
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa
File: c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa (raw, json)
Hash identifier: tcL7h+wgXN+hbOxJZRI1hnj+hFRozt1mCHhSfygW3Bw=
Subject key identifier: 43:67:78:61:5A:AB:E7:00:6D:9B:4F:F6:3E:F0:86:FD:8E:77:CD:59
Certificate issuer: /CN=109733f6-670d-4e02-a6e2-403ebf727263
Certificate serial: 010D0C9F4328584D746FCC84BF1E3BF385722640
Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 7761
IP address blocks: 206.220.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:cc:84:bf:1e:3b:f3:85:72:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=1b322ae5-e9cd-4b31-aaec-522dd9c43d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:61:63:da:d0:46:6d:f5:c5:29:2e:ce:3c:
3b:90:b6:c8:96:3a:3a:17:fb:14:1c:91:dc:e8:c3:
f5:50:47:6e:c1:62:00:01:ed:89:37:d0:2d:0c:df:
88:8d:86:06:b1:a3:ed:ee:ff:c8:82:27:15:f3:c9:
43:92:f5:41:85:6c:68:c5:76:dd:4d:2f:9e:b3:ba:
a3:a0:20:de:fa:95:14:db:67:40:07:a6:12:88:62:
35:96:34:70:21:1c:ca:3a:45:c2:2b:ff:f7:63:cc:
86:21:b3:f9:03:3c:21:88:dd:b4:03:6e:a5:80:cc:
76:ea:c1:d4:db:0e:0f:e9:79:63:f8:d8:71:34:41:
24:c8:7c:70:0b:6d:64:e5:49:e7:41:87:8b:c6:83:
51:67:e8:9b:94:04:be:dd:6a:8f:d8:6f:3b:8c:ef:
d1:92:54:37:73:88:cd:ed:5c:d9:2d:cb:56:ff:82:
de:9b:0c:d4:a9:b5:35:33:a1:6f:4f:1a:23:df:5d:
6e:47:11:46:cb:d0:79:9b:f4:35:18:bc:af:07:fe:
b4:17:20:9b:4a:ab:b1:a6:75:45:fd:e1:28:65:38:
77:a1:b6:c4:ec:ed:f7:c5:46:fc:88:f0:04:5e:f4:
84:45:2e:5e:27:94:3e:f8:89:0f:28:07:8c:10:66:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:67:78:61:5A:AB:E7:00:6D:9B:4F:F6:3E:F0:86:FD:8E:77:CD:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl
X509v3 Authority Key Identifier:
keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
sbgp-ipAddrBlock: critical
IPv4:
206.220.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:2a:9b:e0:c3:d2:5f:34:71:55:3a:df:d2:15:54:b8:44:aa:
25:7e:a9:33:1e:78:c7:c3:b8:92:bb:1a:5a:a1:a4:7e:38:ad:
e5:3d:76:12:04:91:5c:35:38:fa:3c:2d:74:fe:47:51:ba:df:
e7:00:ad:51:ee:35:af:f5:94:7b:26:8c:07:df:0f:a3:27:79:
7e:c6:31:a0:2a:0d:d9:6c:1f:99:c2:cf:d1:db:b0:56:36:27:
27:f9:30:c0:64:1d:77:24:26:78:b6:f3:01:c0:ea:ca:ab:bb:
2d:50:25:19:ca:62:81:5a:e0:85:f1:ef:d0:53:79:0b:8a:7a:
bb:db:e6:f4:23:3c:c8:9a:08:8d:89:91:5c:a5:29:c1:85:54:
e9:3c:52:6c:42:c8:8f:b1:75:bd:99:50:14:37:7f:16:f3:1a:
a6:16:c5:b5:68:f2:0b:7a:2d:7b:d1:a9:09:da:f9:de:6d:ac:
4e:39:48:d6:ee:61:ba:95:25:9e:1c:63:4a:1c:fc:ac:8f:07:
4e:85:f5:c7:6b:ef:81:89:81:eb:9b:08:69:e1:c4:01:d2:6a:
e4:b5:90:ab:8c:ef:41:91:a4:73:73:95:b6:f6:ba:5e:74:70:
18:03:3f:32:fe:28:c8:89:21:b2:59:b3:50:ea:84:eb:89:32:
5d:f3:d7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:05:37 2026 by rpki-client