
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa
File: 31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa (raw, json)
Hash identifier: pnDQ4E4ARep8xZsEyjsYeiZs7cuR8dzxMrsXRp6cKns=
Subject key identifier: F6:D9:A3:F7:C6:41:12:D5:87:94:FB:18:78:3A:3C:63:EF:E5:11:23
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584EA7961739B7C6ABA3F3F5B4A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7861
IP address blocks: 209.20.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:96:17:39:b7:c6:ab:a3:f3:f5:b4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=aceb754e-90fb-4f2b-8c54-6197ccfb12c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a2:36:eb:94:12:de:22:ec:8e:6e:a2:42:7c:
5c:48:a1:e1:dd:c3:93:7a:a1:ba:d7:c3:67:04:fe:
64:ea:fe:de:08:8c:3d:0f:5b:cf:de:66:21:93:b0:
b2:a7:ca:43:2e:d2:97:54:ce:e1:47:e5:c8:56:fb:
5e:b3:51:12:5a:bc:77:37:22:fb:4e:3f:19:11:86:
62:28:91:ff:2a:b8:59:3d:63:ca:ef:b5:5c:e0:7c:
9e:23:2d:e4:bc:13:4a:4a:0b:87:ec:79:d3:4d:de:
83:ec:3c:dd:d1:bb:3a:1c:cd:94:86:a8:a5:89:59:
e0:66:c2:e9:37:b9:2c:a2:af:2a:a9:38:a2:96:ce:
91:8f:23:92:14:1e:c4:c8:88:ab:fa:27:cd:a6:a7:
f7:49:a8:3f:ba:d6:0f:ae:ab:44:76:6f:f1:21:c0:
1a:0b:56:35:5b:60:a4:08:3c:cb:33:dc:5a:75:3a:
43:57:15:ff:61:d3:93:ff:c7:31:96:80:74:2a:86:
4b:68:c3:c6:f7:dc:2b:a0:cf:d5:b3:16:50:de:a4:
d4:d8:97:c7:59:2b:cb:16:91:d8:4e:d3:0f:22:4d:
50:39:59:b4:e5:4c:f5:a0:1d:05:c0:99:ae:9c:6c:
3f:1a:a4:0c:2d:fe:88:bd:dd:15:85:78:1c:6d:98:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D9:A3:F7:C6:41:12:D5:87:94:FB:18:78:3A:3C:63:EF:E5:11:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.20.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:12:ff:b3:ac:eb:cc:6e:3f:4c:44:bc:0e:ac:20:9e:df:fa:
fe:6d:23:ea:23:e3:2e:e7:b2:79:15:f4:53:5d:cc:1d:ec:0a:
e2:82:33:dc:41:8b:52:9e:a7:04:0a:d9:8e:54:cd:e8:1d:a7:
67:be:95:73:16:48:e8:27:75:10:77:19:e9:9b:17:13:b0:73:
27:2d:05:42:62:fb:70:10:5a:02:35:0f:04:f1:2f:92:99:a5:
0d:3b:61:3e:a4:ec:c9:99:40:56:16:54:a3:ad:70:f5:b3:17:
bf:a2:04:f6:f5:b2:36:1a:66:46:c4:6e:d2:71:a3:8d:01:c8:
66:fe:57:61:1e:d2:d6:34:75:65:4d:8e:47:64:d8:66:f6:ac:
35:79:f9:e5:be:5a:cb:d1:0b:29:66:e0:c9:fa:5e:fd:43:2a:
88:f0:78:03:b9:0f:91:b4:93:1a:c5:35:2a:4f:f5:95:05:4b:
fb:5e:21:e0:7d:20:1f:c7:0f:6e:92:81:3d:e9:2f:9b:50:8b:
16:05:bb:75:a0:11:c4:d6:7e:f8:79:c1:bd:48:6a:10:7e:70:
61:53:51:73:61:46:52:69:80:ef:81:97:f1:87:a8:8c:e4:28:
f4:76:cc:8e:73:bc:2f:27:ac:a3:3d:23:58:12:ae:75:4a:cd:
c8:6d:c1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:44:12 2026 by rpki-client