
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/c07a0abd-8db6-3572-a509-8f6e30618599.roa
File: c07a0abd-8db6-3572-a509-8f6e30618599.roa (raw, json)
Hash identifier: Nk0oizANwGJBfPpTuBpPHsYKoenSOC+jR7e/G/Rbw6c=
Subject key identifier: EB:F0:D3:77:93:72:26:28:D8:FF:E2:AF:CB:93:12:04:32:6F:0A:B6
Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial: 010D0C9F4328584EA79D4CDA6A08398CD524F980
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/c07a0abd-8db6-3572-a509-8f6e30618599.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14813
IP address blocks: 72.22.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:4c:da:6a:08:39:8c:d5:24:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=0abb08e3-a374-4bb4-8e75-1fa01652de00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:0f:f7:92:38:7f:b8:37:8c:08:51:66:b3:
4e:32:02:b8:bb:74:35:31:3e:d1:c3:9d:d7:3b:d6:
b4:ba:29:6b:b2:b7:82:25:17:62:99:bc:78:86:52:
ff:40:9b:c9:6c:a9:af:b0:d1:1e:bd:db:ff:80:df:
82:22:5f:5b:6f:1c:fe:cb:33:94:2b:0f:4c:ab:96:
f9:e8:6c:01:d8:ae:ef:7f:30:eb:0c:15:98:1f:59:
2c:65:73:a2:54:19:e6:08:fb:fc:18:81:13:62:db:
bc:38:71:63:8c:11:71:e4:88:c1:2c:46:20:f0:ce:
f2:f1:76:21:1f:2a:2f:55:d9:14:62:1f:4e:60:23:
f6:bf:8f:a0:42:6d:a6:68:23:9e:1e:62:ef:b9:f5:
f1:23:aa:51:e7:aa:e3:1d:ae:80:dd:d5:1e:ff:8c:
a8:eb:59:41:67:ef:d8:62:a7:13:e3:9a:df:34:ec:
cf:2d:0f:99:42:42:4c:04:a9:8e:4b:be:c6:3f:99:
ab:75:8d:14:e4:99:72:20:80:c1:a8:1f:bf:a9:cf:
3f:e1:91:49:6c:8b:15:02:84:6d:6a:ba:49:93:56:
b3:54:65:fa:90:c2:50:55:80:27:f3:7b:cf:31:4a:
1b:07:de:90:f7:fe:18:9f:6d:11:31:8f:e9:d0:40:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F0:D3:77:93:72:26:28:D8:FF:E2:AF:CB:93:12:04:32:6F:0A:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/c07a0abd-8db6-3572-a509-8f6e30618599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
X509v3 Authority Key Identifier:
keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:84:b2:52:8b:0b:c5:d3:1f:a3:26:6b:1a:53:17:74:5d:5c:
a0:ec:d7:ac:dd:03:90:67:d6:1a:89:76:e9:99:23:1c:75:ea:
5b:57:0a:85:45:5b:8b:f8:9e:34:66:24:fb:27:bf:a4:17:55:
a8:e2:5f:e7:bb:0f:89:37:90:fc:50:e9:43:07:59:53:01:b4:
9d:cd:e7:54:d0:cc:06:81:37:df:ca:66:c9:ef:4b:54:b2:f6:
40:0e:3d:c8:37:35:67:4e:f0:64:19:0d:06:5a:c1:4a:6d:60:
5e:6e:a4:dc:36:54:6e:33:eb:25:a2:57:f7:ea:de:15:22:8d:
9a:ca:80:f9:8e:5f:96:27:54:24:3b:90:8a:63:09:cd:9d:ed:
1a:0c:11:3a:95:53:7b:b9:2e:1b:da:28:8b:6b:3f:6a:f8:5a:
5f:b3:4f:8c:1d:1d:54:65:93:86:21:4b:f6:cd:22:d4:39:c6:
73:fa:1c:63:af:99:d6:d0:ae:97:9c:62:18:51:86:dc:4c:e1:
ee:a3:41:6b:e0:9b:ad:3a:41:70:ac:d2:ec:c8:00:14:e0:5e:
2f:9e:09:25:66:81:ad:89:e5:28:1c:9b:fa:1e:b0:9a:7e:3e:
51:96:b0:a6:97:1e:9a:fa:b0:d2:6f:15:ce:90:42:22:e0:91:
42:e3:c2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:30:07 2026 by rpki-client