
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa
File: d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa (raw, json)
Hash identifier: /ONGY2EFYl4LN4OhV5BWRsAjA+XWwWm+XcyRegOtEn8=
Subject key identifier: 30:AC:8F:71:AA:C6:70:D3:86:C4:63:C4:06:0C:2E:AE:CE:D3:DB:91
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584E6F3A441A35F3309A2D7D4D30
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 30238
IP address blocks: 216.71.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3a:44:1a:35:f3:30:9a:2d:7d:4d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=337ee1d2-6ff5-4b94-bcad-104f777b6f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:6f:28:d2:6d:3b:e0:23:3b:4e:f0:98:bf:
aa:87:bf:e4:e6:f3:b2:eb:bc:af:84:f4:cb:40:0e:
ba:ab:71:b7:ac:7f:08:ac:b6:4c:f5:61:0d:ea:b0:
76:5b:8e:b9:0d:3e:02:3d:db:50:da:b3:37:12:19:
63:cc:17:dd:d3:e2:9e:ea:95:d6:3f:08:5e:68:6b:
22:d6:a8:53:17:52:97:5d:fc:ba:31:4d:1e:f5:93:
60:63:3b:4f:37:4c:d0:a6:7b:ad:7e:48:e9:b0:32:
95:e6:ac:a8:31:5f:32:2b:3d:ca:8f:79:bd:52:94:
9b:a1:55:3e:a8:e5:3b:fc:b0:08:60:37:0b:7c:a8:
0e:ed:57:61:2e:9c:e9:66:0d:7b:eb:03:32:87:fb:
98:e2:2f:74:55:dc:e5:d3:40:4e:0b:e5:9b:e3:2c:
cd:ad:dc:0e:65:ec:9b:e3:8a:cc:65:92:1c:eb:b1:
4e:26:cb:19:ba:c6:42:eb:09:6d:4c:68:a9:b2:85:
43:62:a2:49:b8:33:63:58:c2:b1:1a:d1:fc:32:b2:
00:07:f8:95:ae:b5:0a:ef:8b:9b:8b:aa:63:aa:fb:
ea:42:b8:7c:fc:94:a3:b3:95:04:24:0d:d3:df:d6:
04:0a:b8:63:79:a7:36:b3:b0:30:38:d9:5a:03:2e:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AC:8F:71:AA:C6:70:D3:86:C4:63:C4:06:0C:2E:AE:CE:D3:DB:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.71.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:0e:8c:ab:78:a4:c1:8c:9e:54:40:b9:dc:38:61:01:9c:46:
3f:bb:39:0f:3f:ab:48:03:7f:29:5b:32:8e:82:b2:26:ff:71:
4e:ee:3b:00:3c:e7:46:5f:84:ba:45:1a:0f:4b:a5:db:02:4e:
b6:53:c2:c7:d4:8b:77:b8:a9:ae:b5:71:66:00:48:61:65:6e:
66:bc:0d:23:13:1e:2d:4e:48:47:cd:9c:d6:81:85:b8:f5:7b:
26:b7:33:37:67:ed:d1:8a:23:4c:c3:4c:f1:0a:c2:91:e9:f0:
a7:de:a4:89:cc:3a:03:6a:2b:2a:5f:b8:01:51:cb:94:79:48:
90:02:fd:c5:e7:2f:ab:e8:77:13:2f:54:9a:bc:2c:d7:52:d6:
17:72:b0:4d:73:a5:be:45:35:83:26:b6:fd:dd:c5:68:e3:94:
95:a1:f2:de:5e:99:83:57:d6:f5:48:93:6d:91:c3:0e:05:23:
bb:30:fb:20:43:9a:d8:27:5b:20:75:d1:11:ae:62:2a:19:64:
45:2b:ec:86:a9:95:65:1b:4f:4f:40:0a:64:93:80:43:5d:2c:
ac:29:f9:16:c1:9f:02:db:12:aa:48:da:9d:b2:19:ea:bb:44:
ba:61:35:90:7d:4f:2d:35:99:3e:8f:34:60:5f:6f:13:4a:69:
77:16:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 11:54:31 2026 by rpki-client