
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/42fef5bb-1b7a-374c-b2b2-2b2e3db45f1c.roa
File: 42fef5bb-1b7a-374c-b2b2-2b2e3db45f1c.roa (raw, json)
Hash identifier: r0pJCVlCg7c3sLeeK/Fha5QCRlXLA04bHbBhyAMFbTA=
Subject key identifier: F9:9F:D9:20:37:5B:6E:26:C4:B2:28:77:56:AB:D8:5A:C7:1A:6C:0D
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584EA79254A4FDB4C3447582A620
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/42fef5bb-1b7a-374c-b2b2-2b2e3db45f1c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7346
IP address blocks: 154.9.212.0/23 maxlen: 23
154.46.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:92:54:a4:fd:b4:c3:44:75:82:a6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9ea4480a-bed5-4a83-bbc8-7d0f9a21901a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:8a:f8:0d:3a:65:78:62:25:71:30:c1:34:
83:1a:e9:6d:db:78:c3:d6:b3:90:59:83:32:22:18:
21:4f:f6:3f:8b:13:d1:ff:d4:67:a7:16:f8:5c:8f:
a3:e4:93:02:6c:b6:23:4e:92:7c:32:0b:79:29:fd:
c7:b0:71:de:fc:ed:d4:92:72:0f:12:8e:a2:04:f0:
da:c4:81:3d:90:95:c5:44:bc:aa:04:ef:bf:8c:65:
c4:33:83:da:1f:62:0b:b9:4d:fe:0e:d0:8d:e3:b3:
4d:3e:c9:ea:01:83:f1:38:47:17:88:dc:7b:c4:da:
f7:da:0a:86:d4:f5:0c:bb:c5:d4:9d:f2:9a:c7:72:
01:18:2d:2a:46:0c:a4:3d:f2:f1:4b:18:3a:f3:1f:
65:9f:d0:5e:88:5e:44:0f:25:1b:86:1b:25:38:5f:
fb:18:f8:d7:93:c2:e8:e3:be:84:5f:b4:b4:c3:bb:
2e:65:9f:47:e7:90:37:46:5c:2f:c5:1c:b4:1e:fe:
ce:1f:d1:27:0e:af:9b:67:15:4f:a3:4d:a0:c6:9b:
c7:e6:6a:be:81:30:06:bc:c6:4f:5c:d5:15:a4:77:
0b:93:8a:44:fc:e3:c7:80:8d:01:5d:b2:e8:79:74:
8e:e6:69:dc:cd:f1:3b:e8:d5:c5:da:9e:0d:fd:48:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9F:D9:20:37:5B:6E:26:C4:B2:28:77:56:AB:D8:5A:C7:1A:6C:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/42fef5bb-1b7a-374c-b2b2-2b2e3db45f1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
154.9.212.0/23
154.46.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:5b:a2:7a:a4:46:6f:7f:bb:e3:ae:18:0a:94:0c:7e:0b:6c:
23:f1:1a:d4:b4:49:3e:07:8a:30:94:e7:4f:8b:22:64:3e:40:
d1:5b:b3:e2:2b:10:36:c3:a9:cc:0f:24:5e:c1:9b:35:ef:44:
09:03:76:51:c0:db:5b:12:fa:73:a6:48:37:80:63:f7:02:a4:
5a:71:00:4e:bc:c2:d0:e9:50:ae:07:88:ea:0e:bc:c4:48:c3:
2c:e0:ec:d8:5f:4a:14:0d:bf:6f:c2:14:0e:03:e5:ce:41:3e:
84:38:71:45:6e:4b:39:02:db:f4:5e:85:80:c1:70:60:0f:64:
89:d0:41:2f:05:1f:83:fd:f6:ca:0d:e7:7b:08:20:c0:b8:d2:
54:e9:6f:17:f5:06:9b:d8:39:04:8c:00:0b:e2:ab:25:12:dd:
6e:b0:e7:0a:f5:e1:ca:e3:14:e9:30:73:2d:59:e1:b7:fc:e5:
ea:fd:c2:7a:96:f8:b0:fb:58:67:72:66:be:d2:d0:f4:82:11:
e9:c0:18:07:f6:99:02:1c:42:1d:42:8c:da:f9:cd:3e:47:3d:
16:05:a0:64:81:18:76:5e:11:0c:9e:82:cf:bf:c7:1d:f6:8c:
ee:cd:91:35:fa:9a:b9:a3:74:5b:18:ec:ce:b0:17:9d:11:c0:
49:7e:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:48:59 2026 by rpki-client