
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d28bb973-d770-325f-809f-41fd4697ed68.roa
File: d28bb973-d770-325f-809f-41fd4697ed68.roa (raw, json)
Hash identifier: W5Nl7ZU2QtVfLhgERwCJ/KFp+tdN5/C4aeIPrxWYEsc=
Subject key identifier: AE:A9:7D:44:5D:15:82:19:49:32:D1:94:C1:03:20:36:8E:72:60:39
Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial: 010D0C9F4328584F20F7AC033257A645CB1A9CCF
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d28bb973-d770-325f-809f-41fd4697ed68.roa
Signing time: Thu 10 Sep 2026 13:00:12 +0000
ROA not before: Thu 10 Sep 2026 13:00:12 +0000
ROA not after: Wed 09 Dec 2026 14:00:12 +0000
asID: 19529
IP address blocks: 207.2.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:20:f7:ac:03:32:57:a6:45:cb:1a:9c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Validity
Not Before: Sep 10 13:00:12 2026 GMT
Not After : Dec 9 14:00:12 2026 GMT
Subject: CN=a265c00b-34c3-43ef-96b7-c14bf1788b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:06:9a:97:a0:4f:67:c1:63:ee:22:13:64:14:
21:20:92:78:29:3d:ed:ed:a1:c8:d7:23:d7:54:ba:
6c:5d:c7:33:be:65:4c:71:ce:6e:86:44:2b:3f:5e:
0d:ae:ec:b0:65:a8:74:07:a7:25:bd:d7:b7:18:72:
43:2c:48:08:59:e3:0f:27:12:f6:60:9d:d8:09:d6:
3f:1a:c3:51:51:03:33:df:83:29:d1:11:99:2a:3f:
a4:55:c9:6a:3c:36:8a:05:c9:95:e6:ee:4a:b0:90:
65:99:0f:98:15:e3:d1:fe:7f:72:1c:70:39:a5:82:
06:69:7a:fa:95:53:e9:54:ee:57:e9:35:78:95:47:
24:ea:c8:90:28:0b:b7:cb:2a:06:33:e9:2d:a6:ed:
d1:7c:6c:a2:21:8d:6d:ee:56:18:18:3e:fb:2f:ee:
6d:24:0b:c9:93:0c:88:19:34:ca:ca:1a:34:31:d3:
ac:96:eb:60:70:23:b2:ef:f0:2a:1e:7a:9e:98:cd:
74:80:fb:fe:ba:f5:15:d4:3f:24:4a:a0:73:79:34:
7f:12:75:54:ca:d4:90:e9:17:0a:96:20:6d:99:cb:
28:ad:b0:6d:0e:dd:f1:71:bd:14:fa:8c:13:58:0d:
9f:54:9c:f7:cf:78:c0:41:45:7d:16:2f:eb:57:4e:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A9:7D:44:5D:15:82:19:49:32:D1:94:C1:03:20:36:8E:72:60:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d28bb973-d770-325f-809f-41fd4697ed68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
X509v3 Authority Key Identifier:
keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
sbgp-ipAddrBlock: critical
IPv4:
207.2.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:f1:2a:1f:10:eb:1a:1f:52:ba:15:8e:39:23:cb:b1:11:c7:
eb:fe:89:e8:f3:15:42:a2:54:87:1d:04:a9:29:68:0b:e3:95:
21:cc:58:02:77:f4:46:b5:f4:b6:bc:32:29:07:ee:47:86:c0:
e1:53:a3:cb:bf:0b:77:2f:3a:cc:da:5a:da:93:16:1e:03:e2:
c9:7c:d6:56:fb:ba:e1:5e:a0:02:91:89:cd:ae:f0:cd:a2:dd:
7f:0c:42:66:58:9c:4f:95:cf:5d:75:09:21:31:96:ef:23:20:
bf:ac:41:3a:3d:ae:37:d3:2e:ee:11:42:81:78:7f:3d:7d:2c:
c9:f4:05:42:00:16:ca:6e:6a:d8:4d:17:10:22:4b:1d:26:95:
ca:43:a3:99:8f:2d:86:82:35:11:e8:e7:e5:1d:fb:68:8f:67:
14:9e:d1:c8:76:c8:95:05:23:88:d7:2f:dc:50:2c:99:57:1d:
e2:e1:95:38:a3:01:f4:90:6e:bb:5f:0f:e7:17:5f:48:e5:61:
e8:15:33:e5:c3:41:8f:78:55:2f:42:ba:8b:5c:d2:0a:e7:d2:
83:af:b1:a6:2e:2e:1b:29:00:0d:b0:7d:f3:13:2b:ce:b9:e3:
3c:db:9c:76:eb:ac:59:20:de:12:4b:23:94:be:d0:1d:34:73:
26:ed:92:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96wDMlemRcsanM8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQyYzU3OTUtOTU0ZC00NjhmLTlkZWItN2YzYWI2M2Mx
MWRkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk
YTI2NWMwMGItMzRjMy00M2VmLTk2YjctYzE0YmYxNzg4Yjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAaal6BPZ8Fj7iITZBQhIJJ4KT3t7aHI1yPX
VLpsXcczvmVMcc5uhkQrP14NruywZah0B6clvde3GHJDLEgIWeMPJxL2YJ3YCdY/
GsNRUQMz34Mp0RGZKj+kVclqPDaKBcmV5u5KsJBlmQ+YFePR/n9yHHA5pYIGaXr6
lVPpVO5X6TV4lUck6siQKAu3yyoGM+ktpu3RfGyiIY1t7lYYGD77L+5tJAvJkwyI
GTTKyho0MdOslutgcCOy7/AqHnqemM10gPv+uvUV1D8kSqBzeTR/EnVUytSQ6RcK
liBtmcsorbBtDt3xcb0U+owTWA2fVJz3z3jAQUV9Fi/rV04ATwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK6pfURdFYIZSTLRlMEDIDaOcmA5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJj
NTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNhYjYzYzExZGQvZDI4YmI5NzMtZDc3MC0z
MjVmLTgwOWYtNDFmZDQ2OTdlZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQyYzU3OTUtOTU0ZC00NjhmLTlk
ZWItN2YzYWI2M2MxMWRkL2E0MmM1Nzk1LTk1NGQtNDY4Zi05ZGViLTdmM2FiNjNj
MTFkZC5jcmwwHwYDVR0jBBgwFoAUhQ9DF07j3MbPHnpY1nyLgvEX3HAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJjNTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNh
YjYzYzExZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzwJ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITxKh8Q6xofUroVjjkjy7ERx+v+iejzFUKiVIcdBKkpaAvjlSHMWAJ3
9Ea19La8MikH7keGwOFTo8u/C3cvOszaWtqTFh4D4sl81lb7uuFeoAKRic2u8M2i
3X8MQmZYnE+Vz111CSExlu8jIL+sQTo9rjfTLu4RQoF4fz19LMn0BUIAFspuathN
FxAiSx0mlcpDo5mPLYaCNRHo5+Ud+2iPZxSe0ch2yJUFI4jXL9xQLJlXHeLhlTij
AfSQbrtfD+cXX0jlYegVM+XDQY94VS9Cuotc0grn0oOvsaYuLhspAA2wffMTK865
4zzbnHbrrFkg3hJLI5S+0B00cybtkqs=
-----END CERTIFICATE-----
Generated at Fri Oct 9 04:36:33 2026 by rpki-client