
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa
File: d0006625-f457-3068-ab43-dd1b3162c248.roa (raw, json)
Hash identifier: 847CIND6YC+BHFZp+Gp0xDE94oITwtjOL2ENhUk296M=
Subject key identifier: 52:71:0C:3F:2E:AD:C1:1A:2F:6D:2F:0E:DD:E0:94:98:4E:0C:F1:E4
Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial: 010D0C9F4328584E2D9F42421543A4FC1F7F0380
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa
Signing time: Mon 15 Jun 2026 09:00:12 +0000
ROA not before: Mon 15 Jun 2026 09:00:12 +0000
ROA not after: Sun 13 Sep 2026 09:00:12 +0000
asID: 20115
IP address blocks: 209.114.4.0/22 maxlen: 24
209.114.8.0/21 maxlen: 24
209.114.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2d:9f:42:42:15:43:a4:fc:1f:7f:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
Validity
Not Before: Jun 15 09:00:12 2026 GMT
Not After : Sep 13 09:00:12 2026 GMT
Subject: CN=66e7addb-787b-46e0-90d7-afef3b78fc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:ae:f8:6a:72:bd:a8:18:6d:b6:27:44:ad:
e5:5b:b6:e7:78:fb:26:4e:7a:d6:31:ab:39:6a:35:
78:81:57:15:60:2b:9c:44:88:9a:e1:4c:92:dd:ca:
aa:6e:59:d0:38:3e:24:57:29:bf:57:3b:6a:38:f3:
31:d9:20:c4:bf:87:5e:63:7d:9e:09:c9:24:23:4b:
ef:bc:9c:0d:bd:7c:82:e3:4f:67:4d:54:59:94:70:
14:86:42:cc:fa:1b:08:5b:a6:81:d5:94:bd:c5:6c:
d9:50:40:cb:eb:41:f8:b7:d8:c7:0f:43:d0:33:74:
50:ed:60:21:0a:c1:d5:60:e3:f0:4b:3f:7c:cc:2c:
de:07:32:fd:f8:1a:97:75:6c:f0:5f:8e:52:6a:b6:
a5:8d:10:80:46:96:a2:63:0f:dc:75:8d:b7:55:5a:
d8:87:c4:66:9d:79:f5:d5:7f:c9:29:04:72:d7:04:
e8:08:ac:24:a8:d9:64:9c:c0:bf:67:11:99:aa:7f:
86:2c:bb:0d:8d:9d:2a:84:9d:53:66:90:18:0a:cb:
a6:73:d1:4d:15:06:96:f9:b2:c0:6a:f9:c1:bf:91:
c5:a7:be:3a:4b:9e:d7:e6:a5:fb:f5:b6:50:bf:f8:
60:f5:b7:b2:6c:ef:ea:73:1e:90:d4:1e:a2:8f:99:
8d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:71:0C:3F:2E:AD:C1:1A:2F:6D:2F:0E:DD:E0:94:98:4E:0C:F1:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
X509v3 Authority Key Identifier:
keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.114.4.0-209.114.31.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:02:d4:81:82:7a:4c:a5:32:31:9b:de:62:dc:ff:fc:e8:84:
29:f1:f2:d7:64:0a:dd:e1:25:fb:72:e7:4b:c0:86:02:25:72:
92:c9:70:6e:21:b1:98:2f:6b:03:54:66:e6:e0:c5:f5:0c:cc:
ee:5e:c7:d7:a7:22:24:6f:3a:cb:1a:96:28:73:3f:ca:3c:22:
ab:ff:b5:ad:95:0b:5c:2d:6a:0f:97:41:15:3a:5c:e7:07:5e:
9b:57:7c:0f:94:dd:17:dd:c1:9d:f9:88:67:02:9c:6e:13:2b:
4e:f5:6f:6f:8d:8c:8d:0d:91:fc:5d:ae:3b:70:f1:54:b5:43:
92:66:16:eb:6c:36:8a:fa:5e:34:15:10:68:53:82:ee:a2:18:
9f:b7:72:d9:05:0b:ea:a5:0b:6b:fe:5e:d8:cd:d5:76:33:6b:
37:04:99:8f:11:bf:1c:8d:67:3e:02:c8:f9:1a:88:73:c5:62:
49:5f:46:20:d9:2a:f7:44:c4:2a:76:9a:ed:89:94:56:18:0e:
1a:89:9c:91:4a:f4:73:1c:ed:7a:34:3d:fa:e5:6d:8e:d6:75:
97:ff:f6:d2:00:20:b0:ad:fd:39:f8:8c:c5:23:bb:f1:9e:56:
a0:82:95:1c:d1:51:f7:92:a0:39:c4:4b:74:12:cd:90:e3:c4:
e0:dc:60:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:33:37 2026 by rpki-client