
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f7833e6-e702-35be-a884-0ff4642c51db.roa
File: 9f7833e6-e702-35be-a884-0ff4642c51db.roa (raw, json)
Hash identifier: IYf9/fSReD0/2U37LE96J5ECe8xEwixRE6hV2vp5wYE=
Subject key identifier: D9:66:C4:9F:62:3A:36:02:91:B8:84:B6:43:AA:6D:AA:02:59:D9:D5
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E66DA00EE1CBCAB8B69643800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f7833e6-e702-35be-a884-0ff4642c51db.roa
Signing time: Sun 05 Jul 2026 21:00:11 +0000
ROA not before: Sun 05 Jul 2026 21:00:11 +0000
ROA not after: Sat 03 Oct 2026 21:00:11 +0000
asID: 31898
IP address blocks: 140.204.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:66:da:00:ee:1c:bc:ab:8b:69:64:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 5 21:00:11 2026 GMT
Not After : Oct 3 21:00:11 2026 GMT
Subject: CN=f942963f-4efe-49a2-988a-3cb9d11dd347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:d8:1e:39:ed:1e:f3:aa:71:ce:42:cd:38:
e7:c1:4d:0a:5d:8f:d5:24:e6:f2:e6:4e:18:67:19:
f7:73:cf:bb:35:77:50:2a:a4:2b:30:75:df:af:9d:
55:6e:9a:23:b1:ec:d3:9e:1b:e9:91:99:50:a0:3c:
98:db:8a:48:b1:92:c2:a5:f5:8b:36:92:f5:ac:ab:
00:43:9c:eb:01:cb:04:90:f0:ea:80:89:3d:0e:fe:
5b:c3:af:11:2e:73:40:a2:33:c4:3b:8b:dc:fe:6c:
bc:5f:68:0d:b8:86:93:f6:6b:c2:4f:20:98:21:01:
f9:49:b4:a0:33:06:ec:62:3b:62:c9:7e:71:ad:f0:
c1:a8:84:31:ce:35:f4:bd:b4:54:4d:0a:31:68:5d:
9f:ba:1b:95:ae:fd:8d:5a:05:08:f6:52:32:44:3f:
3f:7c:55:88:0e:75:67:7d:85:f2:fb:91:ca:a6:23:
01:2a:28:c4:39:4c:c2:08:85:91:25:df:be:aa:19:
47:19:11:30:40:97:bc:ac:53:91:55:89:60:13:a2:
b6:1b:22:61:89:06:2f:75:1a:9a:4d:2c:1d:d6:3c:
79:f0:23:9d:3d:c0:c2:1c:4d:57:1e:10:70:9a:d8:
d5:df:71:0c:fc:a4:cd:34:1c:fb:7f:0e:e3:36:da:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:66:C4:9F:62:3A:36:02:91:B8:84:B6:43:AA:6D:AA:02:59:D9:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f7833e6-e702-35be-a884-0ff4642c51db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.204.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:7e:b1:5f:af:6e:b5:55:cb:ab:28:ad:68:75:99:28:d0:02:
a3:6a:ae:03:c0:f6:da:b9:f7:b2:aa:b9:52:ed:31:27:45:b4:
15:76:d7:48:ce:4e:98:25:91:74:bc:2f:97:63:40:53:77:94:
9c:bd:a8:48:d5:aa:49:22:c5:dd:8e:7d:3d:9d:b5:29:47:69:
35:0d:c5:63:8f:a1:c8:b1:40:e9:a8:69:98:87:ea:cf:27:90:
b4:d5:20:12:02:a5:2b:20:5f:dc:a1:01:83:47:a4:4a:68:86:
64:0b:5a:d4:0d:44:66:20:31:21:1f:ec:a3:4d:b3:b0:3c:cd:
e1:9c:1a:3c:1c:07:6d:cf:9e:6d:07:46:cb:39:44:e1:b4:c4:
f1:0c:5a:2d:0a:45:40:f9:11:77:70:36:39:84:5e:4c:4c:f8:
92:57:7f:d0:c4:65:8d:b3:f8:2a:21:84:44:38:8e:38:5b:4c:
b3:43:65:92:90:1b:60:6e:01:e9:f6:0a:58:1f:60:6d:87:38:
97:df:d6:49:e6:4d:5c:75:fe:aa:6a:20:9a:b3:81:53:0c:13:
74:0a:84:fa:e2:9d:78:1e:2f:90:12:14:68:a2:15:12:72:d4:
c4:d8:8f:d3:de:c7:61:10:67:87:e5:de:9f:70:0c:52:6c:6e:
79:46:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:52:04 2026 by rpki-client