
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/a9125f24-a2e6-31cb-b0f0-be714acbd21d.roa
File: a9125f24-a2e6-31cb-b0f0-be714acbd21d.roa (raw, json)
Hash identifier: QPtMyvkYlMsbo6mz/bm9YxGr02DoSyhAet64iZKE/qE=
Subject key identifier: AF:7E:EF:26:4E:40:45:2C:BC:C1:E3:23:B2:D9:AC:D0:BD:1A:8D:C6
Certificate issuer: /CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0
Certificate serial: 010D0C9F4328584EAA519A05D3217A6DB4232E00
Authority key identifier: FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/a9125f24-a2e6-31cb-b0f0-be714acbd21d.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 19366
IP address blocks: 199.101.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:9a:05:d3:21:7a:6d:b4:23:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=8743ceff-6e70-42e5-b1b8-f38f52ec6674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:49:00:b8:e4:6b:31:8c:df:3b:27:4a:a9:
a1:48:3c:cc:6a:fe:f2:18:3d:da:2e:ff:3e:89:f4:
42:08:9b:fc:1b:b7:ad:0b:ef:e2:51:23:ce:f9:b8:
5b:93:4c:2f:e6:20:65:b5:18:4e:85:42:8c:f1:50:
cd:8c:c4:ef:a3:a8:1a:90:cd:5e:4a:0e:aa:bd:f5:
ae:e0:f8:45:35:51:09:6b:c1:c2:35:88:af:bb:b0:
b5:4e:a1:60:30:4b:d5:32:b9:0a:33:34:55:9a:5e:
dd:50:fc:8d:1f:b4:f1:d0:bd:a3:48:c6:fc:41:4a:
de:84:bb:58:00:5d:f3:64:47:88:fd:41:6a:40:3c:
69:bf:d4:f5:95:f6:81:34:c2:81:b7:45:50:d6:a5:
49:f0:a2:a4:6b:29:54:99:9c:7e:2b:27:d4:a1:1b:
22:a6:11:32:06:6e:fa:8f:fc:20:66:93:b5:1e:9b:
8e:95:d9:35:f6:4c:01:31:20:7b:6d:f3:b6:b4:20:
c7:fa:77:4a:08:5f:51:a3:7b:a9:07:5b:8a:7c:39:
2e:45:f1:ad:63:45:69:60:da:96:15:ef:a2:b5:2a:
8f:38:d0:64:fd:4f:0b:1b:41:e9:13:20:6d:ad:a8:
f3:41:95:df:8c:8c:00:f9:3a:59:7e:e7:eb:a2:e9:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7E:EF:26:4E:40:45:2C:BC:C1:E3:23:B2:D9:AC:D0:BD:1A:8D:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/a9125f24-a2e6-31cb-b0f0-be714acbd21d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl
X509v3 Authority Key Identifier:
keyid:FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:04:00:81:bc:32:73:6c:74:7e:0e:cd:e2:85:22:03:ca:86:
90:17:bd:1d:f1:6c:b4:25:3b:c5:9e:83:a8:db:58:e0:2a:2f:
2a:9f:ce:ea:f7:24:ee:16:3a:0e:af:a0:8a:30:57:02:1d:a8:
d8:3d:81:4c:0e:46:43:e6:58:b7:03:24:14:1d:2c:c3:e2:b4:
ec:dc:0a:d5:fe:83:a9:f7:9a:5f:76:4b:91:7f:56:3a:c7:89:
da:c1:97:26:75:77:de:db:1a:ce:af:4c:bb:eb:93:15:74:35:
af:24:40:64:cc:29:3a:26:05:75:7d:5f:70:9b:b1:78:81:91:
1d:6e:94:8d:e2:87:3a:39:6d:ed:7c:3f:1b:2e:fa:2a:4c:83:
22:1a:a6:bd:bc:3e:4c:3e:cf:dd:fc:bd:26:75:07:ee:58:c3:
ad:7e:85:d0:f5:b9:be:a6:32:2e:e6:22:38:12:da:46:77:3e:
20:78:b3:be:1b:ee:48:05:18:9f:dd:f4:dc:5d:b1:1f:fd:82:
88:ef:cc:f4:8c:12:80:c7:e4:ee:9c:0c:05:73:2c:c5:51:22:
0c:a1:7b:c1:be:9d:cd:b9:03:cc:03:ea:a2:0b:c1:67:3e:3e:
40:d4:c4:c3:44:e6:0a:1b:8c:c7:7c:b0:3d:4a:89:8e:3b:99:
e5:08:ce:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:07 2026 by rpki-client