
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0ce952a4-b414-3be6-8901-9b1edabcfa7e.roa
File: 0ce952a4-b414-3be6-8901-9b1edabcfa7e.roa (raw, json)
Hash identifier: ENqz3evyPEmaZ7xl5lAxMwSKqDJTNOJFUE0Pn9cNVNw=
Subject key identifier: 63:87:90:B2:DA:65:45:51:E9:39:95:2B:83:58:2A:87:9C:D6:6C:5C
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584EBBE871831AFCB5C818DA7F00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0ce952a4-b414-3be6-8901-9b1edabcfa7e.roa
Signing time: Wed 05 Aug 2026 08:13:01 +0000
ROA not before: Wed 05 Aug 2026 08:13:01 +0000
ROA not after: Tue 03 Nov 2026 09:13:01 +0000
asID: 19148
IP address blocks: 108.62.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:e8:71:83:1a:fc:b5:c8:18:da:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Aug 5 08:13:01 2026 GMT
Not After : Nov 3 09:13:01 2026 GMT
Subject: CN=0c567395-c6c9-4587-a58b-c29daeeb76e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0c:05:00:f1:de:27:60:36:e4:61:50:a6:0c:
f7:17:33:e6:76:3b:78:4e:69:d2:4a:32:2d:69:56:
3f:a0:37:29:9b:22:36:a4:61:a9:59:26:25:23:96:
95:ca:3a:19:64:c5:45:fb:8b:56:ea:af:0e:1c:08:
7e:38:c2:db:45:b9:dd:22:e8:90:ce:72:15:44:b2:
2b:8b:81:e7:ec:70:a6:fa:7d:b7:9e:00:e9:c5:c9:
c1:90:88:d2:d8:69:0c:69:4a:bc:6d:9a:d7:29:9f:
8f:8a:e8:a3:55:7d:1a:04:67:81:b8:a3:2d:7f:6a:
81:b2:2d:33:86:08:73:16:94:0f:5d:76:b4:45:71:
a2:c6:94:6e:0f:7f:9c:83:7b:d6:29:c3:aa:a8:c4:
f9:13:6a:d5:7e:08:42:ad:9b:f1:13:70:92:98:fd:
07:64:9b:33:43:86:45:91:43:c5:2a:ff:0b:8c:f8:
40:af:bb:cb:8f:6d:b5:93:cf:44:2e:f9:d4:b2:92:
45:96:1a:65:13:e7:70:bd:b8:1f:e9:9c:8f:34:2d:
fc:53:1e:f0:13:b4:6a:f1:e2:e3:63:d5:5c:9d:f2:
ba:5b:50:f2:0b:9c:05:9b:61:73:17:b0:68:6b:7c:
97:0e:bf:cb:79:b6:08:8e:bc:f7:f2:8d:b6:12:97:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:90:B2:DA:65:45:51:E9:39:95:2B:83:58:2A:87:9C:D6:6C:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0ce952a4-b414-3be6-8901-9b1edabcfa7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
108.62.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:9b:b1:7d:49:29:d7:d5:51:fa:27:09:d1:81:82:9d:ac:dd:
6b:fe:32:6c:ee:8c:c1:8d:93:c8:b8:4d:59:97:2f:4c:b6:0b:
cc:44:22:1a:0e:b9:3c:8a:bd:fc:ec:a8:a3:02:7e:69:44:69:
f6:e4:40:f2:d4:7e:bf:af:b6:e4:0f:4b:c7:65:ac:3c:d2:3f:
5c:a9:f4:e5:9e:1a:02:0e:e1:b9:1a:bc:14:27:85:8a:56:ac:
90:9a:52:e4:e8:2e:f9:26:f3:76:ef:d5:d5:74:65:60:14:08:
2b:3f:a9:89:99:8b:e7:72:9e:ae:12:f7:3b:67:07:b9:ab:59:
11:bd:43:fd:6d:2a:55:58:e9:c2:24:d5:a5:2b:b2:05:31:29:
a1:67:31:5e:2a:1c:6b:8c:79:6b:1f:49:11:4a:28:10:b9:e1:
f8:e4:fe:27:f4:cd:99:7d:79:e0:12:e5:1d:25:fa:63:fa:e0:
33:8f:7c:9d:cf:09:92:42:1f:06:91:fb:4a:86:30:6f:25:5f:
ae:6a:08:5b:5c:24:73:01:3e:0d:b9:b0:d7:2f:15:bb:3a:9a:
1b:87:62:a1:0c:da:55:12:51:72:af:b4:c1:c4:af:e6:7b:95:
ab:ae:2c:77:57:67:d8:ba:7c:9d:c4:84:14:67:e1:13:81:e8:
0f:a3:6f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:19:13 2026 by rpki-client