
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/7f3b3a74-84e9-3559-9aff-71be26cc7983.roa
File: 7f3b3a74-84e9-3559-9aff-71be26cc7983.roa (raw, json)
Hash identifier: PP3BJ6ALtCDsd0Hzk/WNicA/u2D5Jc8hzTe0R28Plpw=
Subject key identifier: 6F:27:EE:32:FC:3A:86:68:2E:19:FA:FD:53:14:EA:8C:AE:47:87:1B
Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial: 010D0C9F4328584E1FA992E544389C09484FF880
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/7f3b3a74-84e9-3559-9aff-71be26cc7983.roa
Signing time: Wed 10 Jun 2026 09:00:13 +0000
ROA not before: Wed 10 Jun 2026 09:00:13 +0000
ROA not after: Tue 08 Sep 2026 09:00:13 +0000
asID: 62943
IP address blocks: 67.221.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1f:a9:92:e5:44:38:9c:09:48:4f:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Validity
Not Before: Jun 10 09:00:13 2026 GMT
Not After : Sep 8 09:00:13 2026 GMT
Subject: CN=bee0e508-41ca-4f54-8f33-19969692167d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:41:ab:c1:bc:1b:10:9e:f0:83:bb:23:f4:
0d:e3:2b:01:1b:75:4c:29:1b:37:86:1a:b5:fb:ed:
20:45:5b:b2:4b:56:b1:8a:45:45:af:50:a8:cd:f8:
b0:20:d5:f2:e4:7a:0e:66:b5:07:16:7c:3d:71:91:
9b:9d:c5:a2:5e:db:65:be:5d:4b:e4:9d:f6:dd:10:
a4:ca:26:3e:c8:88:e4:e0:b7:3a:e0:0b:7e:c8:c9:
1d:a8:7f:39:d9:c3:b8:08:88:e4:65:84:15:ee:b3:
a3:d3:d4:65:1a:65:23:5f:c6:d4:19:1a:9c:3f:35:
d1:6c:64:ff:5d:32:c8:79:4a:58:46:1e:32:3b:a5:
e7:04:2e:9e:cf:1e:ac:96:81:c8:6a:b3:e8:d0:43:
2c:9d:6d:c1:3b:05:43:c2:6a:fd:40:b6:cd:f7:b0:
af:ff:4f:2b:f7:30:fd:84:eb:c2:68:15:85:bd:35:
d9:b9:b5:6f:d7:1f:1e:6c:20:7f:43:ec:66:28:50:
53:7f:7d:7a:cc:e6:54:2c:06:97:d5:9b:ee:9c:c3:
34:1f:bb:2d:93:ed:1b:2e:4b:8f:85:c7:e2:9f:52:
a0:96:4b:c1:2b:ea:1e:c9:23:26:c4:46:79:ba:bf:
59:36:db:82:63:44:5f:a1:27:23:19:7a:5b:af:46:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:27:EE:32:FC:3A:86:68:2E:19:FA:FD:53:14:EA:8C:AE:47:87:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/7f3b3a74-84e9-3559-9aff-71be26cc7983.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
X509v3 Authority Key Identifier:
keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:7f:da:11:7e:2c:8d:8a:20:65:da:6c:7d:18:ed:8b:1a:5d:
a3:67:61:2d:78:fa:6b:2a:43:49:5d:34:85:4e:68:cb:3c:c0:
2e:32:38:f6:33:76:91:1c:f8:3d:3a:2f:39:b6:48:07:47:f9:
0e:84:5f:70:db:ef:af:70:65:70:dc:5f:fc:17:83:1e:a0:ca:
d9:30:3f:a6:fe:b5:12:39:34:91:af:96:0c:ef:0f:c6:cc:1e:
87:29:f4:ec:27:af:3c:d7:62:bd:01:4e:e2:80:a7:71:63:e9:
1a:f8:c2:7f:78:c4:d6:1b:3d:2b:2e:bb:0b:0e:85:0c:6f:41:
ea:d9:b6:e1:34:1c:0c:66:15:04:d1:e5:25:5f:51:09:05:9e:
73:ef:5b:c8:15:45:bc:ea:f9:0c:22:a0:bb:4c:3a:c5:a5:5d:
fd:79:0d:ce:10:77:22:be:5a:ce:e3:87:a2:cd:bc:76:b5:b3:
9d:56:cc:ee:02:57:6b:0a:8b:f9:df:da:04:dc:48:8a:1f:9e:
83:dc:c3:8a:c0:5c:d6:e0:ba:4c:be:4d:6f:fa:69:ab:c1:2d:
41:42:3b:4d:26:df:db:46:84:0a:31:87:57:3a:0a:3d:55:0f:
a9:15:fd:fb:1a:46:5f:e3:3a:98:a6:85:a0:3f:83:5a:29:e0:
fa:1f:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:41:41 2026 by rpki-client