
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa
File: 942ec425-2259-3cd4-97f1-f7efbcb4f829.roa (raw, json)
Hash identifier: QFGj0gAGumWNlux5h29nBeGqI4KvNqm8x/Qe5hePTC0=
Subject key identifier: 7F:A8:B1:D0:13:F1:3E:C2:1B:A0:13:E3:B5:0A:FE:DE:C1:2E:32:B4
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584E9D4A73C4AFD98E5AE0B42D80
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa
Signing time: Sat 25 Jul 2026 09:00:11 +0000
ROA not before: Sat 25 Jul 2026 09:00:11 +0000
ROA not after: Fri 23 Oct 2026 09:00:11 +0000
asID: 393249
IP address blocks: 128.189.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9d:4a:73:c4:af:d9:8e:5a:e0:b4:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jul 25 09:00:11 2026 GMT
Not After : Oct 23 09:00:11 2026 GMT
Subject: CN=2ea3dc79-7c99-41d7-beac-5a5c46891230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:1d:2d:91:d8:75:ed:09:a7:26:4c:b1:af:
2f:88:25:83:c2:dc:a0:29:0d:69:bf:92:32:c6:a2:
e9:ec:be:c9:f4:a4:b1:90:d6:93:ec:7b:e1:92:59:
53:a1:3a:e9:fe:ee:03:ea:5a:59:6b:af:03:75:8c:
e8:9b:d2:2c:37:29:0e:0b:a4:ba:d8:53:ef:2c:7f:
d6:27:6a:c1:f1:85:29:4a:a1:0d:c5:01:62:64:a6:
46:fe:17:e0:ed:5d:32:e3:2e:a1:2f:20:dc:07:04:
74:d4:1c:37:30:2b:d1:d2:f8:dc:76:6a:e1:88:4b:
01:83:8c:8b:a3:a7:35:c1:3f:02:fe:c8:ae:1f:e5:
d9:ee:0c:04:97:71:6c:b2:d7:e6:d2:b1:2f:39:8b:
ab:0b:f3:55:14:85:52:91:9e:6b:3a:ee:a6:88:7c:
48:bd:60:49:e0:34:d1:b7:c2:2a:77:68:49:de:93:
40:67:d3:bd:0a:34:2f:97:64:61:d3:38:0a:5c:36:
48:70:3f:fc:b1:ec:6c:98:a2:91:25:17:e3:d6:22:
76:f3:8d:79:27:5b:e2:12:ea:c7:c3:e9:bd:86:24:
0b:c9:86:3c:d3:b7:69:32:71:e3:42:2e:19:6b:f7:
55:cf:70:06:72:23:66:b4:7a:7b:37:6d:fc:03:4d:
b3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A8:B1:D0:13:F1:3E:C2:1B:A0:13:E3:B5:0A:FE:DE:C1:2E:32:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
128.189.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:d7:65:dd:93:0d:f4:26:2a:53:fd:8f:19:3f:74:bd:ab:90:
cd:25:20:e1:ed:b7:1e:79:67:55:e0:e4:2a:e0:a4:f4:02:74:
60:cb:07:67:fe:24:fd:ee:6e:7b:f4:47:91:b8:bb:22:f0:26:
e1:ae:38:46:68:54:f8:76:d3:81:b0:00:51:bc:87:41:27:22:
c1:b5:c8:00:17:56:90:52:51:aa:ef:48:3b:06:01:ee:1a:33:
91:00:71:f0:9c:29:c7:d6:f2:b4:1a:ff:6b:20:36:0f:1a:6f:
f5:d8:c4:05:b0:13:58:59:02:68:ad:79:da:23:3b:ac:52:13:
35:25:5b:0a:c4:2b:e0:06:03:89:d3:3f:c4:46:df:10:b2:23:
91:68:62:39:ba:35:02:e2:95:ae:ab:69:c6:70:30:68:1e:67:
90:81:3f:d4:c0:1b:cb:1c:c1:b9:fe:5e:55:e2:4e:e7:c2:ce:
ef:cd:de:1c:5d:f7:0d:f9:fa:79:86:52:19:19:49:c6:04:76:
a0:c8:0b:63:b0:70:d5:b9:05:94:d3:e1:7a:d1:7e:ec:65:a7:
4a:d8:29:d0:0c:93:73:ee:6d:2b:2a:34:c5:8e:73:e8:c1:74:
5b:ae:95:d1:09:12:68:d5:26:f0:89:fa:38:8a:7e:72:43:19:
83:30:04:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSnPEr9mOWuC0LYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
MmVhM2RjNzktN2M5OS00MWQ3LWJlYWMtNWE1YzQ2ODkxMjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9odLZHYde0JpyZMsa8viCWDwtygKQ1pv5Iy
xqLp7L7J9KSxkNaT7HvhkllToTrp/u4D6lpZa68DdYzom9IsNykOC6S62FPvLH/W
J2rB8YUpSqENxQFiZKZG/hfg7V0y4y6hLyDcBwR01Bw3MCvR0vjcdmrhiEsBg4yL
o6c1wT8C/siuH+XZ7gwEl3Fsstfm0rEvOYurC/NVFIVSkZ5rOu6miHxIvWBJ4DTR
t8Iqd2hJ3pNAZ9O9CjQvl2Rh0zgKXDZIcD/8sexsmKKRJRfj1iJ28415J1viEurH
w+m9hiQLyYY807dpMnHjQi4Za/dVz3AGciNmtHp7N238A02zdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+osdAT8T7CG6AT47UK/t7BLjK0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvOTQyZWM0MjUtMjI1OS0z
Y2Q0LTk3ZjEtZjdlZmJjYjRmODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgL2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILXZd2TDfQmKlP9jxk/dL2rkM0lIOHttx55Z1Xg5CrgpPQCdGDLB2f+
JP3ubnv0R5G4uyLwJuGuOEZoVPh204GwAFG8h0EnIsG1yAAXVpBSUarvSDsGAe4a
M5EAcfCcKcfW8rQa/2sgNg8ab/XYxAWwE1hZAmitedojO6xSEzUlWwrEK+AGA4nT
P8RG3xCyI5FoYjm6NQLila6racZwMGgeZ5CBP9TAG8scwbn+XlXiTufCzu/N3hxd
9w35+nmGUhkZScYEdqDIC2OwcNW5BZTT4XrRfuxlp0rYKdAMk3PubSsqNMWOc+jB
dFuuldEJEmjVJvCJ+jiKfnJDGYMwBMI=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:43:44 2026 by rpki-client