
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/331f3729-ca73-3b46-844b-08d80c0e6351.roa
File: 331f3729-ca73-3b46-844b-08d80c0e6351.roa (raw, json)
Hash identifier: 3aqqWhlBmAcSZSqiWD9QwKqfyqivltCvFCbPC/otMZA=
Subject key identifier: BC:80:30:05:81:62:E6:C1:43:A5:86:2D:63:E1:3B:C4:16:42:06:37
Certificate issuer: /CN=8e34a71f-aa28-4e58-b789-2715811effcc
Certificate serial: 010D0C9F4328584EA787CB593DCC11087B1869C0
Authority key identifier: 81:E2:E5:45:2B:2A:E0:16:B1:47:63:52:47:B0:3C:0D:21:7C:31:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/331f3729-ca73-3b46-844b-08d80c0e6351.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14618
IP address blocks: 209.99.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:cb:59:3d:cc:11:08:7b:18:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e34a71f-aa28-4e58-b789-2715811effcc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=2f7b0436-6168-4403-a734-809bf3feff9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:8c:a3:41:c1:7d:8e:c9:f8:31:38:44:d3:
cd:c0:27:8a:ec:ed:ad:9e:d2:93:d8:63:1e:56:ec:
4a:ff:21:d6:89:62:c3:0f:83:43:13:b9:18:ca:2d:
b4:be:7a:c3:03:4b:6d:ac:ba:f7:99:08:f9:11:e4:
ce:c7:eb:45:01:3f:22:79:ed:90:80:fb:e1:fa:c1:
61:92:cf:c5:c8:73:1f:88:f6:9c:74:a0:36:a5:9e:
76:09:75:b9:f9:23:54:99:6f:c9:12:a5:36:be:8c:
38:77:bc:a8:6f:ad:de:d9:c1:89:39:2b:8c:18:48:
c1:e0:d2:f1:89:42:f7:d9:5f:40:3b:50:58:b3:4b:
c4:a9:4b:98:a4:39:06:3b:0a:65:7c:da:f2:c2:7d:
84:de:3c:2d:c0:c0:df:fa:f1:ec:d8:b0:14:b9:b7:
a2:21:91:96:94:1f:b0:1d:7e:d9:74:66:31:fe:81:
5d:cc:53:eb:56:c8:12:db:d4:30:13:5d:35:f5:e9:
db:c7:14:2c:a5:a5:d9:67:2d:7a:f7:dd:a9:bd:12:
86:c5:2b:e2:a5:a6:97:4f:ba:22:51:4e:4e:17:d4:
f7:30:e0:86:c6:38:91:f7:c6:2b:ad:00:36:11:cc:
f5:12:75:ca:42:2d:a9:a4:53:bf:82:b0:0c:11:5b:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:80:30:05:81:62:E6:C1:43:A5:86:2D:63:E1:3B:C4:16:42:06:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/331f3729-ca73-3b46-844b-08d80c0e6351.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.crl
X509v3 Authority Key Identifier:
keyid:81:E2:E5:45:2B:2A:E0:16:B1:47:63:52:47:B0:3C:0D:21:7C:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer
sbgp-ipAddrBlock: critical
IPv4:
209.99.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:fe:12:ce:bd:bb:d9:9b:c0:cd:73:f9:d9:c0:ad:40:16:84:
0c:0e:21:0a:d4:6b:f9:ba:19:66:41:76:e1:2f:bc:52:8a:06:
60:ab:8f:e5:fb:e0:b2:3c:26:31:32:a1:b1:dc:1f:17:84:82:
86:fc:83:86:25:74:5c:72:e5:49:c2:9d:3b:ff:7f:d4:3a:1e:
9a:15:95:73:d3:54:f4:bd:7f:1a:fb:ff:9d:89:76:52:2e:3b:
18:52:88:cd:9e:e1:7f:b1:39:f0:57:8a:71:68:ba:69:bb:f6:
0b:50:06:c5:8b:ff:63:55:2a:91:6b:e3:b7:b2:cf:d4:12:93:
7e:e6:ec:e7:c5:ad:82:58:22:9b:87:e0:84:88:39:8a:93:3f:
b1:7f:5c:b2:3c:6a:f1:70:10:ee:dc:d7:15:f5:2f:e4:75:18:
e5:d8:39:3f:ba:8e:b9:91:f4:dd:e8:4e:e2:17:d6:68:3f:25:
ca:23:c5:6e:a0:c8:8f:66:ed:6c:8b:3b:8b:f9:b0:41:e5:6b:
ff:9a:20:09:8c:e1:fc:bb:df:2e:d9:e7:00:b2:4e:e7:64:97:
31:76:7a:39:87:24:d1:48:50:71:b2:0a:65:13:f2:95:fb:ae:
57:9b:b0:cf:f6:85:84:21:d2:2a:0f:09:54:ae:01:be:ce:31:
31:fd:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:39 2026 by rpki-client