
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e05980ac-da96-32ce-98dc-c394a2925f26.roa
File: e05980ac-da96-32ce-98dc-c394a2925f26.roa (raw, json)
Hash identifier: VNmWODT0rUEvIx6rSRalT1XuuvfmxKafnHvU1ie61D8=
Subject key identifier: 22:F7:92:4F:D6:7A:47:88:0E:73:25:AC:F8:4C:CE:9C:90:D7:96:F8
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584E7E94F12591A7B314C0AB3C20
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e05980ac-da96-32ce-98dc-c394a2925f26.roa
Signing time: Tue 14 Jul 2026 09:00:12 +0000
ROA not before: Tue 14 Jul 2026 09:00:12 +0000
ROA not after: Mon 12 Oct 2026 09:00:12 +0000
asID: 21949
IP address blocks: 207.66.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7e:94:f1:25:91:a7:b3:14:c0:ab:3c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Jul 14 09:00:12 2026 GMT
Not After : Oct 12 09:00:12 2026 GMT
Subject: CN=26da4f64-594d-485e-a302-d1b18ee3d605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3b:c1:be:60:3c:19:5d:9d:7a:a3:90:04:a3:
f3:ad:f3:5f:0d:93:e5:96:6d:1f:c1:00:05:43:c4:
55:83:df:5d:f3:27:0b:20:7a:12:9a:4e:4b:10:8b:
c3:35:45:84:e0:a9:d3:61:e4:53:fd:73:10:5d:79:
d7:12:7c:a2:f3:47:1c:e5:ba:21:db:15:cc:ac:c1:
bd:9c:5c:3a:0a:27:d5:28:af:49:ba:b2:ed:34:a2:
32:0d:18:ab:ab:40:78:0d:5d:b5:ac:e6:7e:f5:4d:
de:71:be:e8:3a:3b:fd:f3:97:7d:4e:e9:51:e3:e8:
97:40:80:b6:63:f7:0e:db:f1:92:8f:90:03:3e:6c:
92:6f:0f:c1:b1:73:38:67:90:f8:95:b0:ca:6f:9d:
c2:b0:99:ff:e6:4d:a2:9b:3d:d5:c2:6e:8e:47:06:
83:cf:87:96:86:63:6b:82:16:45:8b:9c:ce:45:3e:
e0:b2:f4:fc:96:87:bb:06:83:96:c4:05:56:f8:54:
3a:74:74:16:4b:7f:1f:ef:1f:c9:04:5d:ed:b2:d3:
a0:b0:a1:0a:8b:86:45:15:97:a6:ca:00:32:d2:5b:
80:70:00:29:67:6e:19:2f:d1:f0:78:a4:38:ff:01:
36:0e:34:a2:e7:7a:dd:f6:f5:1a:42:bb:5b:4f:e6:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F7:92:4F:D6:7A:47:88:0E:73:25:AC:F8:4C:CE:9C:90:D7:96:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e05980ac-da96-32ce-98dc-c394a2925f26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
207.66.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:4a:19:18:36:aa:bf:70:2d:1d:21:e6:81:28:b2:51:2d:f3:
cf:66:6c:e1:db:28:8a:5f:9e:47:d4:a9:5f:46:3f:32:d6:0d:
46:8e:4a:78:bf:da:26:bb:08:23:42:92:ab:0e:87:89:3e:1b:
28:44:6d:52:cc:c6:7b:4f:8b:bf:37:55:43:72:51:aa:ef:59:
53:6b:d7:e6:d9:a4:af:ab:da:d4:73:5d:43:5c:8b:b5:fe:75:
58:23:8c:23:28:f9:42:e5:15:f3:5a:a8:ea:8a:29:75:c9:98:
b4:e6:88:01:b2:f0:96:b7:5c:50:16:17:f1:92:d3:04:a5:ce:
86:77:b2:d3:fc:62:fc:f5:da:fb:74:41:8a:15:cc:fe:48:02:
b7:c4:f4:27:af:1b:ca:db:58:f2:c6:a1:c4:94:6b:59:17:36:
cc:be:01:9b:31:0d:89:0b:52:09:32:55:06:ef:86:30:aa:51:
a9:2e:4c:2b:ea:7b:61:c6:fa:de:b0:25:8b:7f:f2:eb:11:dc:
09:1b:97:71:7d:24:4d:cb:cb:6b:04:fb:47:b4:a0:36:97:a2:
0a:d9:02:7c:31:ba:95:94:68:5d:6f:5d:01:bd:ea:ac:d5:c9:
73:b7:7b:2b:00:98:3e:6f:b0:23:cc:3a:6d:3e:82:72:34:f3:
9a:a5:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:02:48 2026 by rpki-client