
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa
File: a36891e5-8973-313b-a68a-6ede44be3f67.roa (raw, json)
Hash identifier: uxjWbe5qRGciM6EOzw0TpicCnqnSE5OAPrUqLLPkKCM=
Subject key identifier: AA:3A:F0:A6:23:D5:AC:17:B7:C4:B8:23:B2:3C:FC:66:45:5A:4D:53
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F4328584EA79B61B747AED60E51362080
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 931
IP address blocks: 170.39.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:61:b7:47:ae:d6:0e:51:36:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=dc7c1e99-a893-4edc-89c6-96c829b88bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:33:8c:c7:f6:76:4d:67:c1:c4:97:cf:5f:
0c:a5:19:15:f0:31:6d:07:3d:2d:36:b2:67:2c:14:
ca:91:a8:c9:ff:29:a6:f0:71:c3:bd:1b:cf:88:9a:
8a:3f:9d:9c:15:ba:be:3f:e0:85:00:6d:c5:ef:6f:
35:0e:f8:58:30:5e:7a:55:f2:2f:6c:52:9b:d4:a7:
42:d4:11:9f:a7:4e:c1:1a:22:e5:cc:2f:1d:5c:6e:
2b:0b:6d:fc:1c:b7:44:ed:2a:6c:e4:df:d7:c1:95:
53:17:7d:2d:9a:11:15:25:b9:40:0d:d3:ec:14:3a:
2e:1d:a8:21:88:ec:57:92:c9:57:0f:88:f3:14:7b:
fc:f0:fc:2b:fa:c7:33:87:34:56:48:0e:f3:9d:83:
ef:a0:32:94:b3:e0:a7:e7:6d:25:ae:b6:ec:9b:38:
c5:8a:3f:c1:b8:11:a3:4a:87:c9:31:3c:72:18:11:
20:f2:65:6c:a9:9d:ed:ff:30:5a:7b:a0:f8:e8:8f:
0c:1c:29:0f:8e:29:9c:74:a7:4f:7c:b8:3e:c1:a6:
b5:55:f7:4b:41:04:da:d6:74:b1:6b:ec:f4:b6:61:
44:b1:00:4c:7b:6e:e2:78:c0:75:d8:4b:ca:8f:b4:
ba:ce:59:74:b9:1d:a0:cc:82:71:21:92:ea:cb:17:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3A:F0:A6:23:D5:AC:17:B7:C4:B8:23:B2:3C:FC:66:45:5A:4D:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:dd:67:e1:17:56:5c:f4:f5:cd:60:a5:23:5f:a7:03:db:84:
1e:39:f0:7d:2d:f9:75:03:bb:6f:23:ce:dd:ff:d1:e2:ed:3c:
ad:7e:27:d4:44:fd:0c:c2:29:dc:04:cd:de:6d:bb:d5:97:84:
11:98:b1:46:cf:71:e9:02:6a:34:f1:1b:b8:91:1c:97:cf:99:
e5:f1:9c:d6:ab:6b:8d:fb:ab:a7:61:93:cc:14:fb:91:a1:93:
65:e4:e9:00:04:5c:dc:ba:48:c3:66:ff:a2:b6:3f:92:68:30:
e8:8a:eb:06:d7:4a:70:f3:7d:5b:88:de:f3:b4:33:13:5b:3f:
0e:01:64:9b:9d:bb:36:3e:b3:9d:ff:62:f2:09:b1:93:2c:3d:
bb:e6:1e:bb:2e:b7:29:50:27:cc:2d:ce:ad:84:a9:b8:23:d7:
ef:1b:6a:0e:fd:8b:53:77:f5:f4:04:7a:c1:b6:19:c5:f1:40:
4e:0a:53:94:f0:74:c9:f6:20:01:3e:61:72:ef:8d:9f:8a:47:
74:65:e9:0e:28:4c:01:95:e8:e5:7a:16:55:60:49:e6:3c:09:
2a:45:5e:2f:80:3d:65:83:fa:0e:f9:f4:d5:81:a8:45:81:f2:
03:63:06:ec:67:58:c9:db:98:2d:03:47:78:37:81:98:1d:47:
5f:c3:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:13:35 2026 by rpki-client