
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa
File: d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa (raw, json)
Hash identifier: SaA8UuvTt0YIf8VjWibXQzDpSlxf6ZkvqnPmTGXnun0=
Subject key identifier: 6B:A3:6E:72:47:9D:A0:31:67:09:BB:DA:37:8F:0F:D7:D6:14:E5:14
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584DFBD5EB382455B239740A29E0
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa
Signing time: Thu 28 May 2026 13:00:12 +0000
ROA not before: Thu 28 May 2026 13:00:12 +0000
ROA not after: Wed 26 Aug 2026 13:00:12 +0000
asID: 11090
IP address blocks: 72.35.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fb:d5:eb:38:24:55:b2:39:74:0a:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: May 28 13:00:12 2026 GMT
Not After : Aug 26 13:00:12 2026 GMT
Subject: CN=70897e30-68d5-468d-bd92-923a231df1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:00:e3:7d:03:bc:0f:e4:9e:d4:6d:38:30:
54:ba:38:cc:66:02:bd:c7:0b:28:ae:08:c1:1f:0f:
7b:2e:ae:5e:99:85:2e:6f:ab:08:1f:98:b4:f0:7d:
14:86:71:b0:03:80:01:4a:b9:1f:cd:48:bf:73:db:
e4:87:cb:55:4d:76:0f:19:ec:60:00:a4:ba:7e:97:
1e:df:db:85:e4:6c:f5:44:9a:df:34:3b:fb:99:8c:
2f:f4:4e:e5:6a:02:1f:61:c5:40:58:d4:48:34:69:
03:77:c8:b2:72:6f:6b:dd:f5:42:29:ec:cf:69:c8:
d0:d1:c0:e5:4b:aa:1f:21:6a:f0:3e:56:14:47:45:
3e:80:18:7f:90:97:75:84:e6:c9:ca:4c:31:ba:a0:
2a:2c:ef:d3:66:98:dc:62:5a:fc:45:d3:68:85:c7:
65:89:63:b3:bf:23:46:1b:4e:b1:13:91:11:99:0e:
a7:51:d8:b1:5b:0b:48:9d:70:09:1f:f4:3d:61:89:
c7:8b:8b:2c:a8:54:de:92:4e:d9:b5:e1:80:8e:c1:
68:08:be:9c:93:90:16:cf:12:2e:06:fe:02:a7:0b:
43:a8:0a:e6:87:8a:68:9e:0b:77:e0:8f:8b:06:37:
c0:5c:a0:a5:3f:da:12:58:bc:5c:66:4d:78:11:79:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A3:6E:72:47:9D:A0:31:67:09:BB:DA:37:8F:0F:D7:D6:14:E5:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
72.35.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:41:a6:0d:c6:3e:cb:f0:16:8e:1d:09:74:54:34:52:84:15:
35:2f:a7:d8:62:3a:3b:7a:c0:e4:a8:70:be:67:3d:29:13:46:
1f:70:0e:d2:05:2e:44:37:08:8d:c5:14:3a:f8:e3:15:62:e3:
92:e1:ff:aa:01:82:4f:d8:35:74:fb:06:4a:df:d1:12:d9:9f:
c2:bb:fb:0b:00:bd:1a:9e:7e:31:b2:0f:73:74:8a:d6:c9:16:
a6:8f:b3:bf:14:15:5a:83:11:1e:87:59:46:1a:d2:7e:91:65:
7e:35:35:3b:ba:a3:c6:ed:e7:79:cf:b3:85:ba:84:bb:9f:89:
b5:0c:87:90:85:90:0d:64:60:a4:36:20:44:8f:d3:eb:28:d3:
17:69:3f:e2:75:27:ee:61:93:05:71:c4:58:9e:d6:3d:0d:38:
2c:9f:34:61:51:5a:ab:ff:6b:0d:72:8e:9e:97:44:e7:84:74:
da:93:35:d1:d6:60:dd:9f:df:06:fc:25:a1:15:d3:cc:fb:b5:
93:84:1e:a3:d8:21:7f:46:12:98:bc:42:0a:9b:f7:94:7c:45:
2d:6e:3c:2b:19:b7:92:96:d3:07:5e:58:55:13:05:a4:cd:dd:
38:31:70:81:11:cb:34:2b:1d:08:38:70:db:71:98:d9:ac:8d:
ce:d2:b7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:58:38 2026 by rpki-client