
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dd6d8f2a-322b-3f67-afad-827d03321a91.roa
File: dd6d8f2a-322b-3f67-afad-827d03321a91.roa (raw, json)
Hash identifier: 6P7ZuZ+MzoqE8hJwNDzBsHmKMEwZWqhlj0R5Phu1ML4=
Subject key identifier: C0:59:A6:63:7E:44:15:A3:28:4E:2E:25:91:72:C9:2E:2E:61:5E:DC
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584EA78FF2C86F662F1A4BE2F680
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dd6d8f2a-322b-3f67-afad-827d03321a91.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7029
IP address blocks: 198.170.0.0/17 maxlen: 24
198.171.0.0/16 maxlen: 24
198.172.0.0/18 maxlen: 24
198.173.64.0/18 maxlen: 24
199.103.192.0/18 maxlen: 24
199.236.0.0/16 maxlen: 24
199.237.0.0/18 maxlen: 24
199.237.128.0/17 maxlen: 24
199.239.192.0/18 maxlen: 24
206.50.64.0/18 maxlen: 24
206.184.64.0/18 maxlen: 24
206.184.128.0/17 maxlen: 24
206.239.64.0/18 maxlen: 24
206.239.128.0/17 maxlen: 24
207.20.0.0/18 maxlen: 24
207.20.128.0/17 maxlen: 24
207.137.128.0/17 maxlen: 24
209.39.128.0/17 maxlen: 24
209.57.128.0/17 maxlen: 24
209.70.0.0/17 maxlen: 24
209.70.128.0/18 maxlen: 24
216.42.0.0/17 maxlen: 24
216.44.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8f:f2:c8:6f:66:2f:1a:4b:e2:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=bdf0b1f7-6d9b-40d5-ae14-62f9a7fd55b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:b5:52:d8:61:bd:d0:03:37:4a:77:fb:38:
b2:3c:fa:eb:f9:f2:62:4a:1e:6e:3a:d8:19:2e:24:
25:7a:bd:68:8d:0c:a0:e4:70:e6:4e:32:57:c9:f6:
9b:32:61:12:52:d6:2b:62:5c:db:40:80:15:f7:e9:
b1:db:a7:d1:47:4e:56:2d:69:dc:d1:64:1b:18:22:
a0:44:2f:18:b2:fc:e8:ca:a1:6b:ef:b7:a4:ad:80:
55:bd:f0:e8:5e:c4:76:84:54:50:ac:c1:5e:39:9e:
a1:2b:70:03:b5:1c:8f:37:d7:9a:e5:65:38:db:18:
ad:98:54:71:ff:3b:7a:80:94:54:2a:28:64:ec:9f:
a6:2a:3e:8f:a5:e2:5a:b2:f3:a4:43:d1:2b:61:aa:
56:ac:a1:85:af:dd:2f:69:bd:e8:56:ba:d4:75:c2:
59:8d:97:da:19:53:79:fa:09:e4:d5:38:2e:69:03:
2d:5f:78:5c:d0:c3:9f:3f:d5:0c:3b:ca:d4:9e:24:
73:cd:77:b0:9f:0c:d1:d2:f3:66:d4:3a:01:66:50:
9b:23:db:fa:cf:b2:c1:11:ea:c5:5e:dc:48:be:bf:
0d:c6:f5:ae:37:7a:d6:3e:0e:6f:21:dd:4f:2f:17:
25:e6:68:6f:30:f2:aa:75:a0:13:8a:d0:8c:6e:48:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:59:A6:63:7E:44:15:A3:28:4E:2E:25:91:72:C9:2E:2E:61:5E:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dd6d8f2a-322b-3f67-afad-827d03321a91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.170.0.0/17
198.171.0.0-198.172.63.255
198.173.64.0/18
199.103.192.0/18
199.236.0.0-199.237.63.255
199.237.128.0/17
199.239.192.0/18
206.50.64.0/18
206.184.64.0-206.184.255.255
206.239.64.0-206.239.255.255
207.20.0.0/18
207.20.128.0/17
207.137.128.0/17
209.39.128.0/17
209.57.128.0/17
209.70.0.0-209.70.191.255
216.42.0.0/17
216.44.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:2b:d1:00:f6:87:1d:36:4f:c0:c0:d7:2f:8e:83:22:48:f7:
95:e4:2b:33:64:e7:f5:f9:d5:05:c9:86:f5:5e:4a:7d:07:17:
a0:89:5b:e8:73:26:a1:b8:ec:25:13:4a:fa:16:84:ab:a5:16:
04:47:ee:6c:7c:9d:28:51:f0:81:b3:7d:9b:e0:54:62:d2:0f:
b4:8c:5a:a2:13:0d:8a:b2:0a:8d:44:c5:4d:5a:0d:9c:55:35:
78:00:a8:d3:48:50:c2:9c:7c:e3:7c:e4:28:dd:61:31:30:b4:
96:c3:a2:2b:1d:f9:df:c4:fd:81:92:06:eb:83:17:45:8c:c5:
58:96:16:40:7b:a3:32:31:e6:50:f9:9f:93:bc:5e:ad:67:84:
e4:87:b9:ab:a9:fd:85:09:bb:a5:19:e1:07:0a:89:e3:75:9f:
18:9b:9d:34:00:71:66:c2:8a:43:50:3c:31:ca:7b:48:9f:28:
0c:df:57:8e:28:0c:f8:20:a5:5b:da:9f:18:d6:6f:62:35:95:
10:99:a2:61:7a:09:b3:47:f3:a9:13:88:11:aa:8a:30:76:b0:
62:ae:05:44:d4:a0:8c:53:75:4a:ef:25:56:06:0f:29:8e:13:
b4:23:45:23:79:58:95:cf:50:19:ca:8f:ae:18:00:f0:dd:0f:
f9:48:17:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:55:06 2026 by rpki-client