
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3871f1a7-c32a-314b-bdfd-606ab94f5e9c.roa
File: 3871f1a7-c32a-314b-bdfd-606ab94f5e9c.roa (raw, json)
Hash identifier: IL+N71pzyX1lDrF+U2v24/GqDhCCvMnA9ifwGfKnywQ=
Subject key identifier: 09:4F:9F:DF:7F:F9:01:7C:78:9A:49:76:05:30:BD:65:7F:DB:8C:3B
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F4328584EA787D4D06BCF0EB2CF3D24E0
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3871f1a7-c32a-314b-bdfd-606ab94f5e9c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 6621
IP address blocks: 72.170.0.0/19 maxlen: 19
72.170.208.0/24 maxlen: 24
72.170.209.0/24 maxlen: 24
72.170.210.0/24 maxlen: 24
72.170.211.0/24 maxlen: 24
72.170.212.0/24 maxlen: 24
72.170.213.0/24 maxlen: 24
72.170.214.0/24 maxlen: 24
72.170.215.0/24 maxlen: 24
72.170.216.0/24 maxlen: 24
72.170.220.0/23 maxlen: 23
72.170.223.0/24 maxlen: 24
72.170.224.0/24 maxlen: 24
72.170.225.0/24 maxlen: 24
72.170.226.0/24 maxlen: 24
72.170.227.0/24 maxlen: 24
72.170.228.0/24 maxlen: 24
72.170.229.0/24 maxlen: 24
72.170.230.0/24 maxlen: 24
72.170.231.0/24 maxlen: 24
72.170.232.0/24 maxlen: 24
72.170.233.0/24 maxlen: 24
72.170.234.0/24 maxlen: 24
72.170.235.0/24 maxlen: 24
72.170.236.0/24 maxlen: 24
72.170.237.0/24 maxlen: 24
72.170.238.0/24 maxlen: 24
72.170.239.0/24 maxlen: 24
72.170.240.0/24 maxlen: 24
72.170.241.0/24 maxlen: 24
72.170.242.0/24 maxlen: 24
72.170.243.0/24 maxlen: 24
72.170.244.0/24 maxlen: 24
72.170.245.0/24 maxlen: 24
72.170.246.0/24 maxlen: 24
72.170.247.0/24 maxlen: 24
72.170.248.0/24 maxlen: 24
72.170.249.0/24 maxlen: 24
72.170.250.0/24 maxlen: 24
72.170.251.0/24 maxlen: 24
72.170.252.0/24 maxlen: 24
72.170.253.0/24 maxlen: 24
72.170.254.0/24 maxlen: 24
72.170.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:d4:d0:6b:cf:0e:b2:cf:3d:24:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=bcafaba0-6cf4-4bc5-8e5d-3746778e332f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:12:52:3a:3b:8f:f4:39:c6:dc:ab:ca:87:22:
b6:a5:1e:d5:20:c5:86:bb:9e:9a:6d:af:fb:ff:cb:
d8:22:08:37:f5:73:f5:42:8d:88:43:06:ee:e7:98:
eb:53:90:cb:7d:b2:ad:f9:ba:8e:94:f1:cf:47:e1:
bc:da:0f:6a:11:91:26:e6:6d:38:86:08:7f:99:f1:
c6:ba:5b:b9:52:4c:d7:f5:7c:20:e7:bc:aa:3e:2e:
e2:9b:3f:56:e8:89:d5:9d:cc:20:e4:2f:47:3c:33:
2c:cc:0d:35:70:62:2f:30:83:e7:42:b9:fc:bd:30:
97:8a:ff:cb:69:70:af:38:1a:41:03:17:eb:f7:7f:
15:dc:3c:0d:dc:e3:10:50:54:f0:3e:be:dc:49:b5:
64:42:dd:48:f3:a7:58:b1:83:75:38:c6:f9:0d:df:
88:42:af:01:da:1c:8a:26:65:d1:9f:28:ed:1a:76:
61:37:99:d3:55:9e:2f:a4:a7:41:4e:d1:d5:20:6a:
09:ed:07:3c:aa:a6:72:3d:d8:03:fd:2a:9b:2e:39:
ee:9b:03:fb:c9:42:f0:ec:cf:4d:d0:f4:40:73:3a:
22:0c:84:c6:e5:3d:fb:04:6e:98:3f:3b:90:e8:12:
7d:c5:c2:25:1b:0b:66:f8:f5:39:83:a6:4b:b2:bd:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4F:9F:DF:7F:F9:01:7C:78:9A:49:76:05:30:BD:65:7F:DB:8C:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3871f1a7-c32a-314b-bdfd-606ab94f5e9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
72.170.0.0/19
72.170.208.0-72.170.216.255
72.170.220.0/23
72.170.223.0-72.170.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:b9:31:db:43:c1:16:a1:db:31:a5:fb:2f:c0:30:ed:38:a3:
45:b7:63:3a:5a:90:e3:d2:a2:53:92:a8:0d:3c:39:b7:b7:ce:
31:bd:51:85:d7:15:b1:89:b9:2e:f6:38:6e:37:2b:d7:57:b4:
13:c7:a0:cf:7d:9c:23:45:77:4d:a5:a0:ca:3f:56:33:2e:55:
b5:9a:9c:a4:52:a5:54:52:ea:af:36:9d:51:ca:ef:2c:2c:98:
f6:99:79:16:85:e3:d2:3f:b9:83:43:76:de:46:2d:51:b3:bf:
6a:0a:20:81:4d:c5:73:71:4a:06:a2:3a:1b:08:63:3e:fc:9e:
b0:2b:87:a8:26:d2:aa:ed:b7:44:d5:44:2d:1d:6e:43:13:18:
93:d3:62:9c:ad:84:f0:9f:cd:59:88:2f:cb:02:8d:ef:98:dd:
a8:83:88:95:ca:bc:d0:f3:16:ec:44:50:4c:c4:4f:e2:85:2c:
45:c7:f7:31:82:9e:e5:f4:b8:40:9b:81:dc:2d:78:5b:31:8b:
2f:ee:e1:09:d6:cc:b1:6a:c7:84:01:2a:a8:79:eb:7e:0f:24:
28:6e:f4:a2:04:56:34:81:c2:4e:dc:80:bb:d4:4d:5c:bd:a4:
1b:f7:8c:90:14:2a:92:c8:7b:d8:2f:96:0e:b0:a2:b6:42:86:
e6:37:2e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:14:12 2026 by rpki-client