
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa
File: 39a0738d-bd81-3dc4-bada-007779bfb3e8.roa (raw, json)
Hash identifier: KKj7ZEtCgdMGYP/BHEr5K/KUBWLIz2dopq5p2kV1r00=
Subject key identifier: A7:30:3C:84:DB:22:01:E1:BC:80:DE:60:26:0E:26:85:36:A6:8D:60
Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial: 010D0C9F4328584EB2B1B6EC8F961FA8ACE42A00
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 14618
IP address blocks: 204.194.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:b6:ec:8f:96:1f:a8:ac:e4:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=172fe86a-b236-4bf8-96a0-0ee0c4a0791c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:7d:2d:64:c0:8e:f6:0e:ea:7e:0b:b0:ce:
ff:e8:e1:1c:4e:5c:4a:ed:72:60:57:d1:6c:9c:db:
44:36:2b:a2:4f:27:b4:48:49:10:ca:a4:7b:86:00:
af:58:c2:db:e7:66:0a:fc:02:b5:b9:a4:6d:19:6e:
22:7f:2f:17:da:53:43:e7:f3:14:53:4f:c5:4e:bc:
59:54:54:b9:16:71:eb:74:1d:b1:03:54:ff:3d:e1:
be:b4:26:24:ed:25:5a:0c:58:50:f7:c9:c6:ec:e8:
8f:da:6e:58:c8:6f:01:26:ca:d2:76:8f:dc:34:e3:
75:be:a8:62:ce:ce:79:f3:5c:80:be:32:13:91:c2:
60:75:2e:6b:52:4a:cf:44:89:29:40:8d:62:f2:95:
51:3b:cd:65:91:aa:21:1b:bf:f2:f8:7f:df:d7:a5:
eb:32:27:f3:23:90:65:e9:aa:20:79:a1:78:a8:20:
55:68:d1:82:dd:e3:07:f9:e6:31:e9:50:84:0e:84:
42:1e:46:2e:b5:b8:94:81:0c:f7:64:a8:c4:56:87:
f1:a8:fd:05:85:49:52:87:73:69:02:7c:e3:98:37:
90:43:58:69:02:aa:0f:64:0a:42:e3:b9:a3:37:0f:
6a:78:45:7e:8e:86:a3:0d:fb:ba:83:38:91:0e:c3:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:30:3C:84:DB:22:01:E1:BC:80:DE:60:26:0E:26:85:36:A6:8D:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
X509v3 Authority Key Identifier:
keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
sbgp-ipAddrBlock: critical
IPv4:
204.194.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:33:42:45:bd:6a:0b:04:f2:96:ee:db:01:b2:a3:b6:d3:9e:
11:13:ce:b9:f6:8c:b5:e2:3e:2f:88:a9:32:71:17:40:2e:53:
9d:e9:53:06:90:66:db:be:22:9f:60:eb:ee:60:68:56:06:23:
74:2e:3e:61:aa:7e:33:69:18:de:cf:37:c1:8a:92:43:97:09:
b4:3a:aa:8e:1f:87:50:49:cd:82:c1:89:ad:d3:86:57:9a:62:
b9:05:69:f6:a9:35:d7:04:d8:75:94:fd:99:05:51:91:9c:bb:
ca:1a:23:82:0b:a3:cf:4f:2d:24:51:cf:41:8d:b5:a3:8d:bd:
ba:b3:6e:c4:d4:19:29:60:4c:2a:5e:1f:71:99:80:04:a4:88:
07:af:ae:2a:f6:5f:c4:66:19:97:5a:c9:41:c9:1c:91:f6:98:
ef:1a:1b:f6:4f:68:cc:21:4c:42:22:ab:87:8b:81:14:ad:1f:
e2:bc:81:1f:fc:f8:e5:4f:6f:b7:13:74:fc:ce:7c:15:34:53:
23:2e:72:02:f0:a7:9e:b9:5d:89:2d:5a:b8:03:be:55:3c:27:
fd:fb:81:38:f3:b6:f0:14:7f:31:b4:40:d9:4d:19:c6:d9:27:
c9:b5:e9:a1:7d:29:c4:4d:de:b4:7b:73:84:e0:5e:13:ff:c4:
48:be:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:24 2026 by rpki-client