:fb:6b:73:a2:2d:d3:db:e1:bf:4e:89:08:ba:69:
fd:12:f8:e1:6d:0c:c8:f4:04:60:10:0e:8f:3a:aa:
d7:26:58:d7:da:a0:e7:42:3a:fa:11:85:24:58:2f:
e4:80:be:7a:61:24:60:ea:b7:2d:0e:4a:e1:0b:98:
a9:f7:04:11:69:89:0d:e6:c1:a2:f8:de:d4:be:bc:
b7:a8:02:f3:02:84:1a:bd:a8:dc:2a:7f:38:09:53:
a8:24:da:03:f9:f0:fe:ce:e5:a9:c2:37:6a:73:60:
e7:53:a1:30:08:43:e7:35:0b:46:16:6c:51:ae:4a:
d2:f5:29:d5:69:66:6a:5d:d3:e0:6b:20:cd:fc:81:
c2:17:51:a6:e8:2e:53:18:37:93:44:52:c1:1a:fc:
aa:22:b3:8e:be:81:69:d4:09:4f:35:52:25:e9:17:
f7:bf:07:ce:2c:41:ed:d9:f3:ba:ef:5b:dc:e0:0b:
de:30:2b:7e:3c:01:ab:17:7a:af:4b:a2:ae:54:79:
21:e8:63:b0:77:bd:ad:63:32:47:53:34:4f:27:99:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:20:7F:21:79:60:04:E7:00:E9:02:3A:CB:95:DE:69:66:45:BE:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
X509v3 Authority Key Identifier:
keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
sbgp-ipAddrBlock: critical
IPv4:
208.122.32.0-208.122.42.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:e5:c0:62:71:56:e8:29:d1:88:60:46:c0:26:8c:1e:c8:7b:
f5:d6:63:f5:07:5d:40:53:8a:80:27:de:6e:05:82:eb:51:dd:
54:c8:78:e7:0c:e5:d9:1f:d1:64:32:a1:03:cf:9b:99:3d:9f:
07:73:ad:8b:9d:e8:d7:7b:47:fd:43:f9:6f:cd:ba:7d:f8:28:
78:d5:bd:65:9b:3d:db:53:64:10:00:2b:71:15:49:56:72:86:
35:a3:b4:80:30:75:5f:4a:ca:37:f2:af:96:76:24:a9:9e:06:
e9:d3:e7:98:05:fc:c7:0b:e1:fa:ab:ff:79:0e:f1:82:fd:41:
89:20:01:f7:a7:8f:d3:05:0c:50:98:84:58:fc:14:09:4a:4f:
1a:08:76:9f:57:43:2b:64:04:ea:b1:8d:f9:c8:f5:61:0c:08:
43:72:e5:e2:3e:39:a0:e0:bf:c3:0d:bd:27:9f:f7:1c:fb:90:
74:90:06:58:54:43:c7:db:d2:7c:62:99:d4:6a:b2:4e:b1:ee:
85:6b:16:31:7f:d2:49:fb:c6:2f:ed:8b:22:02:df:b0:ca:90:
59:b6:d0:be:0d:ab:e9:ae:1d:4a:0c:1c:86:2f:f6:90:6d:26:
55:fd:71:6d:36:16:cb:f9:7b:4e:96:bf:ce:d0:61:1e:f3:42:
6f:2e:b8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:09:33 2026 by rpki-client