
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa
File: 2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa (raw, json)
Hash identifier: MWpTD9ZKreQD8u+4wmp4qgV/uoGDmAITZs8THN2ru9U=
Subject key identifier: E9:AE:D9:59:B8:43:44:37:98:D6:0A:4D:71:48:0E:EE:5C:AE:75:FE
Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b
Certificate serial: 010D0C9F4328584EA8EC46F1F35A0BA556C1B6C0
Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa
Signing time: Wed 29 Jul 2026 13:00:12 +0000
ROA not before: Wed 29 Jul 2026 13:00:12 +0000
ROA not after: Tue 27 Oct 2026 13:00:12 +0000
asID: 21976
IP address blocks: 192.135.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 12 Aug 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a8:ec:46:f1:f3:5a:0b:a5:56:c1:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b
Validity
Not Before: Jul 29 13:00:12 2026 GMT
Not After : Oct 27 13:00:12 2026 GMT
Subject: CN=7f2d234a-921e-4a0b-b3c8-9d41d385e33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:ae:30:72:56:9e:4c:69:2c:04:08:80:7a:
92:2d:06:26:cc:2d:72:60:bb:f6:7d:42:fe:9a:4c:
d0:64:d6:23:d4:9d:4f:04:44:e3:82:13:e4:ee:5d:
b8:12:79:e9:b0:85:9b:7b:ed:41:75:bf:bb:d3:60:
2a:5d:70:1a:20:95:79:8a:84:8f:9c:78:76:a7:58:
b3:30:0e:90:dd:16:9f:2c:99:ec:a0:b4:f0:ea:7f:
9b:d2:5f:5d:ab:ad:7c:bf:30:87:d2:50:7e:aa:b4:
43:ff:91:4c:4c:d6:d6:79:33:3e:dc:14:68:d4:cc:
d5:11:85:07:de:85:28:69:fd:bb:56:70:18:88:ac:
c7:9c:af:a2:47:c6:6d:a2:82:d0:24:53:30:e7:53:
d0:5a:58:1c:01:b5:fa:1c:d8:7e:c7:29:a0:ae:0c:
b5:56:c9:98:f4:7b:f0:e0:00:ef:dc:20:01:6f:d5:
e9:35:9d:38:d6:10:11:5a:27:f9:e2:75:04:21:81:
97:6f:b3:00:84:c9:f8:e7:a1:38:c1:06:3e:e2:53:
1a:64:a5:ef:d8:7f:5d:fb:32:1d:5b:f1:13:bf:ae:
30:92:b3:07:e2:6b:20:60:79:12:1d:54:ab:fd:c3:
44:a8:a6:44:b7:17:ff:e5:90:f1:41:23:ec:fd:a1:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:D9:59:B8:43:44:37:98:D6:0A:4D:71:48:0E:EE:5C:AE:75:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl
X509v3 Authority Key Identifier:
keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.135.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:b0:7b:1a:a7:9b:a2:e0:b2:5d:d5:8b:f3:1d:f1:26:e3:9e:
11:18:58:5f:70:88:c4:0a:bc:aa:18:ea:d5:c8:1d:9a:0e:1f:
9d:32:b1:35:93:af:63:d4:5c:18:d5:22:43:8e:5f:5b:0d:14:
56:c6:a7:0a:0c:d3:b0:d7:28:8c:06:3f:6c:2f:16:7c:ee:95:
ac:ea:0c:36:e7:b5:db:72:07:fe:98:88:ac:4f:bc:25:54:57:
2b:54:49:28:8e:47:67:9e:a5:00:c6:f5:30:3b:49:5a:da:e7:
18:af:bb:5a:1d:bc:2e:03:65:8b:49:30:23:84:fe:23:7f:ed:
13:5c:1f:d8:a0:80:07:38:0c:fd:72:33:15:7a:95:18:86:21:
4d:e9:75:30:c6:77:c9:44:02:31:69:60:4d:4b:0b:23:9c:5b:
d8:f7:0e:6d:6d:d3:1f:d8:94:85:ae:8f:2c:a9:3b:1d:b1:fe:
01:9f:e6:8d:a1:fe:ec:09:1d:c5:19:e7:ff:38:27:62:e5:7b:
2e:e5:cb:ca:43:9f:c7:46:c8:ce:5c:17:c2:b2:43:4e:b6:20:
04:a4:b6:88:63:a8:18:f0:40:9c:69:a5:bb:28:80:66:3c:4a:
2a:2f:bd:8a:2b:be:ec:f2:56:31:31:57:a3:61:c8:bc:db:43:
c5:81:da:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 14:38:08 2026 by rpki-client