
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/857cf2d8-9526-35d6-b535-d164ddaed544.roa
File: 857cf2d8-9526-35d6-b535-d164ddaed544.roa (raw, json)
Hash identifier: RogfHhOSgK9eBqBaxDjAAYi3bSYMa3CksrUVALUi6+w=
Subject key identifier: 8E:99:A4:4C:58:3F:47:9A:79:AF:8F:1B:EE:2B:5B:48:E3:ED:66:C7
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F4328584EA8EC4D911D7A0493716E7740
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/857cf2d8-9526-35d6-b535-d164ddaed544.roa
Signing time: Wed 29 Jul 2026 13:00:12 +0000
ROA not before: Wed 29 Jul 2026 13:00:12 +0000
ROA not after: Tue 27 Oct 2026 13:00:12 +0000
asID: 22652
IP address blocks: 207.253.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 10 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a8:ec:4d:91:1d:7a:04:93:71:6e:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jul 29 13:00:12 2026 GMT
Not After : Oct 27 13:00:12 2026 GMT
Subject: CN=ec02da27-bdcc-4067-abe8-78d5630dd591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:ca:9d:69:c4:66:6b:a0:bb:6a:31:43:5e:
73:6b:ba:db:dc:d2:fa:07:4b:2d:b7:ea:16:44:4b:
c6:43:6b:06:a5:f7:8b:79:28:da:ac:b0:70:61:26:
67:6f:23:ae:22:8c:1b:6e:de:b9:53:46:1d:6e:49:
94:63:8e:01:5b:8e:e2:3e:85:75:47:9b:eb:19:57:
2b:cf:b8:43:30:9b:f2:1e:a5:ed:75:09:51:8a:36:
f0:d6:63:4d:8d:eb:2d:10:72:76:5e:6b:ea:f1:f3:
f4:aa:55:e4:54:32:e8:4a:dd:d7:d3:39:20:8b:36:
40:42:23:72:25:0c:03:21:12:7c:dc:6c:4a:e4:e6:
4b:a2:f3:66:05:62:38:26:d6:d6:98:37:f7:85:b1:
27:cc:fa:f9:82:eb:f9:da:2b:2b:54:7a:0a:59:d7:
85:53:37:8f:74:05:b1:ab:74:19:aa:8f:65:72:17:
b9:9a:fb:13:b1:88:45:32:f9:91:e9:47:ae:11:71:
64:66:15:6f:32:be:38:62:33:ca:87:b1:e2:d4:20:
c7:79:11:f9:20:aa:8a:cb:cf:fd:6b:69:86:12:5a:
e8:35:3d:40:b2:65:54:31:1b:7d:58:8b:9c:91:0f:
1a:9f:91:e9:b4:69:6c:4c:e6:19:de:8b:b7:e5:cc:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:99:A4:4C:58:3F:47:9A:79:AF:8F:1B:EE:2B:5B:48:E3:ED:66:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/857cf2d8-9526-35d6-b535-d164ddaed544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.253.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:57:67:b0:4c:00:03:0a:86:1e:b6:90:ae:aa:16:a7:96:94:
1a:a0:7f:c3:21:88:8a:3d:0f:cb:b8:52:33:59:76:21:99:3e:
48:77:62:f5:c1:8e:e2:f9:73:9e:4c:62:ec:c4:2f:08:f1:09:
ff:46:72:d1:d1:10:6d:5b:52:2f:5c:3d:c3:39:69:68:15:b7:
a9:67:30:7d:07:05:d6:4b:5e:8a:7f:76:59:82:f2:e7:f2:88:
21:1e:ad:25:51:a9:db:d3:06:21:4c:47:33:cd:a9:ba:e4:5b:
0f:e4:5e:d2:10:4c:2f:cd:23:36:2b:42:d8:35:ef:0f:76:9e:
4f:a0:a5:3c:7e:39:9a:44:ca:35:aa:ae:2c:13:10:9a:71:c5:
a2:3a:79:89:45:aa:d4:e0:03:ea:f6:ea:a2:14:e8:e3:ed:f9:
b4:bd:ad:a9:f2:f1:0c:67:d5:fd:47:65:02:28:a3:3e:ed:f8:
56:1c:21:0e:b1:db:68:32:57:c9:0f:01:9a:87:d6:8e:31:f0:
18:c7:3f:70:72:4f:c7:52:9b:e4:75:f0:ee:da:a3:19:cf:78:
20:68:bd:70:87:87:b7:49:f2:23:58:ad:99:74:a4:02:5a:65:
23:9f:64:72:65:b0:9b:db:a0:ef:1d:9b:5d:7f:06:86:5d:65:
cd:fd:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 23:55:46 2026 by rpki-client