
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa
File: 7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa (raw, json)
Hash identifier: QYzK5EpL3bBzvEM2uRW4jTTf8ST12zWvQh1Agu08EY8=
Subject key identifier: AA:DF:F7:23:18:54:06:8A:5A:55:85:A8:7E:4D:76:57:11:12:B0:5F
Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial: 010D0C9F4328584ECBD1D3343C65A78C7AA12880
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa
Signing time: Tue 11 Aug 2026 01:00:11 +0000
ROA not before: Tue 11 Aug 2026 01:00:11 +0000
ROA not after: Mon 09 Nov 2026 02:00:11 +0000
asID: 139267
IP address blocks: 173.243.224.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cb:d1:d3:34:3c:65:a7:8c:7a:a1:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Validity
Not Before: Aug 11 01:00:11 2026 GMT
Not After : Nov 9 02:00:11 2026 GMT
Subject: CN=7bda978e-ca18-47eb-9866-ec81d8813e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:14:d9:4c:b2:7a:68:08:e5:9b:61:1a:74:
23:91:3c:44:ba:81:0f:62:29:2a:11:9c:b4:c5:fc:
9a:59:78:42:7d:01:a0:3e:58:8f:e4:50:30:55:a3:
9f:e9:59:f5:68:4d:95:56:2a:e1:74:ad:54:98:f8:
d8:6c:91:19:80:7e:89:57:99:80:49:dd:bd:68:8c:
07:88:a0:e7:bb:0e:be:e2:c4:8c:bf:88:d6:28:e3:
7e:02:18:37:40:be:1a:3a:c8:36:28:8d:ba:6c:6c:
6c:b6:9c:71:73:0d:d4:9a:83:58:42:68:49:31:c4:
d8:ca:79:73:13:57:f1:e4:30:bd:04:38:45:1e:5c:
c0:5e:03:ef:89:c9:11:6e:eb:06:90:81:b0:24:8e:
63:c7:04:32:d7:e9:0e:94:db:3b:fe:6f:eb:72:01:
17:2e:81:39:2e:46:a6:f2:44:ba:1e:51:c8:3e:cf:
3a:92:90:42:20:d0:31:63:c5:6c:f0:7c:d8:f0:c7:
ed:0c:9e:97:d1:e7:ba:15:4d:c9:fe:29:2e:6c:82:
42:36:13:f9:c9:24:70:ea:c2:eb:01:78:0b:3a:88:
aa:4b:e8:48:4e:c0:35:d1:73:7b:b9:aa:56:2a:c7:
ff:cf:6a:f5:66:80:1e:96:8b:72:47:02:7d:3e:37:
5e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DF:F7:23:18:54:06:8A:5A:55:85:A8:7E:4D:76:57:11:12:B0:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
X509v3 Authority Key Identifier:
keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
sbgp-ipAddrBlock: critical
IPv4:
173.243.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:ee:2e:e0:28:34:5d:81:be:42:dc:87:54:2f:17:86:0c:85:
65:c6:42:07:80:42:e2:f7:33:c7:17:64:8d:48:7f:ce:54:4a:
d9:f6:6c:85:4a:e7:b8:3f:ac:7c:4b:f1:c8:c1:c4:99:9b:9e:
d3:2b:52:09:da:ea:16:85:a6:4e:c8:dd:ab:70:bf:6d:1d:8e:
68:99:3c:81:20:d6:d1:b3:f9:98:55:bb:e2:f1:34:2c:99:95:
0f:81:df:b1:15:e4:76:1b:37:35:b4:49:0a:8d:0e:29:73:3f:
17:09:1a:45:60:77:5e:f4:3c:3b:6f:15:ea:be:d2:4f:e8:94:
f7:5a:81:50:28:06:ae:5e:14:45:a3:3c:12:86:1c:81:2b:83:
2f:89:a5:3f:2c:27:e5:fb:29:df:3b:ae:67:95:3c:f1:ed:d0:
26:40:f3:26:81:1d:e9:57:b4:86:5f:b8:e3:20:67:a9:f4:44:
03:f0:ec:75:97:88:78:fb:10:d3:14:f5:6a:2f:11:8e:89:85:
ee:e7:bb:10:fa:39:35:61:84:4b:c0:19:af:05:48:d4:2a:54:
40:5f:0e:26:ae:ce:a8:e0:81:da:5f:6a:f5:38:fb:24:f3:f4:
8d:ad:75:46:bf:91:87:97:b1:4c:da:b5:dc:81:85:28:e2:c1:
f5:cc:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:04 2026 by rpki-client