
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa
File: 7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa (raw, json)
Hash identifier: jIeFhSnw4/8y4p4Pf8eegr8o7+Zkek7eP/fwjX2WfJU=
Subject key identifier: CF:C3:88:F8:C2:7B:7E:59:FE:4C:4F:A1:B0:35:CB:82:15:4B:0B:88
Certificate issuer: /CN=db859a2a-df82-4532-a984-71176499699e
Certificate serial: 010D0C9F4328584D6EDA660DE41AA83E44E5AE00
Authority key identifier: FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa
Signing time: Wed 08 Apr 2026 01:00:24 +0000
ROA not before: Wed 08 Apr 2026 01:00:24 +0000
ROA not after: Tue 07 Jul 2026 01:00:24 +0000
asID: 16509
IP address blocks: 208.83.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6e:da:66:0d:e4:1a:a8:3e:44:e5:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db859a2a-df82-4532-a984-71176499699e
Validity
Not Before: Apr 8 01:00:24 2026 GMT
Not After : Jul 7 01:00:24 2026 GMT
Subject: CN=067f452f-138d-4981-bc08-f55243ef0ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f0:cf:35:b9:8c:d4:d6:bb:b9:7a:f1:99:64:
a1:70:f5:3f:ba:54:dd:8d:7b:08:1f:9e:be:a8:7a:
0f:5e:73:e8:6d:36:3d:90:78:31:f2:0a:b8:da:3e:
d3:b1:15:78:71:5d:3c:81:08:ce:41:73:83:4a:2f:
57:47:c9:d4:ac:dd:ea:e0:4d:93:8d:4d:0b:7c:c5:
af:64:b3:17:a4:9a:27:32:05:ba:76:0d:cc:35:83:
b5:4c:e6:26:f6:22:30:bb:2b:8f:69:db:52:c4:46:
cd:09:6d:0c:41:ad:43:34:a1:90:31:a2:d1:1a:c5:
49:9d:fa:93:73:51:9c:02:58:5e:fa:0d:e2:b7:f9:
b1:7a:87:23:f6:13:e0:f3:48:db:3e:fe:58:b1:e4:
52:c1:d9:bc:2f:d1:7d:70:ea:80:2b:fe:23:13:8a:
e7:00:82:ae:2d:41:34:87:23:ab:f0:59:7e:1d:7f:
3c:99:dc:9c:58:03:bb:46:2e:5b:26:7b:a4:f7:0b:
27:d4:2d:3d:8e:6a:2a:3d:9b:b7:b3:be:63:ad:59:
4b:8f:66:57:64:cb:23:47:db:d5:81:2e:8d:cd:14:
8f:3c:73:3e:94:36:c9:a0:30:29:a1:0d:c3:42:e0:
93:17:0d:5e:d0:06:52:45:cd:e9:7f:e9:2d:94:d4:
4c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C3:88:F8:C2:7B:7E:59:FE:4C:4F:A1:B0:35:CB:82:15:4B:0B:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl
X509v3 Authority Key Identifier:
keyid:FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer
sbgp-ipAddrBlock: critical
IPv4:
208.83.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:af:38:37:0c:d2:0b:5e:57:3c:78:6b:48:93:c9:3b:0f:24:
e7:da:90:14:17:c3:fd:06:eb:76:32:dd:39:5a:71:01:5a:ee:
74:19:99:90:fb:aa:f4:86:94:36:96:89:d0:3e:d1:86:c6:0e:
e0:2f:cf:05:9b:37:61:c5:c0:ee:9c:52:a1:f6:91:c2:0a:b4:
f7:be:fc:bf:b0:8b:51:aa:a1:ed:ca:ae:cd:2b:5f:3e:e2:98:
1a:13:22:13:5b:3d:60:6e:6f:c8:34:04:c9:ae:2f:fa:18:e6:
50:66:0a:f4:0d:7e:64:73:b9:4d:29:b7:6f:06:2b:c9:67:dd:
e5:5b:ef:66:a5:75:68:64:81:f2:84:d4:01:97:3f:0e:0d:a8:
e2:0c:4d:99:ca:21:e9:bd:36:a2:5c:b8:09:49:dd:ae:47:ad:
c8:48:3c:a4:92:9a:51:6c:67:e9:c1:ee:79:c0:3b:62:6c:f5:
b7:fd:2b:ed:6f:5d:ef:63:2d:19:4e:d1:ce:5b:bc:e9:4b:b2:
8e:f8:4e:81:e6:59:7b:51:da:e1:53:86:2e:e7:33:95:4d:4d:
44:d0:5f:d0:a7:20:a3:6c:ee:77:44:33:8b:9f:66:05:b7:1a:
e4:3c:70:b1:35:32:b3:68:27:8e:67:93:97:26:8e:a0:66:cb:
94:34:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:40 2026 by rpki-client