
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa
File: 211726d9-186c-32fa-9269-934166f8a1be.roa (raw, json)
Hash identifier: oLn2DM9Mtp5yDIFZCda3QQlSi68Ix1YgByRup8z16sA=
Subject key identifier: 4E:7C:F5:44:2B:29:C9:F3:11:C4:9C:53:C7:2F:87:05:19:C0:EE:9E
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584EAE81A46039D54301848DD880
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa
Signing time: Fri 31 Jul 2026 13:00:12 +0000
ROA not before: Fri 31 Jul 2026 13:00:12 +0000
ROA not after: Thu 29 Oct 2026 13:00:12 +0000
asID: 11090
IP address blocks: 216.137.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ae:81:a4:60:39:d5:43:01:84:8d:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Jul 31 13:00:12 2026 GMT
Not After : Oct 29 13:00:12 2026 GMT
Subject: CN=13a8dfcf-c546-4306-bb48-32a493721743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:47:69:46:4e:ef:b4:c6:f3:d2:ec:a8:4a:3c:
7c:7d:67:3c:9a:48:10:bf:42:2b:a0:a4:a0:bd:58:
8f:0d:14:f9:25:66:10:1f:22:8f:18:e6:36:fd:9b:
39:79:cb:e2:07:95:94:b4:bd:90:ed:13:60:ee:33:
b2:24:ac:73:f8:82:d7:ae:32:f7:27:82:50:5c:0a:
d2:b1:8f:e1:64:de:56:8f:6b:ed:05:be:01:45:55:
52:2b:8f:7f:57:d7:d7:ef:c3:c2:ea:14:af:ce:27:
f0:d4:d7:a5:4b:ef:73:1a:97:00:24:87:4b:02:95:
d4:91:1a:ea:41:32:e8:f2:7e:14:4d:f1:52:68:c5:
31:c5:63:f9:5c:18:70:f1:f9:d9:41:8f:d7:73:9f:
1a:5a:7c:4e:37:5f:b4:26:8b:b7:fe:8d:ea:7b:32:
c2:c6:a0:6f:ff:e6:16:5f:67:bf:cb:a1:43:3d:b8:
62:d4:b8:21:b6:52:ca:5e:d7:09:a1:36:00:0c:8c:
49:e1:1b:e4:74:8b:61:f1:e6:bb:6c:ea:4d:01:7f:
b7:2c:45:97:5c:58:b2:da:5d:8e:b4:ab:9a:3f:46:
e7:ae:b8:aa:0f:46:3f:78:56:80:c1:c1:b5:38:4d:
c3:77:60:19:7e:c5:9c:25:3a:77:cb:58:75:a6:2a:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7C:F5:44:2B:29:C9:F3:11:C4:9C:53:C7:2F:87:05:19:C0:EE:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:53:22:22:1c:8a:b5:8d:64:81:bd:f8:5b:be:cb:ce:87:0b:
ce:79:5e:ac:01:81:a6:ad:2b:9d:71:ac:be:8e:36:a3:2b:4a:
23:b2:cb:c7:0c:69:38:16:28:b7:d5:83:f8:19:49:e6:24:4a:
43:59:e6:27:c9:95:9f:b6:c7:52:b7:a3:36:c0:7e:61:62:2c:
b0:c3:8c:fe:6c:a6:34:96:4e:b9:c4:16:aa:bf:6f:c2:c7:4b:
07:fa:49:1d:d2:1d:9e:27:7c:19:06:7d:5f:41:dd:15:9d:d8:
19:3d:c4:8a:7f:15:56:06:cc:48:1e:b5:49:9c:d2:6c:6e:0c:
d6:2d:31:d9:b0:7d:f7:45:5e:5a:2a:30:c1:88:18:52:16:48:
b4:e1:91:d3:d3:55:45:83:96:c8:c1:00:bd:61:88:07:58:20:
a1:f5:d5:80:f6:73:f4:69:f7:21:a0:e9:50:2b:af:39:92:a2:
e3:46:10:46:1e:9e:bd:c7:08:e1:76:5a:b4:b6:1c:16:4b:29:
91:5e:14:30:86:50:a9:76:b8:61:6d:8c:5c:ee:98:04:30:df:
9e:d1:24:f1:75:e8:99:79:29:8a:5b:39:cb:6d:ce:55:84:c2:
15:62:69:04:50:3d:f2:35:79:f5:ab:4a:b3:2f:3c:03:7d:7e:
70:92:99:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:56:32 2026 by rpki-client