
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/a8a238f7-752f-3b08-9a4a-8c095f31d878.roa
File: a8a238f7-752f-3b08-9a4a-8c095f31d878.roa (raw, json)
Hash identifier: Ov0ZKjbEYhzu9VuX/DZyU9yrxMXX0beD1XYosjGCV0U=
Subject key identifier: DC:07:E1:7A:D0:2D:97:87:74:71:4F:2C:B2:60:79:94:FC:FA:90:5F
Certificate issuer: /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial: 010D0C9F4328584EA78808DC3692BFC946485180
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/a8a238f7-752f-3b08-9a4a-8c095f31d878.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 36374
IP address blocks: 72.18.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:08:dc:36:92:bf:c9:46:48:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=88995e91-450c-4928-8bb0-7b02bf76618f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:3c:a9:43:22:6a:8b:88:c7:a0:5f:ec:04:
b1:e4:8e:44:25:91:93:6d:7a:b5:94:29:8c:7d:82:
f1:e3:a1:34:a3:dd:65:4d:d4:1f:96:24:b8:7e:98:
3b:53:cc:32:c1:0f:0b:c9:6c:89:f0:9e:d1:5e:e1:
d2:4c:00:92:a2:94:47:89:1a:37:7e:73:89:70:17:
03:fb:92:b1:0a:a7:06:56:88:83:ee:3e:e8:c7:fe:
92:42:d0:f1:8a:fd:dc:a0:84:88:a9:02:de:ee:44:
f6:8c:68:6a:01:36:93:e9:19:69:7a:33:58:50:4a:
0a:5a:a3:60:b0:3f:b9:b1:16:79:03:0e:21:6e:4b:
db:a7:90:4b:38:d9:05:ed:b3:d7:ef:b3:49:51:11:
4e:3c:14:ad:5c:a2:dd:92:66:b8:bf:ca:64:78:cc:
e9:b9:82:40:ad:3d:5f:6b:57:b3:fb:f2:91:78:c2:
5f:3e:e7:ff:7b:a7:04:58:81:b5:eb:fa:b6:8b:54:
46:18:12:da:6c:e5:c4:da:fa:9d:af:46:38:8a:0b:
bb:80:49:5d:6d:7a:21:40:68:61:66:e7:a5:bd:26:
63:3b:e6:26:36:d7:88:2a:0f:b5:bd:2d:4f:78:20:
79:87:44:c7:78:7c:29:49:b1:3e:ec:19:8f:10:05:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:07:E1:7A:D0:2D:97:87:74:71:4F:2C:B2:60:79:94:FC:FA:90:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/a8a238f7-752f-3b08-9a4a-8c095f31d878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
X509v3 Authority Key Identifier:
keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.18.118.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:4c:54:74:c2:7c:8c:93:ac:15:df:6c:00:d4:7d:a4:d9:52:
17:f2:e8:73:dd:39:e4:44:24:7c:b2:b6:8b:fc:7e:95:be:cf:
f4:a9:f6:5b:33:8c:f8:78:38:c0:b4:35:07:23:0a:cb:01:83:
2d:45:6c:cd:f9:83:ac:4d:de:4b:54:30:d7:d7:94:53:00:07:
84:ce:57:2a:22:38:e9:68:03:dd:18:06:10:91:6d:f7:93:7d:
5a:ef:0f:84:27:c7:82:aa:09:08:38:7f:dd:ce:6f:3b:f5:ae:
77:6f:16:3b:66:59:95:03:42:5e:bc:3f:3f:ff:95:6b:d2:fc:
62:a8:29:8c:f2:d4:50:40:4a:1e:5c:0c:44:cb:92:34:73:f7:
3f:79:85:14:18:4b:24:4c:b0:b1:f0:1c:9c:9e:a5:f9:61:ab:
fd:be:e0:23:51:b8:dd:7c:53:11:19:c2:31:bb:fb:77:6d:a7:
96:13:cf:96:e7:16:28:21:79:28:c6:2f:4d:dd:34:43:9e:17:
11:29:75:3d:f2:79:75:0a:c2:1b:1e:25:92:1b:78:aa:f3:00:
b8:4d:35:d8:1b:07:18:90:2f:53:52:a2:14:2c:1c:ea:b2:a9:
62:b1:17:25:ca:6d:f9:43:a4:30:b3:b3:94:52:75:e8:d5:65:
6c:ca:dc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:08:04 2026 by rpki-client