
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4e3b84ec-2b3c-3da5-8ab8-055153cff97b.roa
File: 4e3b84ec-2b3c-3da5-8ab8-055153cff97b.roa (raw, json)
Hash identifier: b5+DCVIO6TCLC06mR7uRK4IfdfIwmZLZAc592aIlG9Y=
Subject key identifier: 56:17:07:B7:4E:E5:33:B9:BD:D4:11:EF:35:E3:D9:F9:C4:64:B9:D9
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584E9EB01846FCDC3542A6195C40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4e3b84ec-2b3c-3da5-8ab8-055153cff97b.roa
Signing time: Sat 25 Jul 2026 21:00:12 +0000
ROA not before: Sat 25 Jul 2026 21:00:12 +0000
ROA not after: Fri 23 Oct 2026 21:00:12 +0000
asID: 0
IP address blocks: 204.97.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9e:b0:18:46:fc:dc:35:42:a6:19:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jul 25 21:00:12 2026 GMT
Not After : Oct 23 21:00:12 2026 GMT
Subject: CN=2f4b1f71-0bb7-4cec-b2bc-5968532c60d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:5f:18:70:9c:fd:31:4b:b4:e2:d0:96:8c:
da:39:40:02:de:36:fc:5b:32:58:f4:60:2c:41:92:
05:ad:a2:a1:7b:ff:46:a3:53:69:d9:d4:d5:66:a1:
db:bb:b5:24:ba:d7:fb:b5:5c:10:0e:8e:49:db:63:
9a:f7:35:3d:8e:fb:f9:8b:d1:ac:69:4a:91:48:9f:
9b:42:c8:32:b9:04:48:c1:8f:51:be:23:b2:b1:1f:
66:2f:fb:ca:b9:26:41:66:69:77:86:86:26:7a:ed:
e4:5f:57:e9:b5:3c:3c:1c:5a:68:25:3e:2b:f4:84:
bf:2c:7a:ed:f4:f1:5c:73:5f:e6:73:95:bf:0f:38:
eb:84:f5:94:41:62:3a:fc:73:61:68:8e:43:25:d3:
99:28:ca:40:92:78:ff:88:71:b1:f8:1d:f3:94:d3:
2a:b1:4b:33:85:db:ac:e2:32:49:86:64:0b:09:4c:
b3:9b:64:68:3e:12:df:09:63:4a:14:4d:ba:d7:82:
bf:f5:07:c1:15:54:ed:93:4a:8f:53:80:ba:57:4a:
0e:6f:0f:d2:2e:37:0e:e8:c6:d4:72:48:d4:9b:1a:
c3:a0:52:01:1f:95:7f:e1:b0:5d:3e:0f:0d:7f:13:
7d:7e:1b:5f:c1:4f:b0:01:27:52:5b:65:90:a6:7e:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:17:07:B7:4E:E5:33:B9:BD:D4:11:EF:35:E3:D9:F9:C4:64:B9:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4e3b84ec-2b3c-3da5-8ab8-055153cff97b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
204.97.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:19:4b:63:a4:29:bb:c6:e6:0b:e8:30:74:e2:cb:3d:29:57:
a1:c2:b2:d9:12:63:d2:24:50:3d:18:18:50:f0:0e:32:d9:5b:
a8:a7:6d:5d:85:26:e7:85:b8:a4:94:c6:d9:88:e2:07:88:32:
d0:40:b7:a6:83:6f:6f:17:34:da:d4:50:5f:39:ab:25:bd:f8:
bb:75:93:b5:66:43:85:b1:07:fa:e4:36:e9:f8:f5:8b:13:2a:
2f:9b:4e:fe:ff:c9:f0:8b:dc:fb:71:8e:4f:77:ff:ca:6e:73:
b0:dd:0b:4f:b3:3c:17:d9:27:29:23:cd:db:97:88:c5:a3:6c:
b9:9f:e9:3b:3d:52:b0:af:76:a4:f6:f3:22:0b:08:7a:d9:c1:
ea:b5:e3:08:42:38:b4:d1:21:6c:de:07:bc:35:ca:05:f3:15:
62:58:4d:4b:f4:68:52:82:62:0c:6b:32:1b:e5:f2:3d:95:70:
c1:6e:77:7d:75:95:4a:b8:0d:32:18:ce:99:53:c8:34:15:ad:
6b:2a:1f:23:46:09:49:4c:b2:29:10:2e:4a:eb:db:1c:bc:17:
36:0c:54:f9:4b:a7:3b:55:f2:11:55:d6:5e:d2:6b:04:e4:74:
8d:5f:60:f9:60:0f:07:1b:11:b1:25:7d:53:5f:23:a9:3f:8d:
ed:29:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:15:14 2026 by rpki-client