
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa
File: d95300ce-edc2-374f-9bbe-f66958b3ae81.roa (raw, json)
Hash identifier: 4DyJG58B6l+inyOF/jjaIQ2h4+vuCVcdpsmIZckxEtc=
Subject key identifier: 59:BB:1C:69:4D:B1:76:8D:08:2D:10:56:4D:75:63:AE:10:B1:08:B7
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584EA798E322BCE9EE3D1E71F380
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 11090
IP address blocks: 72.35.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:e3:22:bc:e9:ee:3d:1e:71:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=e182d543-115b-46ab-baf5-cf89d3954380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ee:54:c2:20:19:9b:4b:dc:ae:16:ce:bf:6c:
be:6f:c7:7d:57:06:69:0a:7f:c5:91:ed:c0:5d:81:
7b:94:b5:cc:bd:54:e7:87:c6:59:94:6a:97:bd:99:
5d:34:36:cb:21:f9:c5:89:ae:4c:ce:3b:9b:56:60:
d6:d7:30:91:5a:de:57:28:58:61:5d:45:e1:2b:c3:
d7:bd:78:02:cf:92:64:69:55:64:47:70:72:02:40:
5c:6e:13:ae:e8:dd:1c:3c:9d:a5:8d:88:5b:44:d4:
74:c0:1d:0e:41:c3:df:61:a9:f7:86:29:15:17:cc:
c8:89:19:a6:1f:f6:60:c0:3e:b9:4f:41:80:fb:d3:
86:e3:8b:c5:56:f4:36:6e:28:29:06:81:1e:25:bc:
52:e4:b1:07:70:70:12:69:d7:cb:ae:e9:87:3f:69:
0b:e1:3c:ef:ea:bd:20:4f:68:36:21:87:75:75:39:
df:4f:46:0e:79:84:b3:e4:58:9c:aa:27:50:d7:d8:
15:b8:59:23:4f:cf:52:57:88:d2:f2:2e:79:91:a1:
c1:02:fc:c2:20:1a:ff:df:d2:f7:dc:ec:00:40:77:
68:e9:c0:b7:ce:73:d4:24:9f:e1:0e:b9:8a:af:85:
c9:13:9a:46:3c:18:32:89:fc:03:44:2d:df:e0:ee:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BB:1C:69:4D:B1:76:8D:08:2D:10:56:4D:75:63:AE:10:B1:08:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
72.35.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:33:95:5c:ac:e3:16:94:e3:95:a1:ff:8a:c7:63:38:cd:0a:
31:cf:fc:7f:2b:c2:00:3a:bd:a9:98:4b:7a:a5:2f:93:18:1e:
98:b6:91:8e:f9:fc:06:28:75:b3:be:50:04:30:8f:8f:93:df:
21:f6:62:a9:4d:33:12:4e:6d:8b:40:05:05:a8:62:97:b3:ac:
64:88:dc:10:f8:61:d5:25:f4:9f:fd:4b:b2:1c:d3:19:70:60:
75:1f:5f:41:33:37:a5:54:fc:23:91:50:5e:de:6b:f3:c7:07:
6c:b2:8f:69:a1:a3:2e:64:5e:8f:cf:6d:ed:30:ec:8e:13:eb:
8c:9a:a5:77:49:dc:57:ed:c8:19:be:07:5c:fb:4a:e9:54:80:
2c:81:cd:a9:db:f9:74:74:24:3d:1b:01:42:04:12:cd:68:74:
c8:08:8d:d5:d5:10:68:9d:e0:10:c7:99:d8:f5:de:ca:a6:55:
54:bd:ca:53:bc:0f:e2:b1:da:91:8c:c2:88:b1:1f:57:c4:d4:
2a:4a:17:18:29:d9:5b:84:66:1b:85:d1:03:c3:9f:71:5c:68:
28:c5:22:f8:4a:1d:5f:96:07:c7:00:a1:e9:ff:ec:d0:58:cf:
4a:05:bd:97:bd:5f:ac:d0:1d:96:a3:52:b5:74:72:7c:89:4c:
d1:34:a6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:47:51 2026 by rpki-client