
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/73f5f923-a145-3582-a788-fe56fb4baa8c.roa
File: 73f5f923-a145-3582-a788-fe56fb4baa8c.roa (raw, json)
Hash identifier: May+64eig+V16cOMs+KKRL1C/7Cp/Sl5giuXXj0BO84=
Subject key identifier: 17:30:97:10:31:0D:C1:C1:39:67:DA:52:93:DF:46:F4:BF:7C:64:F3
Certificate issuer: /CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
Certificate serial: 010D0C9F4328584EA79B59FB85816E3C03F72000
Authority key identifier: BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/73f5f923-a145-3582-a788-fe56fb4baa8c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 3580
IP address blocks: 63.133.224.0/20 maxlen: 32
69.172.128.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:59:fb:85:81:6e:3c:03:f7:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=63461b3a-4ae7-44d4-a67c-399e4fda3d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:6b:e2:c8:75:4e:2b:b3:c1:95:b4:cb:b2:
4f:43:19:c1:6c:e6:98:bd:99:d8:30:0f:82:72:9e:
01:84:6d:b5:f3:e7:25:6e:f0:d2:cb:e7:88:f0:7a:
ac:3b:60:7b:3b:00:b3:ff:f4:6c:ad:31:30:f3:f8:
11:3f:41:dd:c8:ef:cc:65:13:5d:3c:10:05:8e:70:
4a:66:a7:7b:20:0a:cc:01:60:ae:60:05:d3:5d:0e:
cb:00:81:e3:bd:49:95:1b:a4:3e:00:57:0f:c1:3d:
49:91:b1:21:f7:07:1b:68:89:29:b1:c3:4d:89:f5:
c6:7d:c5:9f:1b:a3:d6:20:d1:09:65:7a:13:a2:ff:
de:72:75:ad:bf:fb:7f:96:0e:33:88:0c:f2:b2:69:
66:35:f0:ec:b3:1d:c1:14:9f:05:6a:5d:ac:29:7f:
ab:23:0b:26:7f:b5:c9:21:70:73:f0:fb:8e:9c:9e:
bb:f0:b0:5e:bb:5d:f9:55:23:fa:e7:bc:65:73:c3:
2d:17:9c:25:66:c5:a1:41:39:5c:a0:eb:04:df:45:
15:8d:24:14:7e:09:15:d8:b7:f8:d8:66:67:9f:da:
69:5a:f3:1c:e0:3a:f9:4b:c2:b9:b3:7f:91:ed:dd:
33:3f:bd:cc:63:fa:2d:32:df:aa:99:08:b0:f9:7a:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:30:97:10:31:0D:C1:C1:39:67:DA:52:93:DF:46:F4:BF:7C:64:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/73f5f923-a145-3582-a788-fe56fb4baa8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl
X509v3 Authority Key Identifier:
keyid:BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
sbgp-ipAddrBlock: critical
IPv4:
63.133.224.0/20
69.172.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:9e:b6:89:e2:f8:99:a5:91:ac:a0:16:41:f7:86:4c:f3:0e:
7a:f9:2e:0e:05:4b:b2:77:18:52:f5:20:d6:cc:b5:39:a4:ec:
c8:87:36:5a:44:4c:4b:8c:66:b2:9f:27:1a:8b:6f:df:ce:f8:
b7:08:b7:23:78:00:3c:eb:5f:8c:54:2d:3b:71:e0:9f:96:e0:
bf:f5:f8:e4:f6:f2:6c:5c:1b:32:f6:a8:e7:51:67:05:75:87:
3f:3d:cd:e3:13:02:e2:4e:97:48:0e:65:74:38:bd:07:17:5b:
ee:3e:e3:3e:5f:fa:29:0c:c8:8f:e3:4f:7f:14:2c:54:18:91:
df:0e:43:74:ce:72:16:38:a2:97:57:2e:22:a4:e5:5d:b1:00:
73:88:15:81:84:e9:03:da:76:ff:e5:24:bc:f9:7c:50:2b:04:
7f:0f:a7:34:88:dc:07:13:4a:85:cd:6a:d3:44:b6:6e:02:6d:
94:dd:a8:06:b4:63:5c:86:46:58:b3:c2:9b:96:e5:d2:82:0d:
67:87:1c:28:16:b5:c9:be:ec:84:83:20:eb:30:47:d6:df:44:
03:29:81:90:54:f1:39:d2:73:7b:3d:e4:5e:d3:a0:c4:d2:5f:
7e:20:34:65:3c:00:1f:4b:3d:54:d1:2d:18:4d:bd:85:76:e9:
b7:e2:d0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:14 2026 by rpki-client