
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a30ce666-c03f-3ab7-bd9f-73333be6faa6.roa
File: a30ce666-c03f-3ab7-bd9f-73333be6faa6.roa (raw, json)
Hash identifier: 4rCYOpDAE4cmx4RzAIJ6Lpw5CIvnKZevozkriMnjokI=
Subject key identifier: D9:D5:81:57:6E:EE:09:2B:00:43:82:BD:17:B1:19:97:F1:9C:C8:EA
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EC0A73CAE2583CE299ACBC460
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a30ce666-c03f-3ab7-bd9f-73333be6faa6.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 397199
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:3c:ae:25:83:ce:29:9a:cb:c4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=71c4ed6e-6348-4fa2-ac8e-d0aa8c95a829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:3f:b6:7d:b7:3d:38:6d:88:e3:0d:e4:97:
51:8c:e1:31:97:f3:6f:8f:46:15:bc:3d:4e:77:a3:
e6:8f:0e:d6:ef:3c:66:2e:22:f4:8c:ec:37:ed:4e:
32:5f:be:ff:ae:b5:d4:3a:80:69:8a:d8:93:de:9f:
9b:3a:85:ed:c9:34:eb:09:d1:96:c1:60:b0:7f:28:
32:2d:0d:d8:51:2a:10:2f:fa:2d:0e:70:65:75:5e:
3f:a6:fc:67:c0:53:d5:b3:43:26:19:2d:99:f2:d5:
8c:d7:3b:9f:e7:fc:d7:2b:24:df:e6:78:66:7a:fc:
54:3e:6a:7a:fa:4d:33:a1:d8:4e:e4:0f:3b:f9:1d:
4e:6a:7f:70:17:56:e5:ea:f9:23:db:2a:1a:56:84:
9f:b6:95:76:7a:e7:17:2a:b8:ec:49:7d:86:40:00:
91:b8:b5:d0:43:35:5f:bd:87:1d:1b:af:59:dc:c8:
33:f4:80:19:1f:94:fa:f3:ca:03:e3:39:a6:9e:4c:
d7:5e:74:f5:6b:be:54:a5:9b:56:6a:ca:9b:25:84:
97:a3:6d:86:d5:5b:ee:73:a8:95:32:66:9b:5e:de:
a4:ec:5c:2b:8f:1e:7b:02:7a:c3:3f:67:33:0b:ef:
55:10:d9:d3:57:6e:7f:8e:80:7d:0f:a5:bc:77:db:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D5:81:57:6E:EE:09:2B:00:43:82:BD:17:B1:19:97:F1:9C:C8:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a30ce666-c03f-3ab7-bd9f-73333be6faa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:f7:aa:d1:58:99:f9:7c:b7:93:5d:26:c9:cc:b9:36:e6:f9:
b5:b8:6e:dd:bc:08:76:58:78:2c:a9:0d:14:82:fd:c4:18:0a:
6a:7a:87:d1:31:27:d6:86:97:39:da:f7:62:a1:d2:dd:8f:eb:
e5:b0:28:2f:ee:4d:3b:61:2e:74:f6:36:c2:f9:05:63:39:00:
8b:f3:7c:23:68:4a:04:0a:38:78:94:0a:da:7e:a1:d4:0d:10:
4e:d2:a4:a3:ce:94:1f:07:cd:71:67:5e:f4:b7:a2:f1:6d:3f:
0a:a5:cb:a2:b2:28:2b:02:4a:98:c7:b7:33:2c:7f:32:85:58:
17:7e:d5:eb:ea:f2:2c:ed:47:a1:52:2a:e6:e4:06:b5:6a:03:
57:1f:b4:a8:e2:be:d8:eb:fb:5c:1e:92:7a:e0:9f:d7:4d:d8:
57:55:21:fc:5d:a2:88:4b:48:1b:ac:5c:69:3c:47:d8:90:1f:
43:70:9c:a1:16:36:7f:a6:0d:45:21:6a:d3:a8:53:d0:27:0f:
3b:cc:e0:58:93:81:15:ad:6d:2f:8f:fc:de:23:31:17:80:78:
a4:7d:10:36:c9:92:00:50:96:73:d7:3c:dd:c3:eb:99:9b:cb:
fa:6e:50:81:e4:83:ff:7d:13:d7:9b:0f:68:f8:76:ce:6c:17:
a4:92:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:54:32 2026 by rpki-client