
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2db2e59a-1695-343f-b14c-f4f1be9a9556.roa
File: 2db2e59a-1695-343f-b14c-f4f1be9a9556.roa (raw, json)
Hash identifier: hHAYW5SMqUivgXhldzR4EXCTJXw9E8tqeUZyEH6rRHo=
Subject key identifier: 86:1B:5D:D1:B9:9C:38:D1:6F:AE:9C:58:1F:E1:32:1F:9C:0E:1F:53
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F4328584E4559F94065B4C5976AEE1880
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2db2e59a-1695-343f-b14c-f4f1be9a9556.roa
Signing time: Tue 23 Jun 2026 21:00:12 +0000
ROA not before: Tue 23 Jun 2026 21:00:12 +0000
ROA not after: Mon 21 Sep 2026 21:00:12 +0000
asID: 13781
IP address blocks: 216.206.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:45:59:f9:40:65:b4:c5:97:6a:ee:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Jun 23 21:00:12 2026 GMT
Not After : Sep 21 21:00:12 2026 GMT
Subject: CN=13c66d6a-1ae1-413b-a9fc-74342d56e5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3e:6d:2c:ec:4a:73:dc:95:12:6f:3d:7a:b4:
eb:08:23:e1:ab:f3:b0:5a:23:ba:49:6e:67:8b:c7:
9a:14:f1:2a:49:72:56:5e:7e:0c:5a:70:98:e9:ce:
77:68:cd:f2:b9:e7:c5:ef:02:85:b9:51:27:da:59:
2b:0b:58:e8:ba:cf:69:e1:a9:b2:45:c3:16:e4:da:
6c:c3:04:20:30:dd:73:00:a3:08:8f:b9:2c:ae:21:
e5:9e:19:90:76:89:6e:45:3f:9e:02:0e:18:29:42:
5e:6a:b1:3b:c4:64:90:7e:93:f3:fa:35:37:0b:9d:
2b:4e:54:90:cf:ba:91:aa:cb:87:94:8d:b1:6f:21:
9f:4e:8d:6f:28:48:98:5b:c5:80:89:6f:7c:00:44:
df:48:09:10:b4:77:e9:71:35:b9:ab:a8:36:ff:63:
a9:e5:d8:69:27:8c:2d:ad:b3:fe:01:48:15:56:65:
65:0f:e1:4c:2d:37:ac:d9:59:d9:8f:19:35:26:ad:
05:5f:54:0f:eb:72:b2:58:7f:b7:72:fd:03:61:10:
f4:bb:57:59:99:bd:e4:5c:4a:14:6a:ac:78:4a:7b:
56:a2:f5:b3:6b:fc:7c:4c:50:4f:05:f8:a1:30:4d:
3e:c2:73:e4:8f:ac:5a:71:64:f5:e5:7f:94:1a:a0:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1B:5D:D1:B9:9C:38:D1:6F:AE:9C:58:1F:E1:32:1F:9C:0E:1F:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2db2e59a-1695-343f-b14c-f4f1be9a9556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
216.206.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:ab:5d:8a:e7:99:3a:57:cd:20:e8:4c:77:4e:57:1f:bc:af:
00:ba:ed:7c:90:4b:0e:4e:7d:fc:bd:82:b6:3e:ee:eb:96:84:
1d:39:c0:c5:42:4e:e4:c3:ce:bc:f8:17:aa:d1:67:f9:b8:85:
f0:f6:96:ba:e6:8e:66:fb:11:ae:78:64:89:f3:23:13:69:85:
c1:46:8c:f1:96:88:45:88:b5:4e:fe:cb:11:f2:a3:c6:70:e5:
e2:91:94:67:89:75:aa:b5:18:9f:95:9a:bb:20:06:2f:e5:60:
fd:b8:51:7c:34:b1:eb:d7:cd:f7:f0:f5:a9:bd:10:b8:79:4f:
38:f5:fe:df:89:4d:70:6b:12:9a:e1:4b:a9:3a:e6:d5:ea:e8:
2c:40:52:a6:6b:82:4f:06:90:3f:b1:ca:d4:89:8c:7d:dc:4f:
e0:90:4b:ee:92:5c:2d:42:21:71:ab:44:64:44:4e:b3:8f:12:
37:ca:ed:2c:5c:e0:62:d8:50:9e:57:ac:fd:77:f5:13:c0:0a:
5c:49:02:50:b0:33:75:06:3e:47:45:1b:c1:c7:53:74:bb:9b:
f9:08:2e:40:b1:c7:fc:43:5b:77:7f:60:7b:1e:a6:01:7f:39:
83:9b:a9:5a:7a:5d:36:74:34:bb:36:28:2f:12:26:09:21:e7:
13:a3:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:40:00 2026 by rpki-client