
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa
File: 7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa (raw, json)
Hash identifier: YZBvbUk2ELx90+/G7YQkIkAmFNkcNEl2lvtAZQMroVg=
Subject key identifier: 64:5D:99:62:48:53:0D:F9:4B:4B:55:5F:17:D5:65:70:ED:9C:C4:0F
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584EA798E3ACFA190ADE0CDC1200
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 11090
IP address blocks: 72.35.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:e3:ac:fa:19:0a:de:0c:dc:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=00ffc957-454f-4070-9474-ebb693f88c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:76:2a:e4:38:dd:18:4b:1c:ff:e0:0b:62:
00:e5:d8:26:d3:a8:58:e4:6c:03:80:e9:75:7f:1e:
d1:01:09:78:f9:61:cf:52:21:89:34:61:53:48:93:
6e:ee:44:fc:56:de:cb:51:3b:2f:cc:9d:c7:c7:d3:
5c:d1:a1:19:4a:0a:c5:55:a9:fb:86:47:b4:88:a2:
e3:78:33:fd:e8:53:47:af:ff:78:7a:4e:e2:ac:b2:
73:50:a3:35:49:1d:1b:2a:e0:c7:09:fa:61:ef:04:
65:8c:95:ad:09:d1:1b:55:40:4b:e8:f0:b4:36:6f:
d1:09:ab:fd:bf:60:84:7e:25:5d:f3:fe:d9:b5:24:
2b:e9:5c:3b:39:9d:7d:44:d0:2a:74:2f:6a:62:86:
46:b2:83:13:24:a1:2c:78:d2:a5:39:4d:06:8f:88:
ac:45:7c:cb:9e:ba:e1:61:8f:f5:85:b4:77:d7:9e:
15:7d:d1:b5:1c:66:5c:7d:52:66:9c:1e:1b:9d:14:
14:40:ef:4b:dd:4b:34:94:2c:c0:e0:ce:dd:14:39:
d5:aa:e4:30:0b:e0:c7:0a:06:7d:77:fe:9b:b5:13:
83:97:02:ab:39:f0:68:09:04:16:fd:9e:bb:6a:d3:
82:1c:1b:ab:8d:34:e2:66:3e:14:d6:58:3d:7a:f9:
ca:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5D:99:62:48:53:0D:F9:4B:4B:55:5F:17:D5:65:70:ED:9C:C4:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
72.35.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:01:a7:3e:49:67:7d:4c:ee:3e:d3:33:c0:7c:e8:7f:70:8f:
44:f6:7c:99:b0:28:23:8b:9b:d5:d1:f4:b0:25:22:82:9a:53:
70:44:90:d3:b5:8a:ee:ee:fe:4a:5a:82:40:f2:f9:90:2a:17:
03:92:63:2b:ce:67:6c:a3:fa:bd:0c:6b:71:21:34:4d:48:72:
d2:6f:44:d6:15:a8:28:de:82:22:b1:49:0e:f2:b5:20:a9:94:
e7:45:40:6c:51:f6:18:11:be:4d:df:cb:48:5f:a0:bf:98:28:
5b:75:55:df:f5:1d:7d:b9:1d:d2:12:84:d5:36:53:4e:c2:14:
18:f8:9d:53:47:e5:f2:88:df:45:a8:58:cd:80:08:ba:b2:b4:
91:3c:b5:21:02:4f:a3:08:ab:cb:76:e2:21:a4:e6:53:b1:10:
91:4c:46:85:61:12:69:41:c3:fc:c2:97:20:33:ad:af:2e:68:
25:6a:75:8f:83:40:7c:13:79:c7:bb:b7:2b:6b:f9:8f:e7:3e:
41:f3:b7:d3:19:a3:60:f4:16:10:ee:ac:de:23:d3:05:21:4d:
48:e1:b6:bd:fd:78:e5:64:5f:af:00:c4:15:d9:ef:12:7d:93:
d3:d7:79:c8:76:5a:79:6c:8c:0e:03:c8:22:d6:7c:07:e4:4d:
fa:d0:8b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:59:36 2026 by rpki-client