
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/7e8a6158-b814-305c-b02d-c4597bfdf6b0.roa
File: 7e8a6158-b814-305c-b02d-c4597bfdf6b0.roa (raw, json)
Hash identifier: A1zqCwh5xB01loYBzLVRReMROi0EjhL08VOPiTxm1/U=
Subject key identifier: 41:FE:9E:28:D2:69:CF:ED:8E:5F:F9:F3:97:0D:D3:D4:76:34:FB:CF
Certificate issuer: /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial: 010D0C9F4328584EA787A8E426676EE70A92F6E2
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/7e8a6158-b814-305c-b02d-c4597bfdf6b0.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14618
IP address blocks: 208.122.32.0/21 maxlen: 24
208.122.40.0/23 maxlen: 24
208.122.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:a8:e4:26:67:6e:e7:0a:92:f6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=1c78fc53-6bc5-41cf-8a07-8665c130c0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:9e:31:e9:0f:34:d7:e1:86:8b:80:51:b0:
3b:87:ac:20:95:76:ee:17:4d:fd:9d:68:d7:88:9b:
86:55:ec:14:06:0c:cf:5c:4c:ee:72:90:45:5d:6d:
9e:5f:4f:8c:84:0e:b4:11:49:3b:b5:9e:6c:5c:f8:
f0:29:d4:35:67:c5:ea:3c:0a:8d:8a:45:e2:d8:f7:
1b:36:7c:78:05:c4:8a:b1:bd:f7:77:96:6b:57:e7:
4a:41:3a:17:bd:c4:c1:b3:84:b4:49:60:43:87:17:
03:b7:44:14:ca:2a:99:3e:68:cf:91:30:9c:7c:ce:
85:d5:98:ab:90:c7:0f:1a:2f:9e:97:5d:ef:50:9e:
d9:15:dc:1b:0b:c8:fe:cb:60:d8:02:6c:08:85:37:
e9:a6:96:8c:c3:6c:79:8c:5b:45:73:fe:51:d9:21:
64:b3:12:9f:12:de:d9:8d:2f:1c:9f:01:82:42:e4:
05:cf:2b:e0:fb:7f:22:54:b6:69:53:4f:28:4c:1e:
43:10:d1:76:90:17:a4:9a:87:b6:dd:3a:8f:fc:f5:
fb:cd:fc:dd:34:ff:bb:78:4c:3f:50:69:49:07:f5:
79:37:10:a5:7f:ae:73:1b:aa:9e:a1:60:3a:e6:66:
f4:53:66:22:7b:9c:8c:35:52:b8:af:b1:88:e7:94:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FE:9E:28:D2:69:CF:ED:8E:5F:F9:F3:97:0D:D3:D4:76:34:FB:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/7e8a6158-b814-305c-b02d-c4597bfdf6b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
X509v3 Authority Key Identifier:
keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
sbgp-ipAddrBlock: critical
IPv4:
208.122.32.0-208.122.42.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:5b:8c:f0:fd:9d:a0:de:9d:42:f4:fd:73:0b:98:ba:6c:54:
dc:7e:bf:a1:e2:df:e3:43:1e:56:c7:6f:f1:bd:74:24:41:ba:
67:20:9d:38:8e:bc:c1:11:12:e9:4f:01:1b:65:ca:fa:d8:c9:
42:06:b6:3e:4c:c8:c2:a4:f7:71:4f:74:50:32:02:e7:61:b7:
01:f8:1f:e3:da:8d:2e:27:d3:5c:13:61:60:c3:f8:ae:9f:04:
1d:2c:d4:0a:d4:64:31:5d:0f:5b:46:3e:b8:f5:02:b2:9b:0d:
88:fa:b5:b6:71:76:f6:7e:a6:56:5a:c5:98:a0:fe:b0:03:7d:
99:55:74:8e:09:bb:fc:d7:f5:90:28:b3:13:ba:84:3c:6c:20:
9c:d0:94:89:41:b8:f3:c5:9b:72:48:62:46:f5:a9:9b:7c:cd:
32:27:a3:7e:64:db:95:06:58:59:0b:7b:d6:80:1b:fb:6b:50:
0c:82:95:2e:a7:80:d5:aa:24:d2:3c:b9:ac:c7:3b:2c:b3:f5:
39:f3:88:8b:79:6f:50:42:85:79:9d:68:40:6c:dc:e9:7b:96:
84:2e:71:28:ae:67:e7:53:c0:17:9f:94:ba:15:fb:57:da:85:
f0:6b:67:f8:b3:bd:87:ea:70:92:e1:51:c3:55:1a:1c:99:4c:
7a:32:ca:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:41 2026 by rpki-client