
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/143871e1-8c4a-329d-8bb5-cdb8296f5e9a.roa
File: 143871e1-8c4a-329d-8bb5-cdb8296f5e9a.roa (raw, json)
Hash identifier: G8p0pmaJV9C1ZQ+A/d9DbDVJ9uG2ak35F0e0ra6aMcU=
Subject key identifier: 48:C7:09:FE:A9:94:3E:F0:E1:1E:F3:65:35:BC:16:82:97:15:B7:0C
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F4328584EA78745799F6C0B185967F880
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/143871e1-8c4a-329d-8bb5-cdb8296f5e9a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 140952
IP address blocks: 209.107.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:45:79:9f:6c:0b:18:59:67:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=e5371a02-68dd-4855-b5c0-e7c580cf1e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:b1:32:de:5d:4d:a0:f2:3d:06:42:b4:f4:
16:47:84:45:7a:38:cc:ae:48:1e:21:33:de:5c:db:
95:f8:97:5e:05:4b:9a:fb:15:8f:df:f2:d6:c0:dc:
95:a9:20:15:9b:44:49:13:a8:e0:cd:82:1a:0a:f0:
30:ef:86:e8:6e:26:42:56:97:a4:2b:3d:19:94:db:
fb:51:4c:8f:b8:05:e4:05:75:92:51:97:29:1e:95:
bf:bb:cb:26:75:cb:c9:9d:f4:f6:41:c4:81:82:f7:
c5:30:ee:ad:1f:c4:7d:02:05:8b:d1:47:18:6e:a1:
ae:00:8e:2f:3e:a1:54:d5:98:5c:55:18:eb:62:e4:
4d:2b:73:49:17:61:05:73:8c:25:b0:3c:cc:29:d7:
26:b5:04:93:b7:45:13:6f:79:74:bf:52:0c:c5:4c:
f8:0a:8d:71:e2:04:18:9e:0d:35:e5:ae:9e:df:e3:
82:36:13:7c:f4:33:69:cc:2a:87:a7:2e:d3:08:8b:
4a:ee:b2:4b:16:75:66:19:cd:35:2f:90:b9:c0:9a:
1e:c3:5b:db:85:74:b0:44:44:e2:29:9d:76:f9:77:
53:86:da:4c:97:47:3d:2d:46:9b:cd:81:12:c8:43:
cc:fb:f0:83:82:86:c9:f3:98:1e:2c:e1:4e:ce:35:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C7:09:FE:A9:94:3E:F0:E1:1E:F3:65:35:BC:16:82:97:15:B7:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/143871e1-8c4a-329d-8bb5-cdb8296f5e9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:c7:44:5b:91:27:63:58:8b:34:ea:c7:81:20:7c:92:07:2a:
e1:90:12:f5:b5:99:1b:1f:6a:91:eb:00:bd:d0:8e:72:90:a9:
6d:79:d8:6a:2c:9a:36:92:69:e7:f7:cf:77:60:6c:4f:29:8a:
69:ee:ee:1f:ba:0e:b7:77:18:3b:af:8a:03:1e:b0:81:c5:1b:
c9:a3:5e:b8:f9:e0:38:b1:2d:11:45:fd:ba:18:1f:1b:4b:2f:
bf:81:c6:bc:bf:93:28:41:1a:4f:8c:fc:e6:ff:6e:71:ae:92:
d4:b8:83:28:f4:0f:15:19:72:40:6a:44:99:4a:1f:c9:64:b7:
4a:57:cc:c1:5d:2f:04:1a:0f:39:d4:bf:f5:46:ca:03:07:e2:
16:5e:6d:84:d8:ef:13:c7:57:a6:2f:42:40:92:9c:b2:a7:70:
81:10:5a:75:1f:06:34:ed:95:8a:e3:4a:1a:16:ed:2c:43:88:
83:1f:06:2d:a0:a7:3b:ce:f6:9b:e6:16:e2:97:c4:eb:db:db:
ec:dc:05:a9:df:0f:8e:ad:ae:9e:62:41:bc:97:8e:bd:be:63:
90:a0:a8:cc:f7:11:97:d7:6c:d5:1f:57:e6:cc:76:ac:80:db:
a4:0a:6a:40:b1:0d:3d:2a:47:2f:eb:33:20:b9:5d:ca:08:83:
86:9b:96:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 15:04:28 2026 by rpki-client