
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7b990af5-7866-397a-9d61-3f08feb8f6c3.roa
File: 7b990af5-7866-397a-9d61-3f08feb8f6c3.roa (raw, json)
Hash identifier: cgjkMFmifbIvkbyskUIAIPs7UmttUXCCtTSL3Xl7h68=
Subject key identifier: 14:6D:12:BB:41:2F:66:2F:D8:DF:4F:20:F3:69:DA:E7:7F:37:1F:49
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F4328584EBDDC5ED0E60DA35871B5F040
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7b990af5-7866-397a-9d61-3f08feb8f6c3.roa
Signing time: Thu 06 Aug 2026 01:00:12 +0000
ROA not before: Thu 06 Aug 2026 01:00:12 +0000
ROA not after: Wed 04 Nov 2026 02:00:12 +0000
asID: 2559
IP address blocks: 198.241.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bd:dc:5e:d0:e6:0d:a3:58:71:b5:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Aug 6 01:00:12 2026 GMT
Not After : Nov 4 02:00:12 2026 GMT
Subject: CN=2b1ec8f7-8280-4fe8-ac21-9dc1e185f722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:08:4e:bf:b8:74:92:c5:c5:24:05:4c:07:30:
ce:5a:3b:6b:91:39:af:31:f4:22:58:52:0f:cc:99:
76:37:24:b9:c1:5b:07:55:17:b4:be:b4:72:83:02:
6c:59:5f:71:20:b5:8c:98:38:6f:63:06:7d:04:3a:
1f:27:4d:2e:1a:da:03:e0:43:73:9d:ff:e7:e7:12:
be:a8:25:21:cf:04:a7:57:ab:af:5c:08:e3:d7:f5:
f3:42:8a:0e:0f:de:ab:8b:1d:23:dd:d9:4b:86:0d:
3e:39:e9:40:20:96:25:08:a0:86:dd:ac:d8:1e:1a:
e6:40:90:9c:cf:20:d8:bc:a8:76:d7:7d:d5:30:4d:
bf:01:6c:ae:a2:3a:40:a5:57:08:61:0b:bd:82:76:
e5:a0:ff:f3:5e:0e:97:23:18:15:bf:52:c0:83:94:
4e:c3:95:4f:76:d6:97:de:38:96:af:2a:cc:99:a6:
87:e8:ad:c0:ce:ed:60:c3:4d:4e:aa:26:14:48:85:
fb:23:e0:10:83:c1:06:58:f0:98:1e:c7:43:5e:31:
8b:ed:dd:4b:52:be:31:4e:e2:79:5f:2f:d0:54:47:
2d:41:69:84:e0:94:67:ba:bd:e9:e6:f7:5d:83:f3:
e0:81:de:5d:d0:c8:da:9f:d7:3f:4d:c2:07:d2:cf:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6D:12:BB:41:2F:66:2F:D8:DF:4F:20:F3:69:DA:E7:7F:37:1F:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7b990af5-7866-397a-9d61-3f08feb8f6c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:b3:f9:ee:7a:83:ae:45:f6:4f:b2:24:5a:b7:c8:0b:5f:20:
ad:c8:ac:a5:7c:8e:00:f7:6a:83:d6:65:14:4f:b4:0a:15:25:
1e:f0:9c:5a:18:a2:4a:7d:68:76:33:2a:31:4d:35:b3:2f:fe:
00:17:32:a8:db:ea:13:f5:11:b2:f4:52:f8:da:a3:56:57:0c:
0c:46:37:d8:33:2a:47:e6:8e:ac:b6:57:0c:ac:fe:44:88:05:
51:37:e6:3b:83:cf:6f:04:f7:16:42:6c:94:47:9f:7d:1b:09:
fb:a6:5e:56:d4:0b:eb:34:8c:36:04:b0:f8:fb:53:2a:a0:56:
65:f6:48:0f:98:4b:74:42:07:3e:a8:e0:19:3d:9a:3e:86:ed:
8c:88:29:ca:13:e9:e4:ea:6f:4a:2c:5e:55:9f:1d:a6:ae:e3:
24:16:fe:98:99:f3:38:96:a3:10:18:cc:bf:b9:e8:fe:db:d6:
96:c8:3e:ef:f0:ef:88:cf:6a:1b:33:61:ca:8f:fb:37:f0:32:
71:7c:02:b3:ef:ae:ec:93:49:ce:82:36:46:43:a4:7c:94:1f:
b4:e6:a8:7d:ba:1e:50:d1:e9:92:3b:09:a2:f1:30:85:68:02:
46:7b:c4:21:2e:02:4f:5e:5b:3d:c6:13:3f:cd:a1:32:40:1d:
08:9a:8c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:49:20 2026 by rpki-client