
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f05059d-6f76-31c3-9d62-2ba81924d871.roa
File: 4f05059d-6f76-31c3-9d62-2ba81924d871.roa (raw, json)
Hash identifier: 8RLV+w7kgrl2Wx9rQK1YQaEoENw5nGWcqClKFynEy7s=
Subject key identifier: 1E:CB:EE:A0:F3:A7:66:27:E8:01:94:04:4F:F8:B5:A4:76:3C:35:D0
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584EA0158557832AE842E7048E80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f05059d-6f76-31c3-9d62-2ba81924d871.roa
Signing time: Sun 26 Jul 2026 09:00:12 +0000
ROA not before: Sun 26 Jul 2026 09:00:12 +0000
ROA not after: Sat 24 Oct 2026 09:00:12 +0000
asID: 401783
IP address blocks: 209.101.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a0:15:85:57:83:2a:e8:42:e7:04:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jul 26 09:00:12 2026 GMT
Not After : Oct 24 09:00:12 2026 GMT
Subject: CN=bb39f3a2-445d-43ca-9210-582d2fd1915c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:23:8b:88:d1:e3:f8:74:ae:e7:8d:fb:50:
03:67:b7:ba:ca:e8:46:fb:f6:c0:e7:4a:f2:31:8c:
56:34:06:20:b0:06:96:05:0b:18:a6:a6:f9:ad:59:
35:cf:95:9b:2a:07:54:eb:51:76:22:df:43:b0:e4:
85:18:53:d3:85:d8:b0:01:43:3b:4e:e0:ad:fe:b0:
37:22:cc:1e:f9:51:62:9c:22:67:b8:61:e9:53:3e:
a2:c7:21:82:ea:a8:ca:a8:b3:51:b9:c0:60:c2:70:
c6:65:bf:af:d7:d1:8f:9a:07:90:97:85:b8:ba:df:
ee:56:f8:c7:e9:5f:c1:ed:4f:d0:c0:9b:0b:26:19:
3c:09:da:2f:16:96:b0:38:b6:4e:68:eb:06:c6:dd:
9e:3d:e8:8d:82:cc:f9:a8:fa:be:db:44:04:97:a1:
43:68:6c:61:f7:d8:44:83:35:65:4b:54:1d:dc:d5:
92:09:a0:05:06:ed:14:53:03:66:e0:06:41:c2:55:
84:90:5e:36:48:92:db:3b:a1:60:fd:87:12:df:ba:
a1:58:24:bf:6a:1d:54:36:1d:01:80:4d:cf:1c:e3:
2d:82:98:a5:16:25:02:28:9f:be:50:d6:67:f7:79:
02:95:80:46:a8:80:de:0d:13:58:d2:80:12:4e:61:
2d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CB:EE:A0:F3:A7:66:27:E8:01:94:04:4F:F8:B5:A4:76:3C:35:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f05059d-6f76-31c3-9d62-2ba81924d871.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
209.101.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:16:9e:54:d5:7a:26:8c:ef:7b:59:58:af:c8:17:89:1e:c6:
e0:45:83:c8:3a:0d:b9:87:d2:35:5a:c0:f5:02:7c:30:37:b0:
52:67:12:e5:38:d5:0c:67:61:f2:56:b7:ee:0b:77:ee:58:f2:
65:f4:62:33:48:87:85:19:87:43:04:69:39:f9:fe:8f:9d:70:
e9:3a:4b:cf:03:c2:8b:85:40:d4:71:d3:57:f6:21:e9:d4:61:
48:bf:6d:be:2e:19:d0:7a:5e:97:64:38:78:f7:f9:29:a0:e4:
68:48:b2:20:32:39:fc:ad:e1:29:df:d8:1b:57:a7:86:bb:fa:
6d:d0:3c:22:be:4d:8c:61:9f:ff:51:b3:f1:c7:6e:24:98:3f:
07:44:00:eb:34:c9:08:18:c7:96:1f:81:08:4c:1f:19:e8:fe:
11:2d:42:a3:94:0a:1a:7e:69:25:5c:29:9e:59:b1:79:58:6c:
f2:23:59:68:c4:b6:4b:ad:4c:88:2a:74:66:23:bd:21:70:61:
25:81:34:7f:4b:38:68:95:3e:01:4b:67:43:ad:e2:3b:c7:f5:
68:de:dd:4e:76:6b:be:bd:9c:74:2c:17:bb:68:ff:aa:2f:ff:
e1:96:93:48:a8:1b:e0:7a:7a:4e:e3:96:b3:b7:3a:cc:17:87:
81:95:23:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:44:37 2026 by rpki-client