
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/aafd7741-2bae-302f-8e07-d3cbfecf336c.roa
File: aafd7741-2bae-302f-8e07-d3cbfecf336c.roa (raw, json)
Hash identifier: DDhKaDolSBY0WJJjqbRSK550ICC21CUEv6hCIeHzdJk=
Subject key identifier: 21:B2:5A:76:DA:86:DF:49:2D:39:AA:CB:DE:BD:C5:BC:83:BB:EE:AA
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F4328584E9C79F0291BADE3AE515A9080
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/aafd7741-2bae-302f-8e07-d3cbfecf336c.roa
Signing time: Sat 25 Jul 2026 02:00:18 +0000
ROA not before: Sat 25 Jul 2026 02:00:18 +0000
ROA not after: Fri 23 Oct 2026 02:00:18 +0000
asID: 399138
IP address blocks: 216.24.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9c:79:f0:29:1b:ad:e3:ae:51:5a:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Jul 25 02:00:18 2026 GMT
Not After : Oct 23 02:00:18 2026 GMT
Subject: CN=856d59e6-9cde-45e2-b446-16ceb1e5334d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:01:b9:f7:58:39:e2:05:88:92:76:fa:84:
9d:d6:db:f3:dd:d1:7e:77:6f:99:94:6c:84:e2:e2:
93:43:20:ad:0d:4f:ab:b0:87:45:1f:08:a4:b8:8a:
be:64:01:00:1f:e1:35:b0:89:07:9d:b0:8e:7b:62:
2c:19:cc:f0:1f:3c:a1:44:e2:cb:ed:41:e3:5f:18:
da:ee:21:c0:8a:01:e4:da:89:14:7a:a8:90:4f:4d:
4d:80:1f:d4:f3:77:7f:ca:01:05:70:1f:62:f7:77:
ee:ed:19:cf:3a:6d:af:d0:0d:0a:45:f0:0c:8c:68:
52:53:f1:12:56:c6:30:51:da:3b:5e:3d:b8:ad:a2:
ab:4e:75:f0:9a:c6:e9:a1:e6:e0:43:37:50:7c:9c:
58:84:e4:3e:68:1f:e1:9b:01:be:03:ec:9f:ee:0a:
54:92:46:a9:83:82:e3:52:d7:06:82:97:f4:cd:75:
c3:ff:e7:fc:1b:ff:07:1c:1f:90:83:04:42:9d:81:
e0:ae:4a:18:1d:32:23:b4:a1:4e:35:46:56:62:09:
36:42:66:4d:6a:74:97:59:34:5b:92:13:32:eb:b0:
d3:3d:84:dd:04:08:42:e8:52:1b:ba:e2:d9:70:bd:
af:11:5d:28:77:fd:d1:65:2f:be:2e:db:2d:a5:12:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B2:5A:76:DA:86:DF:49:2D:39:AA:CB:DE:BD:C5:BC:83:BB:EE:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/aafd7741-2bae-302f-8e07-d3cbfecf336c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:68:c0:e8:8d:12:af:a1:07:dc:1d:a9:af:93:0d:01:36:8d:
2c:ad:74:c1:54:9c:2b:ed:0b:c5:ef:5a:05:1f:c4:26:be:8c:
28:02:b4:b2:14:af:4e:de:f8:90:b7:33:56:ce:e5:a6:83:d8:
bd:e3:fd:48:33:ae:5a:80:3a:04:e2:d7:49:32:a6:01:58:9d:
89:53:74:a3:26:0d:36:c6:34:a8:56:0b:d1:a2:0b:65:01:31:
85:57:40:65:9b:80:1d:56:5b:49:a8:6e:74:b4:c1:2f:18:3c:
87:39:6d:2e:a6:9d:8e:c5:7c:24:ae:ee:2f:19:b5:83:00:32:
94:84:4e:5c:b3:fd:1f:5e:3c:67:2f:2a:d4:61:7d:44:9c:8e:
28:ef:ba:37:a4:74:e0:05:0e:cf:ec:1c:3e:0b:a1:34:b1:41:
bb:5f:e5:8a:e6:d3:45:7c:f2:04:a7:67:c7:48:89:6b:db:b1:
57:53:6c:13:0d:74:23:09:3f:fe:4a:b9:8e:59:ef:5b:62:74:
04:96:d7:0f:6e:7c:a0:d7:88:55:d8:fd:82:4b:db:b6:c7:b2:
94:bc:2a:34:69:d3:58:f4:c4:5e:16:47:3a:cf:45:ea:8e:a5:
85:a4:a8:1b:10:86:b1:f0:2d:e4:e4:1b:77:0f:44:63:0d:0b:
f3:6a:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:17:35 2026 by rpki-client