
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/89b5a997-3223-35c4-9454-eea1ce7afb45.roa
File: 89b5a997-3223-35c4-9454-eea1ce7afb45.roa (raw, json)
Hash identifier: lvq56p+IEZY5lWvbVYEovXS1+W5idFv6S6/MaYu00Ys=
Subject key identifier: ED:AF:0A:62:F7:6F:FF:0D:5E:D4:8A:2F:B0:CC:78:33:48:02:63:0A
Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial: 010D0C9F4328584E2AD4590E67FB95EFBB0D4C80
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/89b5a997-3223-35c4-9454-eea1ce7afb45.roa
Signing time: Sun 14 Jun 2026 09:00:11 +0000
ROA not before: Sun 14 Jun 2026 09:00:11 +0000
ROA not after: Sat 12 Sep 2026 09:00:11 +0000
asID: 3807
IP address blocks: 207.196.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 17 Jun 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2a:d4:59:0e:67:fb:95:ef:bb:0d:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Validity
Not Before: Jun 14 09:00:11 2026 GMT
Not After : Sep 12 09:00:11 2026 GMT
Subject: CN=303a6847-0320-4740-8338-5da0e5735cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:85:ea:aa:fd:9c:09:22:7f:58:b0:f1:f8:
f8:fd:58:37:cd:05:0d:0f:60:13:22:3a:d8:02:d0:
41:96:f0:e7:4e:67:c8:42:26:88:00:75:37:27:45:
2c:7f:47:4b:c1:b4:45:73:ad:1b:3e:6c:0e:5e:ec:
00:ee:00:a4:5d:6a:21:0b:7d:39:ef:0e:d3:46:81:
64:8d:3b:1c:91:a8:2d:ef:9c:af:84:30:4c:35:56:
9f:f3:ab:07:8b:62:70:73:c8:78:34:86:80:fb:c8:
ee:9f:88:31:8d:ca:8e:8d:f3:bc:19:c0:8d:f0:63:
9c:88:55:36:1e:fd:9d:84:67:16:98:d2:04:31:6d:
27:c8:f4:fc:28:ed:86:06:d7:cf:d7:4b:dd:5f:5b:
90:9d:23:fb:61:85:81:d8:49:3b:58:53:73:d9:ba:
0d:a0:35:a1:52:5d:3b:cf:ff:6d:f3:f9:dc:e6:58:
89:28:6a:61:e5:3e:70:02:12:50:68:e7:00:83:ec:
68:60:36:45:04:4a:83:d2:03:7f:26:ef:d5:22:52:
bf:ef:11:bd:60:63:23:63:fc:3b:fb:0f:98:14:37:
fd:da:70:04:8c:6c:36:ec:22:1b:da:f0:44:64:ee:
73:4a:13:11:c7:8f:81:65:83:71:6b:cf:b8:4e:51:
d2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AF:0A:62:F7:6F:FF:0D:5E:D4:8A:2F:B0:CC:78:33:48:02:63:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/89b5a997-3223-35c4-9454-eea1ce7afb45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
X509v3 Authority Key Identifier:
keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
sbgp-ipAddrBlock: critical
IPv4:
207.196.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:d0:eb:85:dc:c3:bd:4a:04:ba:d0:1d:5a:01:68:93:81:4e:
44:12:e0:28:c6:ed:93:d2:fa:38:45:fc:4a:68:a0:b6:32:af:
94:aa:a2:56:39:00:cc:e5:c0:51:e7:8b:8d:01:0f:48:0e:bd:
bc:13:c9:51:42:fe:a1:48:28:dc:86:17:54:23:2b:02:60:79:
23:6c:43:bc:6b:91:73:b6:73:be:21:8a:76:d7:ad:71:71:97:
e3:b0:49:be:d0:a3:f2:dc:72:56:78:4d:ab:43:f4:38:e0:82:
bf:c4:38:17:e5:f4:64:ac:9d:21:a7:97:e5:97:e6:e7:88:20:
0e:5f:4d:cf:fc:cd:8c:de:4a:0d:f5:fa:b9:df:64:82:7b:58:
d5:eb:5d:79:6d:41:ae:5f:59:43:55:91:8b:cf:21:fe:d6:92:
a4:ce:72:bd:93:6e:bf:a1:a1:0f:ba:bf:f4:6e:2a:b8:68:31:
e1:b1:31:11:5e:04:f4:aa:84:64:b5:0d:3c:84:e7:64:ae:77:
2d:8a:51:ee:68:8a:c5:37:14:0e:2c:4f:47:74:dc:b3:53:a5:
5c:f1:33:26:9b:d7:48:79:57:4f:ab:c6:79:92:c9:d2:80:00:
bc:23:12:11:23:28:ca:23:a6:2f:a5:49:39:53:2d:90:51:85:
66:97:18:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 11:17:28 2026 by rpki-client