
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4f8e71e-cbf2-356c-a6c2-a772f5db3669.roa
File: d4f8e71e-cbf2-356c-a6c2-a772f5db3669.roa (raw, json)
Hash identifier: OWvl9nw8CA2o7Rd/ILZRBN+7bvtwQSJfCkhCyB6A/pE=
Subject key identifier: A9:83:DB:2A:2D:3C:52:C5:DC:A3:46:E3:1F:33:DC:2C:FB:D6:E0:B5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584EA44511AA3C392C0D43F15700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4f8e71e-cbf2-356c-a6c2-a772f5db3669.roa
Signing time: Mon 27 Jul 2026 21:00:11 +0000
ROA not before: Mon 27 Jul 2026 21:00:11 +0000
ROA not after: Sun 25 Oct 2026 21:00:11 +0000
asID: 577
IP address blocks: 142.68.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a4:45:11:aa:3c:39:2c:0d:43:f1:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jul 27 21:00:11 2026 GMT
Not After : Oct 25 21:00:11 2026 GMT
Subject: CN=c909cac1-ee74-4103-b937-6bfcaefd66fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:56:94:49:1c:b6:14:e7:cc:8a:26:ed:bc:
16:f4:cd:f8:5e:3a:3e:1a:d2:9e:b5:48:85:0f:82:
47:d2:70:31:33:25:6c:19:07:00:8d:96:91:45:23:
86:b0:28:fb:fe:d9:ef:c9:6a:36:7b:54:49:c7:95:
dc:7d:9d:1a:3b:5a:f9:91:62:9e:39:5f:2a:a7:39:
98:fa:33:60:4b:1e:f7:05:c8:6a:9d:4e:35:fd:f3:
36:c7:d0:0b:1a:83:50:58:20:aa:49:f8:3b:b7:a4:
f9:14:25:da:e8:34:30:22:02:d7:24:12:c4:1b:7c:
19:e0:17:0a:58:ad:d4:36:fe:6b:bf:f8:0f:08:e2:
7b:93:bf:06:24:e9:96:33:4c:82:65:66:62:2a:6c:
0f:f5:58:03:35:c3:fd:95:58:38:8d:78:ea:7e:5e:
6f:73:59:be:12:b0:80:98:d8:89:ab:8b:ac:8c:91:
4b:aa:98:b7:42:21:0c:e5:ef:fe:16:23:b5:41:0f:
19:47:76:4a:72:7a:bc:18:4f:8f:c0:f4:3d:82:a2:
84:d9:b6:d4:f9:32:6b:77:04:4e:b0:9e:47:3e:92:
ba:24:f3:22:ad:1e:1b:bb:34:11:72:7b:03:8e:c5:
da:b9:11:11:31:6c:b9:1d:de:8c:79:45:e9:29:bf:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:83:DB:2A:2D:3C:52:C5:DC:A3:46:E3:1F:33:DC:2C:FB:D6:E0:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4f8e71e-cbf2-356c-a6c2-a772f5db3669.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:99:14:b4:59:5b:fb:19:1b:f5:34:14:88:c5:27:cd:87:fa:
75:4e:f0:40:64:a1:51:f3:09:fe:77:16:a8:fd:92:44:70:d0:
c9:c1:64:4f:fe:0c:4e:c6:bc:83:26:b5:ee:67:77:9c:16:d2:
b5:09:c0:eb:eb:91:ac:6d:38:63:b5:21:73:ac:dd:0e:3c:13:
0c:b4:ac:55:c9:ef:78:f6:e4:0a:9b:35:c7:97:b3:c6:31:f4:
ce:ce:33:93:e3:d7:61:62:f5:a1:31:fd:87:45:72:3c:a3:03:
d2:b0:88:ac:b1:bc:e9:c2:f8:49:ce:93:20:05:dd:e4:77:34:
5d:3b:65:70:68:be:43:dd:bf:d9:ea:37:05:d8:29:31:3b:d7:
f1:43:38:15:da:4e:b5:cf:1c:a7:e3:b8:8c:a1:fd:5c:be:df:
06:70:e1:bd:d8:ba:22:fe:d1:8e:26:06:b5:f5:d5:f7:1c:a3:
5c:30:00:45:dc:e6:7a:86:ca:37:b9:01:9d:86:7e:1d:b8:8f:
37:d7:de:10:90:7e:22:08:de:f8:6a:b9:64:a9:ff:e6:c1:33:
9f:f8:5a:a0:5b:ea:23:cb:78:c3:fe:c3:e1:05:03:86:8a:48:
5f:31:eb:28:de:85:16:83:8f:31:96:b5:50:c1:c0:a2:86:1b:
31:e2:72:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:15:42 2026 by rpki-client