
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dce79b13-419a-36f1-9103-105e2a77b3d8.roa
File: dce79b13-419a-36f1-9103-105e2a77b3d8.roa (raw, json)
Hash identifier: ZBl0i06XfYUl/xKNGxeKDcExVH8wTX/H9xde981Q/KE=
Subject key identifier: 80:AE:58:2A:3D:6E:38:87:A7:4F:39:A3:91:C1:31:A0:B1:BF:66:60
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584EA79A24B8632D98D26DA35A00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dce79b13-419a-36f1-9103-105e2a77b3d8.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 852
IP address blocks: 209.29.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9a:24:b8:63:2d:98:d2:6d:a3:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9f5710d9-0f7d-4f07-b55c-c87433d5d7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:db:90:32:fa:15:ce:f6:ec:62:ba:3d:d9:
eb:f8:d3:90:70:b7:93:26:eb:a7:8d:3b:1a:21:71:
8e:72:32:23:18:18:7f:d8:32:d2:23:b8:ae:db:a5:
11:90:49:5b:e7:f1:6b:7c:bf:c2:33:f3:3c:5a:6e:
74:71:82:2b:17:8e:ed:94:10:ef:9e:74:1d:7a:57:
3b:b3:ed:8c:88:32:6b:2d:8d:cb:1c:00:4c:81:fa:
88:48:89:e7:f4:5b:1c:1f:9d:4a:de:98:ab:13:91:
57:c4:95:14:c6:65:87:6c:fb:9f:e5:a3:3b:c9:36:
b1:11:a3:74:24:6e:46:5b:0a:67:9a:5b:bc:be:0f:
a7:7d:d4:37:11:24:fe:2c:3b:57:97:03:5e:ef:39:
e5:b1:da:56:f7:5d:20:b8:a6:eb:87:40:5b:87:60:
cd:3a:77:f1:94:57:5b:80:cd:b1:18:ab:0d:2f:29:
b9:62:ca:cd:f9:13:20:5b:31:73:86:a2:fe:5d:4a:
43:85:a2:e9:5d:37:68:29:d3:71:fc:0e:12:36:04:
3e:0f:db:7c:dc:ff:f7:3f:07:14:bd:ec:38:63:ec:
28:07:73:d5:94:36:45:b1:48:5b:ab:4d:e7:d4:30:
36:bd:88:6d:ce:87:6a:3a:5b:83:4b:a0:22:42:53:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AE:58:2A:3D:6E:38:87:A7:4F:39:A3:91:C1:31:A0:B1:BF:66:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dce79b13-419a-36f1-9103-105e2a77b3d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.29.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:53:cf:36:a2:fa:5d:10:78:8d:2a:e2:e4:16:e3:7f:69:fb:
57:fd:9f:1d:dd:5c:7a:31:bf:48:36:9f:44:83:d7:6d:c7:8f:
be:01:16:2e:21:d8:39:83:d7:74:7a:af:78:d5:80:94:d9:7f:
58:31:76:b2:97:e3:8d:96:6b:00:1e:ec:bf:97:ec:11:cd:64:
8c:13:32:73:92:2d:cd:2e:6e:4e:75:e2:9b:72:fc:b7:08:2e:
ca:f5:0e:ea:bb:e4:57:c7:c6:29:f1:df:dc:13:a8:1d:96:f5:
c0:10:8c:59:38:8f:3d:4b:04:18:3c:e2:80:25:a5:e5:c5:5e:
02:17:3b:b8:d1:b4:2c:52:7f:23:26:62:bc:58:67:4d:3e:1e:
5c:5e:c2:74:80:d7:20:9c:f3:2d:9d:5b:6f:3c:dd:73:8d:54:
8b:e9:f3:27:2a:1e:82:a1:86:8d:d5:2d:73:84:cd:65:7a:1d:
9b:85:b0:39:52:27:49:5b:15:2e:38:5d:f9:8e:87:d8:3e:fd:
da:25:56:f8:12:f5:41:f1:53:a2:51:c1:76:a6:7e:57:db:b9:
2d:9b:5b:65:44:d4:ce:b6:c8:f1:7d:4d:03:10:17:09:79:68:
c3:e6:17:bb:21:c8:23:33:d4:43:cf:09:30:e1:d9:8e:57:69:
4b:67:63:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:00:11 2026 by rpki-client