
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa
File: 503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa (raw, json)
Hash identifier: WxRA+xYczJXi+nRnUpAquwnDNJpdHVPUwTk5iihEOr4=
Subject key identifier: E2:34:C9:9C:61:7C:1E:C9:A2:B5:33:03:A8:E8:3E:64:D8:6F:DF:58
Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Certificate serial: 010D0C9F4328584EA788D90D694F754F2B26ADC0
Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14618
IP address blocks: 208.64.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:d9:0d:69:4f:75:4f:2b:26:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=a49917ca-ce92-458e-a5b6-e7a02a4c2252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:c0:d0:ca:f0:dc:52:ae:60:9f:b9:93:5f:
2e:dc:ed:15:2a:4c:62:da:24:52:b5:16:a9:f9:81:
b5:f3:47:94:cf:4f:d8:da:64:08:10:6d:c9:88:a7:
63:84:b9:5e:1a:4f:02:97:71:9a:67:4f:5a:f3:bf:
1d:a1:5c:74:b8:14:b6:10:18:1d:0c:9a:17:00:43:
8f:27:9c:3d:13:d8:7e:65:0e:70:c6:b8:e6:a4:29:
f7:cb:b4:83:70:7b:bc:10:9e:32:96:94:6c:e2:68:
40:74:c8:c5:c1:8b:42:48:34:f6:c2:dc:8b:6b:2b:
6d:00:6b:db:54:ca:ae:53:b6:03:f4:fc:61:28:52:
e6:21:70:bd:ac:ff:5d:5e:75:6e:87:26:f3:f8:d5:
2f:1f:7d:5e:84:c5:2a:0c:a7:e1:77:e9:a1:82:28:
8f:82:cb:8c:ec:2b:fc:54:8e:31:9b:ce:fc:29:64:
1d:53:a7:22:ec:ea:05:24:c3:af:9c:98:ed:45:4e:
70:a4:e6:16:71:3f:0b:82:a9:f1:33:6b:63:f4:b2:
26:52:8e:f3:e8:b8:84:d6:b6:fe:2b:53:cb:a4:a8:
5d:a2:9a:96:e9:1b:75:63:27:e3:01:36:83:1a:d8:
c1:14:76:5e:63:fd:8c:71:4d:e1:9f:8d:3f:14:63:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:34:C9:9C:61:7C:1E:C9:A2:B5:33:03:A8:E8:3E:64:D8:6F:DF:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl
X509v3 Authority Key Identifier:
keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
sbgp-ipAddrBlock: critical
IPv4:
208.64.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:5a:16:78:3d:62:bf:cc:6e:ad:97:ab:18:cc:34:f7:a8:eb:
f5:91:64:69:ce:a4:0b:4e:55:fb:21:08:7d:36:a5:9e:d7:fc:
4b:bb:8a:47:ce:67:35:da:23:cc:1c:2d:b2:7a:4f:5a:b1:b6:
27:8d:8b:fb:62:15:04:bb:9a:d4:ac:ee:9b:ac:86:c4:0f:a1:
e7:0d:6e:c3:3c:d3:99:71:e9:e9:53:2a:1c:32:69:34:7f:78:
21:d0:68:a4:77:3c:40:f5:45:10:34:40:5c:01:8b:64:3b:04:
a1:96:00:8c:81:ca:f4:e9:1f:c6:ec:e3:cc:a7:b9:01:24:64:
89:ef:33:30:75:8d:d1:8c:c4:b5:04:13:5e:d7:a1:ea:8c:5a:
b9:0f:78:0b:23:c3:db:20:50:a5:eb:ec:5d:5a:85:d0:17:6c:
9b:ca:a5:56:2a:a1:48:2a:64:9e:e1:5d:87:7a:c2:46:16:3b:
61:7d:9a:ce:aa:e0:d9:d0:5f:a8:b1:e9:06:7c:70:fc:6b:3e:
52:84:c4:17:6d:69:54:7d:81:1a:07:16:fa:65:d0:e3:da:44:
a3:f0:29:37:d8:3a:64:8f:f6:0a:93:65:78:bd:6d:d8:68:aa:
f9:5d:2a:cc:a8:0f:67:6c:00:4b:32:95:ec:e8:f9:57:38:2e:
25:b0:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:36 2026 by rpki-client