
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/d32c4d0b-ff22-3ce7-8796-58eb2e9e8671.roa
File: d32c4d0b-ff22-3ce7-8796-58eb2e9e8671.roa (raw, json)
Hash identifier: 4y1L5+i9iAsx0p1EPMec+KdYR2SsqZEG11u0JciIOy8=
Subject key identifier: 3E:37:D5:49:62:62:28:94:7E:86:44:EB:96:DC:10:59:5A:72:B9:C8
Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial: 010D0C9F4328584EA79A4553135896A387EB89C0
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/d32c4d0b-ff22-3ce7-8796-58eb2e9e8671.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7489
IP address blocks: 23.133.0.0/24 maxlen: 24
202.5.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9a:45:53:13:58:96:a3:87:eb:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=4ccf8a6f-8d42-4506-b992-f2f7b46716fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:a8:cc:57:b2:f4:ae:e4:a3:78:73:39:95:
fb:57:d7:33:b7:a5:63:bb:f2:f5:89:9d:f8:af:f0:
5a:97:68:af:38:0e:6f:ab:c4:e9:34:eb:ec:29:8e:
9f:ab:d4:53:a5:10:4d:d5:0e:13:7e:d6:90:ae:58:
f4:b5:ba:51:3d:fe:d8:2a:c6:b1:10:f2:26:56:47:
e5:3f:bd:4e:33:6b:7c:7e:cd:b7:24:d9:20:9b:6e:
ba:8e:d1:88:97:84:40:82:c5:ed:7b:53:c5:72:21:
82:b3:82:05:50:d1:e6:ad:2a:0f:ce:f5:8a:64:cb:
b6:24:b1:f6:e1:50:42:59:a5:b7:61:b1:dc:66:e1:
62:22:38:3b:cc:76:cf:77:b5:b0:c3:3e:04:1f:dd:
42:03:ca:27:4c:57:94:0b:16:28:75:5f:02:29:df:
43:59:f0:a1:67:fc:3e:29:9c:e1:c3:c7:91:92:49:
c6:01:4b:ef:87:3e:87:b1:66:9e:56:2a:9a:38:47:
4f:2c:20:95:4a:60:48:22:91:79:a6:79:2c:04:97:
fb:88:30:63:df:bc:9b:e6:22:f8:55:57:e2:e9:4d:
3a:15:9e:d0:89:4f:1a:5e:56:43:eb:3a:f3:24:cd:
ab:29:97:05:71:0a:78:3c:53:23:aa:33:5a:c6:61:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:37:D5:49:62:62:28:94:7E:86:44:EB:96:DC:10:59:5A:72:B9:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/d32c4d0b-ff22-3ce7-8796-58eb2e9e8671.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
X509v3 Authority Key Identifier:
keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.0.0/24
202.5.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:79:36:81:57:44:19:a0:48:6b:fe:d5:16:0a:b9:89:e2:90:
30:ad:1c:14:58:0f:31:b4:18:6e:fd:5a:88:cd:a0:3b:2c:45:
de:43:49:75:f6:b7:d1:ad:cc:d5:a3:c4:2c:e6:1d:99:a9:20:
62:b2:94:01:93:04:61:df:f4:b4:a7:1b:ab:e9:9c:a8:af:dd:
d8:a7:c2:00:67:e9:0e:7f:39:98:10:17:4a:64:36:c0:c4:3a:
25:90:2c:e4:cf:0c:ec:1d:3a:1f:47:05:aa:b6:1a:fc:39:d5:
ed:2a:c9:2b:50:20:2b:65:e0:06:c5:ec:1a:88:35:51:e7:53:
72:e8:38:0c:04:90:ca:2e:ac:6c:4e:0f:1d:68:01:f1:e2:2c:
9b:ff:8e:38:9f:78:5c:81:1e:85:d0:88:1a:9f:09:89:05:f8:
14:d3:5d:4b:5e:b5:23:03:06:60:7b:0a:d3:f1:18:72:c3:74:
cf:2e:a5:7c:77:a5:d1:37:a5:6f:f7:81:5d:fc:c1:07:01:10:
a6:91:8b:bd:e2:2d:d5:ce:43:c8:9c:1c:25:b1:47:61:f3:10:
5e:7f:b6:8e:c0:85:62:f0:8f:57:31:92:bf:27:b8:cb:91:ba:
84:77:23:3d:c3:a5:c1:16:4e:5f:9f:c0:70:80:c1:66:88:00:
14:14:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:20:39 2026 by rpki-client