
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/c9d102d8-0e75-3195-888a-eed61ed93779.roa
File: c9d102d8-0e75-3195-888a-eed61ed93779.roa (raw, json)
Hash identifier: qnOTtxAHOMY1qvX8vDCkTCkpeNSEfp86WkNnU/6P92o=
Subject key identifier: 67:53:E8:1C:0C:6A:F9:F5:F7:68:1C:5A:14:43:2F:CE:47:14:4C:A1
Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Certificate serial: 010D0C9F4328584EA7879332E5595958363910C0
Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/c9d102d8-0e75-3195-888a-eed61ed93779.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 197537
IP address blocks: 216.40.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:93:32:e5:59:59:58:36:39:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8855dcf8-c5a9-4d5f-a81b-6b1c098ba1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:a4:01:06:7a:c6:b6:97:c7:ed:ce:40:86:
51:c1:b9:09:f7:f2:9c:d7:d3:39:91:f0:aa:dd:96:
a3:7f:e0:e1:6a:e5:93:4d:7a:c6:c2:e5:04:bb:5d:
04:7a:df:fb:27:25:f2:0c:bf:ee:ba:37:88:0a:4c:
c3:ec:cf:e0:d5:da:1e:4b:36:de:39:21:db:e9:cb:
51:f6:56:db:61:36:71:55:61:b4:f7:9f:ea:44:ab:
ee:73:53:c7:01:ef:7e:f2:e1:07:34:72:a7:d0:04:
9d:09:7b:34:f7:37:55:ff:1f:38:39:78:16:cd:cc:
25:5a:8e:c4:35:be:22:54:53:b1:67:1a:00:89:a5:
6c:57:84:ba:c6:92:16:f9:ce:f2:95:ef:17:7d:c5:
09:6f:cc:24:cf:11:47:81:c4:b4:8d:06:f6:5e:ff:
cc:1a:d8:9a:6e:b1:96:07:c2:8c:e6:3b:18:77:2a:
b9:85:dc:f2:e4:29:71:22:cf:8d:a3:69:3f:f4:29:
51:2c:79:72:4b:b6:61:29:83:cc:0c:9c:ac:57:73:
e1:79:df:cd:ef:50:40:2d:7e:77:3a:7f:71:09:31:
b2:be:b7:c8:d9:fb:13:72:5a:fb:87:18:6b:38:f1:
4e:b1:b4:02:6a:5d:f1:de:74:ba:7e:5a:50:21:fc:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:53:E8:1C:0C:6A:F9:F5:F7:68:1C:5A:14:43:2F:CE:47:14:4C:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/c9d102d8-0e75-3195-888a-eed61ed93779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
X509v3 Authority Key Identifier:
keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
sbgp-ipAddrBlock: critical
IPv4:
216.40.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:98:80:b3:b4:22:f9:19:8f:38:87:53:78:f1:31:9a:9b:c0:
fa:55:94:4e:0a:b8:a2:43:72:1d:24:85:b5:d6:85:7f:79:41:
0b:fd:48:7d:de:ca:ab:5b:55:f3:09:34:f8:c6:df:0e:5a:61:
da:12:c8:08:71:8e:4f:bd:db:38:ce:09:47:65:99:55:a6:49:
67:28:00:77:7d:53:f3:c5:e7:a1:5b:07:12:6b:f4:0a:f8:4f:
4c:31:59:dd:e1:13:b5:e8:82:75:f6:a2:35:ba:2d:a9:8a:60:
e6:a7:fc:6c:b4:b2:0c:db:d1:ed:17:48:12:e8:4a:07:5d:ad:
f3:bc:fd:d1:bc:cf:ca:0f:2b:91:af:9e:5d:05:30:9c:bf:01:
11:73:71:c6:36:8d:23:98:9f:59:c9:44:7b:a8:70:35:d9:a0:
81:67:e3:5c:e1:37:72:cc:79:d9:3a:d1:4a:e4:92:da:29:ca:
84:c1:ec:7a:82:19:3d:37:21:ac:31:3e:db:9a:6e:85:17:49:
cf:4f:b6:98:32:8e:77:77:4b:6b:7c:e5:82:2a:60:bb:d8:11:
c7:37:d5:7f:ca:c7:69:61:f7:b5:c3:5a:05:e6:33:df:9f:66:
0f:48:5e:14:ab:7c:e7:4c:0c:e5:7f:2c:8d:12:a0:f0:fe:76:
96:d5:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:39:44 2026 by rpki-client