
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/dfb09b85-cf08-36d7-b81f-0f42c2247693.roa
File: dfb09b85-cf08-36d7-b81f-0f42c2247693.roa (raw, json)
Hash identifier: vufH1QW+EHZ7RGTIvHOZPXhx4hbCo1VT0BguEXZHgxg=
Subject key identifier: EB:D5:CC:F9:DE:2E:46:00:34:07:C5:87:98:D6:D8:1A:0D:8A:E7:2F
Certificate issuer: /CN=14efeb6b-dc21-496a-a0be-e528a7d05944
Certificate serial: 010D0C9F4328584DF7A5E6DAD105FAFD290CFE80
Authority key identifier: 96:F2:95:2A:C9:87:B7:10:2B:5B:63:CB:83:6A:BF:F8:5C:A4:5F:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/dfb09b85-cf08-36d7-b81f-0f42c2247693.roa
Signing time: Wed 27 May 2026 01:00:14 +0000
ROA not before: Wed 27 May 2026 01:00:14 +0000
ROA not after: Tue 25 Aug 2026 01:00:14 +0000
asID: 30523
IP address blocks: 209.40.84.0/22 maxlen: 25
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/14efeb6b-dc21-496a-a0be-e528a7d05944.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/14efeb6b-dc21-496a-a0be-e528a7d05944.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f7:a5:e6:da:d1:05:fa:fd:29:0c:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14efeb6b-dc21-496a-a0be-e528a7d05944
Validity
Not Before: May 27 01:00:14 2026 GMT
Not After : Aug 25 01:00:14 2026 GMT
Subject: CN=d438bc2c-5248-46a9-b461-3165f8eba38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:ce:e1:47:28:97:51:b4:04:d0:e7:2d:f4:
f4:86:ab:1e:30:b1:11:4a:9c:cb:f6:71:cf:b0:37:
7a:90:19:1e:fb:1c:b1:02:a5:2f:46:e0:32:f7:84:
e4:42:77:fc:ad:7c:2b:4a:c7:60:d1:20:16:d7:2d:
27:37:4e:80:20:9f:8d:36:af:d5:12:69:da:89:6f:
ff:f2:40:14:72:e0:4a:af:f8:cc:72:b9:6f:31:bd:
24:e9:a9:e8:86:d5:d4:a8:d8:39:5f:dd:5d:21:b1:
38:de:96:5a:9a:78:4a:9b:0a:32:51:17:1c:02:bf:
c6:a8:35:57:eb:8d:ca:99:23:31:67:3c:f3:84:5c:
b4:87:23:16:c4:cd:63:fb:cf:bd:af:58:c6:ec:18:
f3:24:5c:f6:07:4a:1a:d9:31:6c:36:e1:cb:2b:a2:
0e:6c:0a:80:99:e8:63:eb:78:bb:02:62:15:44:fd:
9c:d0:e5:6d:c9:27:a0:70:80:4f:0e:58:55:71:63:
66:cb:c1:86:a9:c5:f4:7d:0a:3d:5a:1d:ba:40:48:
18:43:99:2d:99:27:9f:34:c9:2c:20:e5:8b:6e:00:
61:a5:07:ff:c7:cf:5e:10:19:ce:e2:17:76:58:a8:
c6:ae:ef:da:d6:cc:20:29:75:7a:99:99:28:b2:92:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D5:CC:F9:DE:2E:46:00:34:07:C5:87:98:D6:D8:1A:0D:8A:E7:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/dfb09b85-cf08-36d7-b81f-0f42c2247693.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/14efeb6b-dc21-496a-a0be-e528a7d05944.crl
X509v3 Authority Key Identifier:
keyid:96:F2:95:2A:C9:87:B7:10:2B:5B:63:CB:83:6A:BF:F8:5C:A4:5F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944.cer
sbgp-ipAddrBlock: critical
IPv4:
209.40.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:7b:9d:9b:4f:cd:57:27:bd:ca:f8:f2:db:92:13:51:60:3a:
4a:82:eb:61:75:2f:10:ef:5c:72:7b:17:e8:b9:9c:c2:5c:10:
db:b3:c4:cd:98:4d:e0:96:55:f2:a9:4d:e5:9f:84:bf:83:af:
f8:a7:da:43:a8:2e:fb:f1:f3:a1:ca:1e:be:ef:2e:37:df:73:
3e:b0:8e:e5:29:19:be:74:37:e8:9c:82:16:8f:3f:3b:06:16:
db:86:06:1a:9b:f4:99:ac:5a:dc:be:0e:1a:7f:23:77:98:af:
25:11:cc:c4:30:fe:a8:16:6a:dd:c5:c2:ea:2e:8b:5c:f9:e2:
49:ee:d3:b7:08:f8:1a:cf:61:25:a3:f1:ad:9f:b8:48:9b:6a:
de:32:4c:56:55:7a:49:93:12:68:52:c0:9e:6c:95:51:3b:3f:
0f:eb:ed:8d:f9:a9:d4:cb:50:2a:c7:72:1c:8f:bb:ac:d2:8f:
53:8b:2d:f9:ad:52:68:95:d9:e3:c9:18:1f:35:3e:c4:4e:cf:
bf:db:fa:f5:28:37:28:a1:38:de:37:be:86:fd:67:e5:19:d9:
af:da:e9:e7:ee:84:41:e7:42:2d:81:8d:61:55:ce:a3:16:db:
24:39:42:bb:69:71:c2:75:4a:b8:2f:8d:cd:c8:ed:50:5e:0a:
5e:99:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:21:07 2026 by rpki-client