
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0/aad3b4b8-0834-359b-91ad-220179e65c7c.roa
File: aad3b4b8-0834-359b-91ad-220179e65c7c.roa (raw, json)
Hash identifier: hFFy81RcUzKH2jcHWeScl1cM8/4PJnD9QLvtiKJ7wlE=
Subject key identifier: 41:2C:3D:14:C3:2D:D6:AA:A9:AA:63:00:EE:E5:DE:D1:6F:E3:0D:E3
Certificate issuer: /CN=1d8c4af7-fe09-4693-bb2c-8985f9686ea0
Certificate serial: 010D0C9F4328584E54B498B1D4BFF25D64536400
Authority key identifier: CB:C0:3B:1E:BC:D5:84:3A:B4:17:F2:3B:DB:75:4C:6A:84:7D:B2:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0/aad3b4b8-0834-359b-91ad-220179e65c7c.roa
Signing time: Mon 29 Jun 2026 09:00:12 +0000
ROA not before: Mon 29 Jun 2026 09:00:12 +0000
ROA not after: Sun 27 Sep 2026 09:00:12 +0000
asID: 399795
IP address blocks: 198.252.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0/1d8c4af7-fe09-4693-bb2c-8985f9686ea0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0/1d8c4af7-fe09-4693-bb2c-8985f9686ea0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:54:b4:98:b1:d4:bf:f2:5d:64:53:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8c4af7-fe09-4693-bb2c-8985f9686ea0
Validity
Not Before: Jun 29 09:00:12 2026 GMT
Not After : Sep 27 09:00:12 2026 GMT
Subject: CN=ef33b120-bb4f-45d6-8744-d5505f9e612a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:f4:34:47:05:8b:56:28:33:b2:6b:2d:4b:
87:55:c1:72:71:4e:e6:bd:21:62:42:26:0f:bf:9d:
19:43:d4:d0:59:12:a1:e3:a4:7f:7d:5b:cf:38:a6:
3b:c2:ad:4b:0c:0b:c6:56:81:d0:c1:c6:d1:d4:cd:
d0:b6:9a:9f:a0:83:e5:7c:7f:b2:e3:cb:a9:fe:dc:
a2:e3:8c:5c:31:4d:7c:70:6b:8c:83:db:79:c2:4a:
6b:9b:9e:07:5d:75:9c:c9:c3:20:95:2e:f1:e4:72:
c4:2e:87:1b:b1:f1:8f:d2:57:e2:6e:85:17:8f:bc:
d2:66:50:a6:d0:65:84:3a:61:93:53:c7:57:17:2e:
fe:ed:14:80:09:41:3c:02:ac:aa:6c:e3:d5:c2:a2:
bd:be:7e:ca:e7:a6:a9:65:0a:da:2d:6e:55:13:de:
d5:38:c4:e9:ef:9d:9f:01:d9:66:cd:a7:7b:7d:94:
e1:6f:c4:9a:6f:28:d1:2f:9d:f6:f0:7c:83:0b:33:
be:c7:aa:b4:89:b5:15:1e:57:e5:ec:f2:5d:6f:94:
e5:69:e0:34:7b:a4:c8:cb:18:da:8f:f1:4b:45:40:
b3:e2:0a:71:49:e9:7d:40:f7:d0:1b:e8:d5:21:3e:
8d:4b:a2:69:2f:fc:3b:70:76:fc:e2:e1:c2:ca:6c:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2C:3D:14:C3:2D:D6:AA:A9:AA:63:00:EE:E5:DE:D1:6F:E3:0D:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0/aad3b4b8-0834-359b-91ad-220179e65c7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0/1d8c4af7-fe09-4693-bb2c-8985f9686ea0.crl
X509v3 Authority Key Identifier:
keyid:CB:C0:3B:1E:BC:D5:84:3A:B4:17:F2:3B:DB:75:4C:6A:84:7D:B2:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0.cer
sbgp-ipAddrBlock: critical
IPv4:
198.252.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:f5:c7:33:ce:0a:d9:b5:91:69:e7:00:55:bd:1f:68:f8:9b:
3c:14:38:10:a6:99:24:81:25:a5:c3:f6:0f:87:20:2a:08:70:
d9:8f:64:ea:a8:f2:79:4c:ea:4c:d7:9d:6c:1f:fa:9b:ca:a8:
ba:14:30:0f:f2:89:58:b9:7a:df:b2:55:c3:44:69:66:47:f2:
64:6d:e3:a5:75:46:c9:03:74:7a:7b:4c:53:db:61:fe:1f:af:
b2:7c:6c:3a:b2:fc:49:b5:e6:f1:8c:f0:15:ce:34:9e:dd:8e:
09:e7:1a:fc:c0:f4:13:6c:02:f5:53:5f:1e:f2:e5:13:11:39:
24:1e:05:3b:4e:4d:b3:92:cc:db:57:58:2b:3c:83:40:c3:c2:
89:c6:c4:ae:98:6a:e8:51:4b:cc:3c:00:1f:3d:d2:46:92:a8:
c0:f9:4a:eb:07:d7:c4:b3:e4:d6:c1:4a:d4:30:6f:bc:1b:d0:
46:e3:32:79:5a:fd:45:a7:3f:48:1c:d1:ce:95:56:de:c4:44:
6c:2b:86:c4:84:ae:95:61:d6:a1:d9:8e:f6:dc:09:70:10:47:
8f:82:32:f9:42:4f:c2:fe:9f:38:2b:1b:c0:9c:22:bb:b8:fc:
62:b8:de:79:e2:a9:2a:2c:38:38:98:1a:c2:65:65:1e:65:20:
44:7a:9b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:22:55 2026 by rpki-client