
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/dc68370b-afda-3ce5-a4bd-88cf782945a5.roa
File: dc68370b-afda-3ce5-a4bd-88cf782945a5.roa (raw, json)
Hash identifier: XyVXoiPJrwqsB+WfWY7171gPLlx+UQbE/HEt+HeKHYw=
Subject key identifier: 5E:C3:B6:F8:B7:AD:17:71:D3:F9:D0:7D:33:D1:12:4D:EA:9E:0F:91
Certificate issuer: /CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0
Certificate serial: 010D0C9F4328584EAA51984EB25357C41ED2A180
Authority key identifier: FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/dc68370b-afda-3ce5-a4bd-88cf782945a5.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 19366
IP address blocks: 209.189.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:98:4e:b2:53:57:c4:1e:d2:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=48229705-df6c-4cec-b578-cee87ce42519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:02:c5:f6:d4:5e:09:1f:b9:43:06:62:28:
5f:7e:a0:a6:45:ed:e9:fd:8a:14:52:93:8f:03:b5:
c0:59:22:ae:e7:d7:98:0f:02:bc:58:6e:e6:81:10:
09:55:8d:35:17:ea:d1:f1:5f:68:18:22:3d:4e:64:
fb:9a:c5:60:a7:de:76:91:ea:a0:85:b6:e2:9c:b2:
aa:dd:f3:ad:35:62:e0:5c:5a:f8:c4:3a:e4:90:9f:
50:d8:3e:83:ef:ab:67:5f:5b:03:ab:e1:05:23:af:
6c:af:ca:fc:88:a1:f6:2c:67:df:0a:7e:b7:b8:87:
7c:27:b0:f4:87:c2:24:88:1b:9c:20:80:7d:2f:0d:
3f:fb:da:4b:d1:30:1b:5d:e9:52:88:f4:7e:ea:44:
98:a5:5b:76:7c:15:4d:65:5e:ef:09:94:ce:93:8a:
6a:8f:65:15:5b:51:65:69:75:0d:3c:b4:e1:60:32:
8f:e2:84:e8:2c:ff:40:89:d0:74:41:6c:31:4b:5e:
61:40:6f:8b:92:0e:4c:78:03:9f:4e:af:3f:d3:3c:
39:1b:d5:cb:5c:ee:9f:1e:05:fb:7a:bd:a4:b4:d6:
96:20:ca:d6:ff:c8:3a:da:78:46:cb:df:52:af:60:
22:bb:b4:57:d9:e1:7d:66:05:ee:a3:9c:dd:45:2f:
74:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C3:B6:F8:B7:AD:17:71:D3:F9:D0:7D:33:D1:12:4D:EA:9E:0F:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/dc68370b-afda-3ce5-a4bd-88cf782945a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl
X509v3 Authority Key Identifier:
keyid:FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer
sbgp-ipAddrBlock: critical
IPv4:
209.189.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:ec:b4:73:83:8d:b1:7c:0c:1b:c7:e5:eb:77:a0:74:08:d9:
84:6a:80:1c:67:4f:54:0a:73:f0:39:28:37:c5:fb:9d:59:52:
ea:4b:c0:02:bc:52:74:f4:72:ef:fa:e6:6f:97:bf:46:c5:79:
c0:39:08:da:42:9e:da:08:34:d1:74:d1:cf:34:6c:54:4a:54:
37:ea:e2:31:33:39:ea:b1:96:d3:d4:09:0f:f8:7b:13:a3:13:
e6:61:46:97:dd:91:71:d2:2f:a6:01:1d:2f:68:2f:e7:36:1e:
d9:60:57:99:bb:c6:f9:14:bf:8e:20:51:88:02:f0:f5:31:1c:
f5:fc:31:66:71:4a:e6:ef:ea:2e:51:c4:c9:45:5e:92:8b:46:
2f:f3:de:8d:5f:0c:39:b2:55:5c:b5:ae:94:e2:97:fd:5f:26:
21:ec:78:94:39:c1:1d:9c:c5:fe:89:ae:0b:a5:0c:6f:e3:0b:
ca:c4:c4:a6:3d:1d:52:f6:81:d9:82:65:1d:b8:12:a4:02:61:
a7:d6:69:96:fc:ab:7b:3d:34:77:32:ec:30:ed:d6:d6:0b:01:
3d:8e:60:42:33:5e:95:ab:eb:fe:bb:31:eb:4b:c2:4b:1b:c8:
8f:f1:72:7a:13:f4:92:84:d2:48:12:8c:d0:60:08:d6:e7:08:
cf:1c:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:02 2026 by rpki-client