
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa
File: 40a445a0-c71d-3db6-9909-8be2612ff8f9.roa (raw, json)
Hash identifier: 0vL5W0Pq1YkvgbQivVO75AkRm/ItucsWVb0n3V2RyuY=
Subject key identifier: E3:46:92:C1:CA:8E:8C:12:85:8C:41:C8:25:D9:D0:2D:8A:D8:F9:B8
Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial: 010D0C9F4328584E296F10075FB491E076385F80
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa
Signing time: Sat 13 Jun 2026 21:00:12 +0000
ROA not before: Sat 13 Jun 2026 21:00:12 +0000
ROA not after: Fri 11 Sep 2026 21:00:12 +0000
asID: 16509
IP address blocks: 209.114.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:29:6f:10:07:5f:b4:91:e0:76:38:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
Validity
Not Before: Jun 13 21:00:12 2026 GMT
Not After : Sep 11 21:00:12 2026 GMT
Subject: CN=6d601523-4346-40e5-9476-1aa5c6a38f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:7f:f2:dd:69:49:fb:99:c9:4b:de:f6:f5:
e9:69:0b:66:f5:0e:13:23:51:f1:5e:55:97:ba:44:
d2:41:56:5e:05:8e:09:5c:d5:80:2f:8f:39:f9:fc:
7b:5a:6a:0d:a1:61:76:fe:4b:1f:3d:5d:bb:f6:0a:
63:7f:fd:1e:9f:0a:95:de:3f:b8:f6:c5:c0:af:ab:
45:d9:bb:ed:9b:4d:9e:a2:36:2d:c4:3d:43:e8:f4:
5e:5f:89:68:6c:4a:b6:ee:26:a7:4d:c1:e4:43:3e:
ea:4d:51:36:8d:0d:e9:af:b5:7c:cf:60:86:9c:24:
26:52:d6:b2:1b:a5:36:01:3a:68:eb:3a:fb:bf:da:
13:89:25:3e:2b:f6:e2:2b:79:de:cc:c4:2d:35:32:
56:b9:ad:b0:52:16:3c:ee:a8:2d:42:6d:41:cd:8a:
cd:c2:e5:bb:fa:94:fc:05:1c:61:ca:91:88:11:7e:
ae:14:fc:f3:22:97:3b:aa:81:41:61:3d:df:7f:fa:
f4:71:9e:05:6c:12:39:b2:c4:f5:36:a2:d3:e7:b0:
54:73:62:a7:af:35:7c:cc:fe:6b:0b:c2:0b:3a:c3:
35:59:3e:6d:34:23:6d:c8:ba:aa:03:32:6b:a6:6f:
05:79:63:a5:f1:fc:ee:f7:ce:10:cc:05:90:c4:ec:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:46:92:C1:CA:8E:8C:12:85:8C:41:C8:25:D9:D0:2D:8A:D8:F9:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
X509v3 Authority Key Identifier:
keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.114.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:09:1c:e4:07:86:18:4f:49:65:11:b0:70:2c:d9:3c:27:f4:
08:2c:2d:cb:f9:75:89:51:e4:5b:a7:77:65:fc:f2:55:67:b9:
0d:40:59:e4:2d:07:58:68:83:b4:6c:1d:73:23:c3:af:3e:f3:
95:bd:14:b5:ee:f4:67:d1:9d:ff:c7:18:1b:7e:d6:ba:95:2e:
a8:49:a7:6e:bf:df:7b:ab:71:da:03:df:51:c3:7a:07:ab:d5:
ef:54:e4:44:aa:03:b9:76:c6:e8:27:c3:8b:11:0e:e3:65:99:
ea:a7:4b:1b:5f:d5:4b:7c:25:cc:06:bc:ad:bd:7e:12:dd:03:
38:59:5c:44:1c:24:35:1f:5f:41:1d:73:85:2b:ad:1e:ae:a7:
7e:34:04:3c:4a:c0:dd:81:9f:5b:11:96:85:4c:84:24:4d:7d:
1a:f7:49:bb:64:db:82:b3:5d:0c:bd:91:ed:5e:ef:31:0e:c5:
b2:50:3c:38:f9:31:90:38:67:ef:ff:99:3d:24:86:8a:a0:c6:
df:74:92:db:5d:0c:01:c9:a4:cb:35:03:b1:00:50:64:15:fc:
38:90:86:6c:5b:04:48:b3:2f:5f:f7:05:47:3f:fd:0f:82:bd:
ef:7b:87:3d:d5:f8:d6:e0:1b:d7:4b:ea:7b:ae:63:e5:76:93:
5d:c4:19:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:31:40 2026 by rpki-client