
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa
File: 8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa (raw, json)
Hash identifier: svKuVN+BmX6J9QcS0q6zMctv4a7bniO48LIUSDCLNl8=
Subject key identifier: 9C:41:B8:B1:81:E3:3A:AE:63:02:6C:D9:F4:0A:A6:A5:90:E4:0E:5B
Certificate issuer: /CN=971a94fb-9c36-412b-ae91-2ddb520de93f
Certificate serial: 010D0C9F4328584EA78850F51ADE91F80D1F82C0
Authority key identifier: E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 400729
IP address blocks: 192.157.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:50:f5:1a:de:91:f8:0d:1f:82:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a94fb-9c36-412b-ae91-2ddb520de93f
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=6e3ec20a-ae52-468f-9c08-7d79b1f0de1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:fa:19:0f:b3:e6:ff:61:96:35:49:c8:a0:
9f:b6:2c:3e:a5:bd:e9:63:91:0a:c3:a1:a8:9f:70:
cb:54:bc:cf:c3:5c:d6:f7:fc:22:01:1e:94:85:de:
fa:7f:13:ed:8f:87:a6:53:68:8d:1e:65:7e:df:43:
7f:37:dd:75:ee:e6:b9:34:67:9b:02:2d:9a:2b:39:
55:43:47:39:fe:95:79:3b:88:ba:2e:cb:c5:4a:3b:
cc:f1:25:c9:a4:02:a1:0b:8a:75:16:ca:26:8d:50:
aa:1e:0b:6e:07:5a:93:2d:13:28:9c:3d:72:68:40:
db:b2:70:5d:b6:cf:48:e1:38:72:78:bf:65:84:ff:
aa:b8:de:d6:7d:7d:8b:c7:e6:fa:1e:08:66:b5:e4:
03:61:b4:bd:5f:b2:96:15:0d:54:cc:b8:ff:e8:a5:
79:da:71:9f:ca:2c:2d:5f:c8:10:8e:67:cc:da:b8:
02:f2:81:9d:fd:5f:6a:27:eb:fa:66:ab:a7:7a:c0:
a3:e3:a6:f9:3d:18:81:f9:53:7f:72:d3:2f:79:bb:
bf:fc:43:e0:f5:30:a2:f7:41:bf:d3:98:bd:cb:8a:
67:73:92:27:47:c5:25:e7:1b:a0:11:9f:b6:6c:7e:
3a:76:c2:48:f2:85:00:e7:ee:fc:03:d5:6a:6c:bd:
ba:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:41:B8:B1:81:E3:3A:AE:63:02:6C:D9:F4:0A:A6:A5:90:E4:0E:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl
X509v3 Authority Key Identifier:
keyid:E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.157.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:21:44:5e:4e:d2:ee:8c:34:a0:e5:1a:fb:83:14:f8:48:56:
98:c3:05:1f:3a:56:2e:2e:87:0d:49:84:67:c6:dc:58:e8:fc:
a3:c6:4f:de:81:92:2e:64:a1:a1:c7:b9:f3:22:a4:27:87:b4:
df:48:bf:1a:4b:ae:6e:54:96:5f:a1:88:04:b2:4b:9e:06:72:
ea:04:4f:43:1c:be:f2:82:c5:6a:fd:e1:4c:db:83:79:21:22:
0e:0a:9e:09:c1:8f:43:57:ed:ac:fc:de:ea:29:22:d9:b6:f7:
58:00:e7:19:09:44:5e:fa:89:c1:b8:d2:d0:7f:79:92:b7:d5:
e3:ee:f8:59:73:83:9f:6c:a3:54:a2:81:89:43:b6:ac:97:97:
f0:3f:47:80:30:de:44:ee:50:53:db:6c:fd:4b:6f:9b:43:d0:
47:02:aa:f6:a2:09:e8:05:29:bf:da:92:aa:5d:56:b6:1c:38:
3c:64:c5:87:eb:c5:27:d6:b8:e0:dd:b2:8a:63:e6:5f:8d:58:
98:fc:fc:9f:28:bd:52:74:c9:4f:94:b9:9d:8d:48:5c:35:d5:
7e:2b:50:90:a5:e0:c4:f2:95:91:6c:3f:ba:af:b3:0b:b3:e5:
91:54:b5:c1:e4:73:8c:d8:9a:18:f2:24:c5:c2:9e:a4:4b:c5:
62:2c:12:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:31:45 2026 by rpki-client