
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/7b9ec6b1-d3cd-3604-8cfa-fbcfe02cb517.roa
File: 7b9ec6b1-d3cd-3604-8cfa-fbcfe02cb517.roa (raw, json)
Hash identifier: ku9ltzud6DIJW6tivQUE4ivF8d7AfwWID56rzgDT/7o=
Subject key identifier: 36:8F:61:83:17:04:E9:0B:44:97:BF:4B:EE:AC:16:6D:36:B6:C3:44
Certificate issuer: /CN=dbf66384-fa53-47fb-938a-f1e5064023e5
Certificate serial: 010D0C9F4328584EE9296AF20914AE86530FA200
Authority key identifier: D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/7b9ec6b1-d3cd-3604-8cfa-fbcfe02cb517.roa
Signing time: Fri 21 Aug 2026 13:15:19 +0000
ROA not before: Fri 21 Aug 2026 13:15:19 +0000
ROA not after: Thu 19 Nov 2026 14:13:33 +0000
asID: 22616
IP address blocks: 129.176.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e9:29:6a:f2:09:14:ae:86:53:0f:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf66384-fa53-47fb-938a-f1e5064023e5
Validity
Not Before: Aug 21 13:15:19 2026 GMT
Not After : Nov 19 14:13:33 2026 GMT
Subject: CN=171cb1ac-a4e3-4e09-a179-2f9697dba4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:04:d6:af:d1:46:45:78:64:93:37:e9:4e:07:
fb:ed:09:07:d6:99:f6:cd:87:a5:3f:8f:38:04:55:
9f:65:5d:fb:d4:9b:fe:68:73:b5:d1:9b:ec:ab:05:
ab:b1:b4:87:2a:ac:2e:2b:7c:7f:fb:a2:ad:f1:47:
97:47:ee:30:37:f7:51:e2:22:91:02:7d:e6:55:bb:
5e:ff:17:fd:f6:ac:9a:80:2d:63:0f:f4:c7:77:48:
e5:bc:27:3f:4f:06:4a:37:14:4d:da:86:c0:bb:1d:
0b:c5:e2:b8:fc:1d:60:0a:6d:67:a5:0f:45:ec:24:
ca:46:f1:7d:41:e7:2a:89:61:6d:6d:c6:80:33:95:
1f:46:42:78:11:80:2a:3d:90:0b:87:9b:6d:a4:4f:
2a:e6:54:f8:74:0a:d7:25:95:9d:36:48:6d:26:b5:
08:c8:de:ed:fb:a4:0c:c9:be:7b:2c:30:93:3d:f2:
11:4c:9e:4e:cd:08:65:55:20:72:9e:99:09:13:29:
f8:40:20:3d:c0:12:3f:49:ae:69:ba:67:43:54:cd:
7f:42:84:b2:65:84:97:9a:1d:f7:7f:8c:db:81:ce:
fa:33:ae:a7:9a:75:94:db:39:19:c1:2a:cf:f6:13:
95:c0:a6:6b:70:b4:2c:88:bf:9e:9c:2e:62:3c:63:
b8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8F:61:83:17:04:E9:0B:44:97:BF:4B:EE:AC:16:6D:36:B6:C3:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/7b9ec6b1-d3cd-3604-8cfa-fbcfe02cb517.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl
X509v3 Authority Key Identifier:
keyid:D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer
sbgp-ipAddrBlock: critical
IPv4:
129.176.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:9d:54:85:06:74:e1:68:bd:7f:c5:ae:50:f2:2d:5d:1b:35:
24:2b:1f:01:d0:88:6b:f7:9f:ae:74:d3:d7:e0:86:30:40:04:
bc:9c:ae:a0:db:63:7f:73:e9:08:62:46:f0:2f:d3:ef:0c:74:
6e:05:e2:1f:2d:46:3c:81:fe:90:68:e0:93:d5:35:56:88:f0:
76:e5:12:cc:bd:4c:37:fa:fa:59:31:72:20:84:40:71:5c:c8:
71:67:27:4d:43:6c:2b:6a:21:b6:8e:6b:b2:73:71:59:df:99:
ae:e6:23:d8:60:19:25:04:7a:4e:0f:78:68:21:cc:a2:1c:b1:
13:1e:e7:dc:6f:b9:9d:10:34:3c:2d:8c:ac:23:0a:b3:2d:f5:
e7:ad:36:5a:7f:53:a6:48:98:1a:fc:4a:0a:58:06:7a:3f:1c:
82:02:07:e7:0e:e1:22:d5:20:69:c7:77:bf:d8:f5:1c:d6:4e:
cf:5d:a7:3c:6d:38:31:a2:d0:c4:4e:b9:94:20:7e:98:e3:b0:
9c:4e:00:85:1a:6b:a1:9b:c9:a0:d2:67:a6:9d:c1:59:2c:c9:
8a:c3:23:07:69:a4:a7:95:e6:4e:5f:81:41:30:e9:9e:eb:c8:
e0:79:27:7c:3d:45:fd:3e:56:84:dc:d1:3f:e8:92:1a:75:c4:
71:6f:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:13:53 2026 by rpki-client