
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfe2170e-3514-3acc-85bc-27f0367fb302.roa
File: cfe2170e-3514-3acc-85bc-27f0367fb302.roa (raw, json)
Hash identifier: 4TFV1brdGzVQqVQoWXQfy8JrySWMAHq0POHBmcKckZo=
Subject key identifier: 84:EE:72:91:F1:83:F5:68:CC:FC:E3:05:45:A3:79:D2:F1:44:04:E8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584EBF41AC67130588C0D1AA3000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfe2170e-3514-3acc-85bc-27f0367fb302.roa
Signing time: Thu 06 Aug 2026 13:00:12 +0000
ROA not before: Thu 06 Aug 2026 13:00:12 +0000
ROA not after: Wed 04 Nov 2026 14:00:12 +0000
asID: 36492
IP address blocks: 136.126.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bf:41:ac:67:13:05:88:c0:d1:aa:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 6 13:00:12 2026 GMT
Not After : Nov 4 14:00:12 2026 GMT
Subject: CN=4f976ba0-fe82-4798-9a57-c5e433f46380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:15:c5:99:f9:dc:b5:a6:f0:8b:ec:1a:dd:
3a:17:d0:85:98:78:cc:c8:d6:fe:c5:73:93:3e:30:
a0:40:c1:a5:31:ba:bf:1e:bf:59:02:60:36:2c:26:
71:34:cc:01:ad:dc:16:30:a4:24:cc:37:7f:77:df:
c0:41:c1:1f:24:dc:04:d8:61:f2:e2:53:80:e9:86:
6d:58:af:68:a8:97:85:16:39:7c:44:a9:db:9f:aa:
6c:9a:91:7f:98:78:66:9f:2a:ea:b6:bd:8e:4b:fc:
bb:0b:00:98:55:ff:a3:59:40:e9:b7:61:94:f9:56:
b5:d0:70:89:32:8a:95:f2:a5:fe:d7:1c:98:c3:99:
90:8e:e7:0f:75:70:88:fc:a1:56:96:dc:2c:fb:03:
97:24:45:92:1c:8b:a3:26:42:df:14:d2:81:d5:eb:
91:f8:32:d2:39:d7:dd:c4:37:90:fd:99:68:c3:eb:
1a:a3:77:74:b0:40:37:9f:f9:27:9c:26:3d:a7:26:
27:8a:b9:1d:22:75:57:87:8a:53:af:30:a2:fb:c6:
a3:aa:20:83:9c:dc:e3:ab:43:2a:a4:b7:ea:e6:2e:
43:be:ed:e8:67:d3:a2:b7:dd:3f:33:a2:d5:2e:13:
25:ab:6e:4d:97:47:4b:7b:6e:ab:d7:6a:f0:0c:c2:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EE:72:91:F1:83:F5:68:CC:FC:E3:05:45:A3:79:D2:F1:44:04:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfe2170e-3514-3acc-85bc-27f0367fb302.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.126.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:61:58:fe:ee:a3:25:49:32:86:7e:7a:d2:d2:5e:df:16:11:
09:31:d7:1c:5f:18:92:0d:0b:3b:84:63:a6:72:75:15:4f:c9:
19:a0:1c:80:d9:4f:7c:28:0e:c0:21:84:1b:b6:ab:68:f6:22:
9b:bc:df:47:41:3d:7d:3e:2a:95:c4:5a:b2:e3:a0:47:50:6d:
14:33:fd:ac:82:49:e5:c9:e9:4d:6f:c0:9d:a0:5f:c4:81:20:
fc:d3:c1:91:a0:14:18:75:66:06:cf:4d:30:99:46:62:64:72:
fd:3c:20:56:4a:d7:f6:a4:9e:ef:ab:5d:6b:3d:c7:01:35:9e:
b6:c9:75:b9:18:90:59:52:d0:0c:8e:77:a9:47:5a:b3:9e:46:
75:1f:6a:61:34:ed:f4:8d:c0:5b:02:6f:7c:bf:86:a8:8f:c9:
29:20:39:d0:19:99:a6:6b:40:23:d7:08:66:01:69:ec:f7:30:
16:00:88:61:53:f3:b1:cd:99:04:92:10:3a:60:25:50:cb:81:
e6:92:17:21:24:58:2d:be:d2:9e:08:e0:2c:dd:b8:56:40:87:
f3:c2:a7:40:6a:36:2f:68:8e:b7:c2:ca:6b:15:d6:83:2d:5f:
e9:7c:a6:c5:15:98:8d:55:a7:a1:33:dc:4a:1e:5c:9a:c9:15:
fa:97:e3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 01:53:38 2026 by rpki-client