
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/db2db97c-090e-3ef8-8808-11dd13be11b9.roa
File: db2db97c-090e-3ef8-8808-11dd13be11b9.roa (raw, json)
Hash identifier: 7zxBbWnYQWF7bPNZtrGNPRCIwxQMz3wcWIfzmNsHnE4=
Subject key identifier: E9:99:39:88:53:EB:1F:0F:A9:0C:36:08:5D:90:2C:6C:9C:90:82:80
Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Certificate serial: 010D0C9F4328584EAC52E9274680B99F690DCC00
Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/db2db97c-090e-3ef8-8808-11dd13be11b9.roa
Signing time: Thu 30 Jul 2026 18:14:36 +0000
ROA not before: Thu 30 Jul 2026 18:14:36 +0000
ROA not after: Wed 28 Oct 2026 18:14:36 +0000
asID: 13340
IP address blocks: 68.171.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ac:52:e9:27:46:80:b9:9f:69:0d:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Validity
Not Before: Jul 30 18:14:36 2026 GMT
Not After : Oct 28 18:14:36 2026 GMT
Subject: CN=a41bd061-ecab-49b9-aeab-bba1f34536db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:d7:f7:5a:b5:0d:c1:5d:80:9a:3c:f1:d0:
05:4c:8c:35:1f:d0:fa:b3:c5:68:ee:b6:a0:98:bb:
5c:69:9c:93:24:da:21:2e:ec:33:71:86:70:18:5f:
04:5d:1e:c0:b8:00:8d:03:27:5e:5c:e5:6e:e7:b2:
ac:0c:60:84:1a:c3:7a:f2:01:4b:2d:ce:f8:af:90:
89:89:b6:3a:df:bd:4d:66:57:2d:3b:e2:9f:ec:43:
ab:b6:f5:fc:e0:10:51:93:d1:46:50:29:b8:80:05:
99:3f:b2:61:1e:f0:c2:5f:e4:e8:32:75:f3:94:ea:
fa:b4:1c:f5:5f:79:b1:ba:da:22:13:43:79:d3:0a:
5b:6f:86:fa:0b:a1:58:c5:a5:50:a2:6b:71:1d:b6:
39:db:90:7b:0c:ab:4a:fb:4f:c0:a5:3b:60:ed:04:
3d:84:81:3a:37:c0:0a:c1:1e:39:d6:10:80:17:a5:
5c:bb:e9:03:bb:c8:73:2e:b7:86:87:01:64:4a:f2:
45:83:56:06:88:4f:89:23:84:b9:cd:e2:33:43:fa:
c0:e1:14:d3:34:a6:2c:86:d7:df:e3:0e:03:11:d0:
f5:d5:4a:78:f4:43:42:4b:ec:4e:8c:1b:1a:ab:fd:
3e:18:6d:a3:95:28:90:d5:81:8c:1b:be:ad:0f:dd:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:99:39:88:53:EB:1F:0F:A9:0C:36:08:5D:90:2C:6C:9C:90:82:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/db2db97c-090e-3ef8-8808-11dd13be11b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl
X509v3 Authority Key Identifier:
keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
sbgp-ipAddrBlock: critical
IPv4:
68.171.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:db:ef:f2:05:e4:67:6e:13:62:88:6a:d4:09:79:9e:5d:70:
5d:6e:b8:d1:db:11:67:1a:67:16:9a:30:a6:5f:65:ad:49:e8:
48:83:3a:e4:69:80:7b:7b:bd:68:ff:9c:1e:03:ea:f5:4b:3f:
ed:9c:98:73:f1:17:6c:28:b1:79:0c:e0:7d:b9:8c:c8:ce:c0:
93:6f:99:50:85:fc:46:ff:00:b1:b8:ed:1f:f1:94:7a:d1:f7:
f8:30:e5:86:15:65:29:7d:97:70:5f:cb:90:33:81:31:7c:3d:
8e:d4:cf:58:60:d3:d6:39:ed:a1:5b:7a:3e:96:85:29:84:f1:
11:6d:c6:8a:2a:19:0a:49:c2:67:3d:73:6f:6e:35:b3:c5:7e:
47:88:01:40:c1:61:be:c9:ee:01:a0:55:19:d2:1a:f4:ef:67:
66:52:9d:2a:5e:7b:0a:3a:b5:d2:d3:14:ac:7b:f1:ca:c9:21:
b8:e0:de:d8:b6:b6:b4:b3:cc:12:8e:c9:1c:55:68:11:54:4b:
67:12:6b:16:28:0c:fd:1d:68:24:db:a5:80:5c:66:be:6e:86:
fa:a1:8b:70:70:ee:dd:ed:19:b5:2c:6f:06:55:3d:2a:94:34:
bb:a3:1f:17:9d:a2:3d:8d:7a:78:9c:62:81:50:4c:b5:bf:63:
0d:7a:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:13:53 2026 by rpki-client