
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/9432e293-6f8b-3df1-9f75-80a6dbd7b23c.roa
File: 9432e293-6f8b-3df1-9f75-80a6dbd7b23c.roa (raw, json)
Hash identifier: K1jiQMnLrpAQxhVHKY+HhFC0ao2FmZiQboKo8MPA5UY=
Subject key identifier: 9D:C7:8B:99:6F:FA:C1:3A:14:07:77:30:DF:02:46:11:75:2A:27:31
Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial: 010D0C9F4328584EE7BCBA8BD08835952F58C470
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/9432e293-6f8b-3df1-9f75-80a6dbd7b23c.roa
Signing time: Fri 21 Aug 2026 01:00:12 +0000
ROA not before: Fri 21 Aug 2026 01:00:12 +0000
ROA not after: Thu 19 Nov 2026 02:00:12 +0000
asID: 14618
IP address blocks: 72.42.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e7:bc:ba:8b:d0:88:35:95:2f:58:c4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Validity
Not Before: Aug 21 01:00:12 2026 GMT
Not After : Nov 19 02:00:12 2026 GMT
Subject: CN=431d58d0-bc10-4a35-93c1-4b55db10d03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:08:8f:ad:3f:02:ae:c1:11:45:51:e5:5c:
42:3b:47:f6:ba:d4:b6:68:a6:6b:7f:9c:8b:20:19:
67:2f:1c:9b:c7:f5:61:2e:1e:78:69:71:5e:f9:d7:
18:1f:5d:1d:ac:e8:3f:79:0c:df:69:aa:da:7f:87:
53:b3:ec:44:ae:03:c4:83:db:56:6c:16:b7:21:ce:
0d:05:7f:bb:d7:07:9d:c8:11:f8:44:23:fa:17:c5:
4c:b2:3d:4f:90:48:42:7e:c9:ad:1f:65:34:49:9f:
22:aa:06:68:8a:7d:20:08:c9:b7:b4:0c:df:64:66:
0b:03:f8:50:eb:ad:35:73:97:54:e2:18:45:ea:4d:
26:68:15:f6:92:b0:ee:04:a8:e0:99:fc:3d:1b:e3:
39:37:3a:cf:40:96:21:fb:d2:fb:9f:69:58:2b:a1:
97:cf:1f:00:6b:cd:79:25:69:f6:8d:d4:0d:5a:c7:
d2:ac:57:e7:93:00:fe:22:f3:67:41:a2:3a:61:63:
07:00:6b:2b:28:83:43:e6:49:ab:a0:83:04:c7:34:
fe:ea:31:f2:b4:e9:45:64:6c:24:17:08:48:57:a5:
f3:9e:0c:b2:7e:d2:ba:62:22:55:e6:27:86:ff:7d:
23:a0:92:e5:6f:2c:7a:50:52:dd:08:9a:b9:c8:59:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C7:8B:99:6F:FA:C1:3A:14:07:77:30:DF:02:46:11:75:2A:27:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/9432e293-6f8b-3df1-9f75-80a6dbd7b23c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
X509v3 Authority Key Identifier:
keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
sbgp-ipAddrBlock: critical
IPv4:
72.42.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:f1:75:79:a1:ab:8e:31:ea:d3:bb:11:f7:6c:77:0d:b6:91:
bc:13:46:a6:9a:30:45:d6:e0:da:78:5b:95:37:82:0a:b9:8d:
98:17:ca:1f:e5:61:26:11:2d:77:c0:b7:08:31:f2:33:48:46:
a9:ad:77:24:30:ce:5c:cc:1f:8b:3c:c7:1b:d3:c9:5c:52:c8:
1f:74:bd:db:6f:13:f4:15:60:01:c1:2e:4b:1d:ac:02:07:08:
17:49:2d:df:17:a6:69:2a:50:fb:95:b4:bb:84:ad:6f:31:83:
a5:ce:c1:4c:0a:e8:27:54:d7:20:b2:8b:9a:48:71:b0:cc:e9:
11:5e:55:24:b6:c0:0c:72:7b:b3:a3:22:0a:ea:47:ed:b4:17:
a4:aa:ec:37:a1:ac:7b:80:da:64:fc:42:54:8e:03:6f:fa:33:
a1:c8:cc:70:56:76:13:30:84:8c:cf:a4:0f:5e:cd:77:98:17:
cb:2b:07:38:22:bd:ae:8b:6a:f6:ea:9b:0b:6b:ff:c4:7f:11:
a1:8f:d6:88:a8:45:2c:22:79:e5:49:c4:ef:8d:69:65:d6:5c:
67:11:dd:b9:3e:20:49:1c:65:c0:c8:21:9e:c4:be:38:92:71:
23:41:b7:2c:f4:5f:ba:b6:fb:c4:03:7d:69:f9:2d:e7:f9:90:
c1:da:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:27:47 2026 by rpki-client