
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/72de5635-1343-3d96-9a79-e23be9d45b85.roa
File: 72de5635-1343-3d96-9a79-e23be9d45b85.roa (raw, json)
Hash identifier: WCCzEp8f9d8X/+LzWvDZaHdFObRd3mMK2JdiFXeyA24=
Subject key identifier: 94:4B:4E:38:6E:F4:4D:F9:C7:23:6B:64:E2:F3:51:AC:DC:33:B3:5E
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584EA798AD7F4E2E5A01EAF7DF40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/72de5635-1343-3d96-9a79-e23be9d45b85.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 852
IP address blocks: 209.115.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:ad:7f:4e:2e:5a:01:ea:f7:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=1932acf2-8d49-41f7-b31c-01840db278c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:1f:9a:ef:19:6b:71:dd:0f:82:88:b2:69:
4e:57:b2:c0:cd:37:05:95:fc:c0:08:fe:79:71:39:
8a:0a:d4:27:93:40:b1:44:9a:d5:08:5b:5c:6b:a5:
54:09:e9:39:a3:33:a0:c5:bf:15:d3:cb:2a:f5:f2:
3d:51:72:13:5a:3f:6f:c3:b7:af:db:ed:be:4b:26:
40:d4:5d:22:be:fc:3d:e1:14:70:57:78:05:6a:4a:
17:6f:9b:e8:58:a2:52:83:d9:35:80:37:37:78:98:
a7:91:ee:18:70:4c:23:d0:80:ab:a3:96:6e:e5:f6:
62:1f:5e:d8:12:81:60:e9:8b:d1:1a:42:dc:65:b9:
de:09:8d:6f:0d:0e:13:bc:72:0b:f2:e6:ce:c1:6f:
1c:38:c3:83:29:81:38:41:a2:39:e5:a5:5e:9d:53:
82:bd:38:58:a9:83:3b:77:84:3a:b1:d1:52:ab:f8:
9f:83:3e:c3:65:7e:1d:61:1c:5d:a5:e8:e0:8b:d2:
ae:8a:a4:a5:8e:1f:1b:9d:9a:b6:72:a6:a9:91:6b:
93:bd:bd:26:f3:62:89:ea:2d:b7:f2:2c:e0:31:e6:
19:36:4a:c9:3f:5d:12:de:a3:b1:09:72:46:4d:22:
1d:17:ea:cc:15:34:d8:f2:49:10:61:cf:bd:ba:99:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:4E:38:6E:F4:4D:F9:C7:23:6B:64:E2:F3:51:AC:DC:33:B3:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/72de5635-1343-3d96-9a79-e23be9d45b85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.115.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:4c:f4:92:fe:e0:6f:8e:fb:8b:70:e1:28:49:44:d8:f2:47:
9a:b6:3d:9a:4a:80:12:1b:cf:81:74:81:8b:12:ee:42:6c:7a:
07:36:c5:d7:b3:75:16:e1:cf:06:f0:e6:82:2c:fa:70:2f:f2:
38:6e:f4:f5:6b:5f:fb:8e:7f:e0:2e:a6:a6:2f:14:ae:08:7e:
61:f0:cf:e8:81:2a:8c:9e:2e:cc:ff:0c:56:6b:c0:a4:8f:9a:
e9:46:b4:2a:31:68:3a:2d:92:a0:ed:fa:72:66:39:ad:e4:6e:
8c:39:dd:93:bc:c7:98:df:23:5b:3d:ce:3e:c8:ca:62:a9:a5:
c8:2f:f3:30:d9:17:aa:29:a9:35:13:d5:0f:5c:4c:de:6c:7d:
5f:25:1b:32:54:bf:39:1e:57:77:64:5e:d4:bf:a6:03:3d:a0:
18:13:9a:30:74:84:af:48:fe:85:21:cc:18:0c:69:bb:46:9e:
4d:82:6b:a1:f5:ba:82:80:f5:9c:0d:cd:52:17:f1:6f:73:a4:
e2:5e:f3:c1:c8:aa:97:28:e9:4f:29:6e:ea:4d:9a:97:96:23:
af:0a:da:a2:cb:86:2b:a1:fd:16:97:23:1b:41:ca:c2:43:f9:
02:ca:0f:98:56:d8:3b:1e:a5:9f:e5:df:92:f5:96:3c:81:58:
99:32:bc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:11:49 2026 by rpki-client