
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa
File: 3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa (raw, json)
Hash identifier: 81Zx3tsMIW1d/Q1yuUK2cjF6rmcW9ctbrxkP2mNJ4/E=
Subject key identifier: 23:3B:3C:17:4A:EF:AF:12:C9:EA:7F:2C:A7:B4:9C:99:1A:FC:4D:80
Certificate issuer: /CN=207c40f4-33c4-478b-ae61-d3f51358881b
Certificate serial: 010D0C9F4328584F119CF272F2C79321C117BDC0
Authority key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 40091
IP address blocks: 76.9.224.0/20 maxlen: 24
216.115.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9c:f2:72:f2:c7:93:21:c1:17:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207c40f4-33c4-478b-ae61-d3f51358881b
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=e117a456-ccf1-4e00-b684-8e0b49ac1862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e5:a3:7b:22:4d:8b:be:23:2b:33:7a:ca:40:
80:bc:a0:a8:07:4f:0b:7c:a7:ca:52:b6:76:39:6b:
2e:93:43:26:c6:f5:c2:2c:9e:1b:08:ac:a7:7d:06:
3e:9d:28:64:8c:c7:2d:fb:4e:e8:c4:c5:57:7d:1d:
23:f8:7e:34:df:7f:a5:5e:e7:df:6b:52:70:2c:8f:
16:76:f2:7f:43:83:ff:38:b9:a4:a0:28:e5:be:93:
5c:11:37:7a:88:4b:b3:8e:a1:51:cd:f8:19:bd:f3:
17:f0:90:f4:24:5b:1d:2b:97:3a:45:28:44:f2:70:
a0:b3:de:c0:7e:9b:33:0e:50:3c:2a:47:73:25:65:
31:0d:a1:5d:bb:ba:63:25:e3:74:64:7b:8e:94:f6:
c0:02:1b:e4:ea:ed:3f:4a:52:00:ec:e4:37:fb:9b:
41:e5:ee:28:bf:36:f4:2c:78:ea:53:9a:ca:c1:0e:
b0:b8:19:60:6b:e7:97:cc:16:7a:f8:30:36:cd:52:
8f:dd:91:81:a3:e1:37:18:d3:b6:91:72:95:ae:9c:
cc:ee:08:ba:7f:1e:79:7c:a7:b5:ce:03:28:0e:ad:
70:51:a2:db:f6:80:de:80:e4:5f:70:f6:3d:e0:0f:
90:f6:34:3b:3a:4a:1e:d4:73:45:3d:5f:ea:62:b0:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3B:3C:17:4A:EF:AF:12:C9:EA:7F:2C:A7:B4:9C:99:1A:FC:4D:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl
X509v3 Authority Key Identifier:
keyid:52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer
sbgp-ipAddrBlock: critical
IPv4:
76.9.224.0/20
216.115.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:9e:83:28:bc:cd:1d:d3:b7:59:e8:39:ee:53:08:3d:65:0d:
02:fd:04:18:af:e1:27:78:f4:1e:c3:d0:00:88:16:e9:60:f4:
73:54:11:fc:53:76:36:91:e3:93:c5:c7:74:f7:29:3b:bc:fe:
9c:72:71:62:14:18:79:f8:ec:c6:96:b2:b9:61:09:b0:91:9c:
fc:3b:aa:89:14:0e:21:7e:05:be:db:c9:ad:6f:f4:51:38:f0:
46:bd:61:7c:8a:41:89:d8:2f:4e:39:91:41:03:bb:6f:2a:63:
9e:8e:7e:e8:cc:f0:a6:58:de:aa:e2:02:c4:fe:bb:0e:ce:75:
12:8e:d5:8f:c2:1d:44:76:5c:0e:83:1c:8b:a5:33:c5:45:90:
da:49:fd:d4:a7:77:16:52:78:4d:2f:33:0a:e9:72:30:2a:60:
0a:49:71:e9:40:66:10:e1:73:eb:54:9f:20:8d:db:36:0b:1a:
0b:d9:e0:ae:6b:73:b6:67:28:a1:82:ce:ff:c1:8c:85:b4:f3:
0c:70:37:10:5a:6f:21:0b:24:85:3b:ff:fe:75:9b:c5:96:c3:
5b:45:08:53:3b:e0:da:f2:4e:7e:d1:98:5c:fc:13:da:42:a0:
64:66:10:a3:4a:68:22:25:76:08:a6:52:97:35:17:82:fa:f1:
94:75:16:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 08:59:12 2026 by rpki-client