
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9dc6a32b-dfd8-3f1d-8beb-85d2682a9c15.roa
File: 9dc6a32b-dfd8-3f1d-8beb-85d2682a9c15.roa (raw, json)
Hash identifier: Kp13qElEJPdXeHXCkdH+CvQlg/lfRTHHt/706lSP7cE=
Subject key identifier: 29:B6:B5:66:E2:57:73:DF:31:5E:89:40:09:E1:17:08:E4:21:CB:AE
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584DE3319D7A02D84B39D2E2F480
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9dc6a32b-dfd8-3f1d-8beb-85d2682a9c15.roa
Signing time: Tue 19 May 2026 17:10:02 +0000
ROA not before: Tue 19 May 2026 17:10:02 +0000
ROA not after: Mon 17 Aug 2026 17:10:02 +0000
asID: 139659
IP address blocks: 207.57.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 21 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e3:31:9d:7a:02:d8:4b:39:d2:e2:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: May 19 17:10:02 2026 GMT
Not After : Aug 17 17:10:02 2026 GMT
Subject: CN=f8b01b4f-e155-4b3e-af82-06b7405a4177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:04:f9:b3:32:7b:cc:fe:1f:b8:f9:74:9f:c7:
17:97:02:9a:eb:85:c6:6e:ac:11:42:f6:63:7b:29:
24:70:88:74:93:f2:bf:37:d9:20:40:e3:12:c0:82:
35:d5:ca:12:76:1d:b0:72:27:97:a9:df:4c:ea:d4:
ae:70:a7:59:bd:22:ae:27:ac:bd:7d:95:a2:0b:91:
52:91:55:f6:3a:0f:02:7c:d0:60:17:44:24:a7:f3:
9d:05:ab:a4:2d:40:d8:a7:5e:68:5f:60:1a:ae:3c:
f2:fb:e9:4a:41:4d:04:0d:5e:fe:41:45:0d:68:ad:
de:a7:16:dc:73:1e:85:08:9a:d8:3c:a2:17:e6:98:
76:c5:77:7d:40:79:9f:e4:96:db:04:74:ae:38:b3:
9b:2b:32:78:8f:c0:9c:a6:e5:65:4b:56:8c:25:27:
7e:77:fd:b5:fd:b9:8f:30:3e:45:6a:93:7d:36:6a:
d0:2f:98:71:3b:2e:59:ac:f7:4e:bb:15:22:83:91:
9c:d0:77:49:48:8a:d1:31:dd:a2:db:f9:74:30:d0:
87:f5:fa:4c:da:32:f0:f2:d6:21:72:19:cd:58:18:
64:a2:9f:80:c2:9c:80:5b:3e:d8:e4:50:be:c2:ab:
9a:26:2e:cc:72:0a:39:78:b6:bb:7c:49:7f:90:e1:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B6:B5:66:E2:57:73:DF:31:5E:89:40:09:E1:17:08:E4:21:CB:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9dc6a32b-dfd8-3f1d-8beb-85d2682a9c15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
207.57.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:b0:1f:7b:e6:90:4d:b1:bb:e9:c6:c3:fd:cb:7c:d4:7a:42:
c8:36:0d:49:5d:b4:d1:e8:9e:a2:63:0f:a2:84:0a:44:49:61:
be:7e:1a:57:ee:57:71:36:9d:ac:9c:93:eb:73:c3:da:e7:04:
83:de:4e:ed:c4:97:fa:9e:a5:63:d1:5f:8c:e1:67:ee:2d:f4:
ca:d6:db:31:a5:5e:40:ae:74:8f:66:4a:e4:6e:dc:63:d6:bc:
87:89:ec:4e:b9:d3:d2:ef:66:80:90:44:ad:d3:fa:2b:4d:20:
03:de:6e:6f:73:3b:a9:f5:8f:72:db:28:41:3c:59:a3:3a:bf:
0f:54:bd:04:f8:bc:33:92:28:28:4e:3c:47:19:5e:12:df:bf:
20:b5:b6:23:89:aa:fe:e2:8f:0e:bc:dd:e1:cf:b4:8e:bf:84:
f3:df:51:02:cd:a3:8e:76:53:f8:a7:cf:c8:03:b5:4b:72:4a:
e7:b3:ee:14:a3:88:f9:56:ac:2c:58:a6:c2:51:51:eb:bd:71:
da:02:32:61:42:b3:ed:fb:85:8a:d5:5a:28:1d:cd:f0:38:46:
a6:8a:d7:f3:95:37:82:97:9b:de:09:9e:1a:4b:eb:59:9d:9a:
ac:bd:6b:e5:cf:25:be:83:2a:7a:c0:ec:bc:d7:04:a0:90:82:
18:f1:3e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 15:15:36 2026 by rpki-client