
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d35f2539-69c0-354e-a638-c70af4abdc6d.roa
File: d35f2539-69c0-354e-a638-c70af4abdc6d.roa (raw, json)
Hash identifier: xrMiJcG7FoF5fmpCUG6Ct7HOVOgk0azLdf98prCIvoA=
Subject key identifier: 89:1A:85:EE:0B:E1:8C:56:3A:FD:72:35:F6:8E:90:07:0C:79:F4:92
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F4328584EA787D4F29872F26B13C57400
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d35f2539-69c0-354e-a638-c70af4abdc6d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 6621
IP address blocks: 67.142.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:d4:f2:98:72:f2:6b:13:c5:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=5e771461-2f70-4be1-bd85-8abe81ddbd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:e5:06:4b:2b:44:56:2b:7b:4e:fc:6e:cb:
4a:d8:aa:30:73:e3:aa:8f:15:c7:39:8d:79:00:78:
7a:8a:c3:d3:ec:7f:db:de:98:df:41:2d:e4:ca:7d:
ce:4f:db:51:eb:90:21:ea:64:ef:3c:e5:87:56:16:
91:c9:1f:c0:9b:7c:3e:7c:9a:55:52:15:ab:64:dc:
55:6e:5a:7e:a7:46:5d:23:b2:dc:58:41:2e:fd:f0:
bd:45:54:ec:91:a9:37:6d:dc:f5:e9:ef:7f:37:69:
dd:86:71:44:93:ff:31:62:4c:2c:28:74:f4:65:1d:
92:49:4e:5c:62:50:85:24:42:59:37:75:7c:44:89:
ae:53:11:9c:11:44:7a:f5:be:b3:4f:77:4d:0f:21:
69:05:b0:5c:7d:a7:81:6d:3e:84:8b:ba:9d:fc:0b:
0e:7f:16:cb:95:9d:01:d0:8d:60:b6:39:1c:ce:85:
a2:45:8a:1d:ac:95:7e:04:c4:ec:ca:40:b3:4f:34:
23:31:f0:59:de:ae:7a:79:1c:c2:df:4c:54:07:36:
c2:6c:dc:d6:76:e5:d2:68:2a:44:8e:ad:7c:98:76:
77:b6:7d:6b:a1:dc:3e:1c:f1:8d:ae:ce:66:ed:ff:
cf:98:fb:b8:3c:94:1d:db:1b:62:28:2e:90:08:2f:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1A:85:EE:0B:E1:8C:56:3A:FD:72:35:F6:8E:90:07:0C:79:F4:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d35f2539-69c0-354e-a638-c70af4abdc6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.142.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:44:5e:64:1c:81:09:63:98:7e:a7:97:d1:3e:3a:ba:b5:84:
5d:35:ad:42:ea:b0:65:af:57:63:37:fd:b0:fe:b6:69:b4:bc:
dd:92:8c:fd:d2:f8:a3:a3:5c:b8:6a:99:0b:63:de:37:c6:ec:
0a:8a:a3:9b:16:41:2b:df:ff:ba:16:97:9d:ce:1b:7a:a5:42:
95:71:c2:db:ba:52:c2:03:7d:60:f6:e7:44:d3:17:f7:dc:83:
21:64:c1:57:2b:16:23:a2:eb:45:4e:88:ca:5b:04:91:1e:4d:
b8:bb:e2:cb:86:a5:af:e2:e0:e9:ee:e0:09:76:1a:1b:ce:65:
ed:bc:cf:37:06:38:ab:f8:8f:31:62:21:85:1d:47:bd:6f:ad:
c6:97:93:c5:99:27:77:9f:fd:1e:8e:a2:eb:6d:77:63:01:85:
dd:9c:c2:a4:67:e7:ab:fc:73:bd:bd:50:1a:ba:23:5e:d3:ab:
9e:9b:fe:b6:e6:78:87:87:7d:73:e3:d0:7a:79:f6:8a:90:37:
19:3f:1e:8c:9d:db:83:01:15:1c:a1:13:64:02:b2:6f:e3:ee:
42:39:30:03:0c:8a:c4:48:0d:40:48:90:bb:89:ba:99:81:77:
9a:7c:f0:c9:ce:63:3a:db:1f:ae:82:97:d6:59:0d:ba:58:42:
bb:c9:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:31:18 2026 by rpki-client