
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa
File: 3a315f55-20c2-37ff-b50f-af30c5811ce0.roa (raw, json)
Hash identifier: 9lWtax7SmbSLV7ax63P6f7woAu+2No2kBUtc6/IqIW4=
Subject key identifier: EB:B2:40:97:F1:CB:3D:BA:BC:E9:1D:8F:4F:B2:A5:77:5C:A0:8E:9F
Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial: 010D0C9F4328584EA79A29A0F8415297B32A7F80
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7018
IP address blocks: 209.114.4.0/22 maxlen: 24
209.114.8.0/21 maxlen: 24
209.114.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9a:29:a0:f8:41:52:97:b3:2a:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=5ae714a6-2cd7-4887-b795-c96372316e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:da:a2:83:6f:6d:b5:0d:b1:e9:26:e7:cf:
fa:11:e2:a7:bb:62:72:7d:93:18:ee:c2:4b:68:90:
d2:cc:c4:f9:30:d9:0f:65:3e:f3:a7:bd:bb:b5:9c:
de:a1:2b:a2:eb:37:20:9c:3f:a9:2d:7e:3d:1d:aa:
0e:eb:85:58:69:ed:d4:ff:f3:1b:74:57:86:c5:f5:
6a:87:4b:22:25:1d:69:bc:8e:6e:35:21:2d:11:99:
e0:84:be:90:c1:54:2b:cf:dd:01:c2:56:f9:cd:d3:
6c:c0:97:d3:95:e0:0a:a4:c3:da:f4:8d:b3:b6:0f:
d7:e6:89:81:51:d1:48:e3:51:61:72:77:98:6f:44:
01:2c:77:19:45:a5:ee:61:54:c6:82:91:6f:60:0f:
bf:0e:42:55:bb:a3:9c:4d:43:45:64:1e:21:15:bf:
7e:d0:5a:97:ff:03:df:83:53:68:9b:1b:39:6b:a9:
54:36:8b:7a:ba:98:15:87:9a:3a:10:ce:13:14:d8:
01:db:20:c5:64:10:de:63:f9:b3:37:ec:b7:73:f0:
08:d0:17:58:5e:c9:8e:38:5c:24:31:4b:a5:5e:2f:
e2:cb:d3:92:0e:65:24:46:93:2d:d2:31:cf:d9:0e:
4b:9e:bf:21:57:aa:40:f9:d1:05:4e:1f:35:76:93:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B2:40:97:F1:CB:3D:BA:BC:E9:1D:8F:4F:B2:A5:77:5C:A0:8E:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
X509v3 Authority Key Identifier:
keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.114.4.0-209.114.31.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:f3:75:3c:7c:22:5c:e5:64:76:1a:f2:99:a3:9d:a5:b7:1c:
fd:2a:79:06:a6:21:cc:76:60:40:79:d8:bf:cf:7a:f7:f3:94:
d3:23:3e:1c:2b:cd:26:24:d5:15:d6:44:66:5c:03:9e:73:bc:
76:a8:e6:a8:ed:29:6d:09:1a:89:49:bc:d8:b2:cb:6a:a3:fc:
2b:f6:23:0e:dc:a0:f6:05:11:14:a3:45:d8:d7:2c:3a:a3:f4:
3c:b4:b2:cc:cf:8b:0d:e1:81:51:99:1a:c0:65:9b:a3:69:94:
71:18:9c:5f:fd:60:f4:4e:4c:5f:ae:2f:9a:ce:f5:ff:c5:19:
bf:1d:3b:a7:fb:75:9c:39:b3:f4:4e:c2:0f:ca:cd:66:19:34:
8b:62:cc:24:cd:ce:87:f8:03:ad:20:c7:e3:1d:ae:b5:ff:ae:
36:95:e6:84:e9:f3:01:68:d2:db:dd:83:b6:27:46:f0:e8:cd:
15:91:b6:6a:51:01:ba:3c:bc:ec:97:ce:08:16:9a:9c:b1:8b:
b6:5f:b2:53:db:f8:81:b3:cb:bd:23:f4:7d:a1:0d:66:07:a2:
09:c5:d1:87:fb:32:6f:92:ad:68:b3:a4:87:47:87:ae:0a:7c:
4e:91:cf:97:58:a1:2b:2c:e3:ee:44:05:c1:a5:83:f4:44:b8:
04:fb:fa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:17:31 2026 by rpki-client