
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/4708b10c-3648-3373-9acf-3645bce5eb34.roa
File: 4708b10c-3648-3373-9acf-3645bce5eb34.roa (raw, json)
Hash identifier: D88izqOqUrChiyATdyAOG57NjSfXAI3y2vhown2QMiQ=
Subject key identifier: 98:0C:B1:80:E4:F7:EB:87:6E:AA:B2:C0:B7:C8:BA:E8:33:2D:18:22
Certificate issuer: /CN=a6cb961c-bbec-4bf2-94ad-a034b3fd3cba
Certificate serial: 010D0C9F4328584E46BF2548F6EC2D71706B2740
Authority key identifier: E0:84:FF:89:3A:B6:40:3A:5C:30:5B:96:93:7C:3A:A7:E3:1E:0B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/4708b10c-3648-3373-9acf-3645bce5eb34.roa
Signing time: Wed 24 Jun 2026 09:00:12 +0000
ROA not before: Wed 24 Jun 2026 09:00:12 +0000
ROA not after: Tue 22 Sep 2026 09:00:12 +0000
asID: 40156
IP address blocks: 142.249.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:46:bf:25:48:f6:ec:2d:71:70:6b:27:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6cb961c-bbec-4bf2-94ad-a034b3fd3cba
Validity
Not Before: Jun 24 09:00:12 2026 GMT
Not After : Sep 22 09:00:12 2026 GMT
Subject: CN=927b9ce7-3735-410e-8815-09fbb26ed41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:2a:2f:e8:66:60:6d:22:61:e6:d2:8c:f1:
0f:df:e4:ef:d0:83:aa:9b:81:bb:01:10:e2:ef:62:
ec:48:f8:31:39:77:5b:11:fe:bf:07:39:bb:7a:37:
37:90:c0:93:04:83:57:f9:af:32:c0:18:19:d1:45:
b8:ca:78:bd:e1:86:6b:ed:96:76:c8:a8:54:01:e7:
2c:9e:20:84:7b:da:cd:8d:c8:6a:1d:bd:01:f9:da:
10:16:76:58:3d:23:e3:ca:17:e1:66:f4:a9:ce:ef:
61:a3:5d:3e:a1:13:7d:26:24:78:13:3b:d0:40:87:
86:0b:73:da:15:c0:00:5d:48:1b:c8:25:04:c6:06:
92:18:0d:e6:ca:71:ea:c6:27:67:8a:5c:c7:cb:4d:
1b:a8:61:be:5f:05:f5:83:be:d9:40:01:99:35:bc:
c3:88:8b:78:70:d4:e2:56:cf:6b:09:c3:19:0d:19:
5d:bc:f0:f5:f8:b0:26:5a:11:5c:e1:51:1b:76:6c:
b7:90:bb:1a:d9:8f:a8:be:11:90:f1:c4:70:2a:5a:
5c:d0:7d:86:34:38:7b:2d:2d:8f:e1:f5:e2:d2:a4:
66:19:6c:73:01:47:76:f0:f1:cf:33:43:09:a1:74:
de:7c:8d:96:5b:69:44:e1:b8:c2:8a:88:c3:05:74:
32:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0C:B1:80:E4:F7:EB:87:6E:AA:B2:C0:B7:C8:BA:E8:33:2D:18:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/4708b10c-3648-3373-9acf-3645bce5eb34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.crl
X509v3 Authority Key Identifier:
keyid:E0:84:FF:89:3A:B6:40:3A:5C:30:5B:96:93:7C:3A:A7:E3:1E:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.cer
sbgp-ipAddrBlock: critical
IPv4:
142.249.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:2f:e4:79:8a:84:8f:eb:16:af:fd:9e:6b:d7:a1:ec:d4:00:
2a:3d:19:82:b9:f8:b0:c7:73:df:07:1f:3d:c8:99:5a:9e:f0:
57:4a:c0:6d:33:07:92:36:a4:90:45:f1:10:18:ed:65:01:ee:
5c:0f:c8:f8:61:03:46:f9:64:fc:75:b8:1e:96:a7:aa:6d:07:
cf:0b:6e:78:74:60:1f:01:cf:77:c0:d7:2d:71:eb:5c:44:94:
04:4f:bf:f2:44:a6:f5:46:32:a5:e3:93:9c:2c:bb:93:fb:95:
cc:fb:c7:e1:dd:6e:67:9c:94:a9:67:d4:66:41:ca:ae:48:c6:
7d:1b:e7:d8:71:1b:2d:9a:d9:2c:95:be:6a:ed:ad:af:2e:0b:
da:1f:3b:42:cb:2d:99:8a:f3:d5:21:dd:51:f5:36:e9:50:f3:
63:20:f1:90:b2:a7:d0:74:17:e9:e5:7e:93:7d:c7:be:50:a9:
8c:f9:d9:9d:1e:1a:ac:7b:1f:93:50:a3:8c:ec:5a:73:51:62:
42:09:4f:4b:36:a0:7b:a8:03:a3:3d:6a:23:bf:d6:da:ff:e0:
69:bf:c8:86:4b:92:4d:79:71:5c:ce:31:9d:63:46:a6:af:d1:
d1:b3:c1:a8:3c:bb:c3:6d:28:09:b6:ef:ef:d9:9a:74:ab:cc:
aa:10:86:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:45:43 2026 by rpki-client