
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8161c3e-6d98-3c02-a98e-cb233617fd63.roa
File: e8161c3e-6d98-3c02-a98e-cb233617fd63.roa (raw, json)
Hash identifier: qK+KQljWjGQJiuKw5+wTLT9MHX9JRYhQHUtn3rUFBVk=
Subject key identifier: DD:29:0A:2A:18:3D:3F:0F:D9:88:C6:99:11:E4:32:B5:9D:3E:71:D3
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584EA797F7466736B4E668895C00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8161c3e-6d98-3c02-a98e-cb233617fd63.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 852
IP address blocks: 96.1.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:f7:46:67:36:b4:e6:68:89:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9d3066ac-ce71-4a8a-8d19-1fa94daba730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f3:1a:71:ba:91:38:a3:4d:3f:f2:a1:b5:57:
b6:7e:ad:58:7a:dc:4f:74:3b:2d:6e:43:1f:d9:7a:
e4:0d:94:72:62:ae:72:23:2f:8c:48:6b:25:fc:9a:
23:58:dd:c2:11:22:88:72:df:3d:d0:8b:31:ca:a3:
d7:ea:f3:e7:61:f0:1b:8d:8c:15:2b:8f:17:77:d0:
b3:52:d0:1d:34:ce:0a:e1:71:67:eb:ee:5c:b1:1b:
e3:48:74:ac:a5:ae:56:eb:56:bd:31:9e:bf:f4:ee:
b7:43:41:7e:02:aa:5c:b3:02:d7:c4:33:08:e6:b3:
20:0a:39:3b:f9:a4:f0:59:11:04:59:34:ad:1f:bc:
3c:1b:89:e5:90:f6:b1:60:2a:9d:4c:95:5c:0c:dc:
04:c3:17:e0:84:70:14:64:6a:09:ea:af:95:60:47:
03:c1:65:87:8c:a6:63:96:b9:71:ae:30:c6:33:22:
04:de:bd:97:97:2b:20:e5:1c:74:38:ff:ce:7d:c8:
bb:11:36:e5:df:5c:af:a8:13:5e:49:6a:20:90:9a:
6f:cd:72:31:23:b4:a2:f8:d4:77:da:b3:3a:96:9b:
4e:2b:75:52:b7:2d:b5:96:96:5e:c8:79:ef:0b:8c:
bf:ce:3f:5a:83:19:d5:31:34:9e:67:0c:40:f0:a2:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:0A:2A:18:3D:3F:0F:D9:88:C6:99:11:E4:32:B5:9D:3E:71:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8161c3e-6d98-3c02-a98e-cb233617fd63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
96.1.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:bd:b8:7d:56:ce:67:a5:4c:c8:1c:f4:66:06:30:ab:30:c9:
40:01:cb:d1:29:88:69:63:8f:0b:87:69:e8:52:26:6c:e4:79:
46:a2:fd:81:db:a8:b6:f9:8e:38:42:8b:77:18:d7:4f:a9:d7:
74:76:92:98:ee:d0:e6:37:38:60:d3:a0:29:e2:78:0c:a2:2d:
fa:ea:8e:e0:7d:f4:a6:b4:b1:62:05:8e:ca:fb:35:8e:3e:46:
45:03:82:09:17:a7:a5:33:ff:b2:cf:c1:ba:52:8d:21:be:eb:
5d:0b:a5:d6:69:ee:45:b7:86:7d:cd:1c:ab:6d:6b:2b:d3:ed:
f3:1d:84:17:8c:f8:b5:bb:1d:85:16:bd:56:bb:59:f6:5b:72:
57:8b:3b:1e:4a:84:9a:6f:17:6b:75:6c:d3:df:78:9e:65:6b:
39:af:6f:d9:61:11:20:8f:4e:40:c2:10:ce:5e:47:ef:8c:87:
ce:45:fc:78:d9:70:ae:b5:89:b8:9c:04:5a:b2:e5:e6:fd:4e:
96:ee:10:56:07:94:1c:bf:32:6d:44:46:68:8a:ed:c9:3e:ed:
d3:23:13:2c:b2:bc:6c:29:b5:c5:a2:4c:96:23:ba:a0:5b:69:
15:f1:76:0b:32:c0:d0:32:a5:82:8a:90:ec:7d:13:c9:9e:fb:
22:e1:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:01:36 2026 by rpki-client