
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/6670d963-f49d-3958-840d-44d85ca2c48c.roa
File: 6670d963-f49d-3958-840d-44d85ca2c48c.roa (raw, json)
Hash identifier: TGPRAIz/GeBuM7GIJEbXuZhmajfzyOq9R/qRhhzUouI=
Subject key identifier: D9:81:8A:EA:E1:44:B4:0A:9E:A4:33:2B:5C:95:71:12:F9:BC:D8:45
Certificate issuer: /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial: 010D0C9F4328584EA7986C3A1E40EF0DC2126D80
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/6670d963-f49d-3958-840d-44d85ca2c48c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 24429
IP address blocks: 72.254.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:6c:3a:1e:40:ef:0d:c2:12:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=82efd321-f7ff-4b0c-ad2f-0d2e95c2e3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5d:90:c8:5c:57:3e:41:cd:b3:25:1b:c0:a9:
1b:26:15:1b:09:29:c5:4f:8b:72:51:f3:35:f4:26:
65:48:59:dc:28:2a:05:87:3e:39:c4:e7:e7:9b:eb:
ea:56:ca:f4:d9:fc:7f:1c:e8:ab:9a:a2:cd:15:ce:
b9:3b:2b:eb:23:ca:12:80:76:0b:3a:23:4a:dc:b3:
2f:ad:87:1a:ac:51:88:01:db:35:58:e2:92:c9:f7:
b7:89:b6:27:3e:60:39:55:9c:40:f1:41:f7:cc:e6:
5c:76:29:ef:fe:f5:41:c9:55:6c:bb:b6:1b:d6:f0:
65:4f:91:c3:18:13:4f:7d:8b:6e:d0:48:ce:8b:82:
b4:d5:c6:26:d8:67:4e:41:44:3e:c2:9f:9d:cf:1e:
00:60:07:ec:db:06:bc:5c:65:c6:5a:0e:47:8f:2f:
6a:44:d0:66:9d:89:76:0c:d9:6b:a0:26:7a:19:90:
e4:1d:f3:2b:22:c7:2d:36:64:cc:d7:60:0c:b0:3e:
39:1c:c3:bb:d7:fd:35:39:8e:5d:fa:f5:80:40:fe:
1d:94:f2:50:ef:d6:cc:d0:d3:af:cf:fb:35:a4:11:
1e:31:4a:16:d5:5e:67:37:dc:7a:96:01:e8:9f:b1:
41:03:60:7a:a4:1e:da:13:d8:64:40:a2:5b:7f:d0:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:81:8A:EA:E1:44:B4:0A:9E:A4:33:2B:5C:95:71:12:F9:BC:D8:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/6670d963-f49d-3958-840d-44d85ca2c48c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
X509v3 Authority Key Identifier:
keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
sbgp-ipAddrBlock: critical
IPv4:
72.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:6d:58:91:b9:8a:9e:36:10:d7:33:a8:d0:67:56:19:14:76:
af:6f:7a:37:03:ac:c4:02:69:1c:ec:32:fa:f8:d8:a6:c0:e3:
91:be:9d:28:7b:64:ae:d0:3c:58:97:26:c0:30:13:a9:f4:fd:
f6:27:8a:34:30:ad:57:45:c6:a5:d4:76:03:c0:19:d1:41:3f:
e0:7b:37:e8:c2:5f:c8:5e:b5:e8:92:2d:4a:e5:0d:f1:ff:31:
11:9b:38:51:48:f1:ff:6b:f1:49:b6:20:ca:61:1b:fc:82:98:
e2:af:65:fc:73:66:05:a6:e3:e3:11:bd:45:f1:5f:96:2d:34:
2a:69:27:de:95:b5:45:7b:31:8b:72:92:4a:b4:7b:9d:20:37:
ea:ae:9e:23:19:17:b0:fd:47:ef:88:5f:01:03:a6:3e:0e:07:
25:74:b7:1f:a2:ed:6c:2d:13:c8:fe:d1:73:92:0c:77:06:07:
ce:80:82:ea:c2:b7:6e:8a:1f:54:87:64:10:86:b5:ad:58:1e:
87:d2:6a:43:ae:75:45:95:84:be:77:84:c1:f4:3d:d4:ad:fe:
36:b0:d5:1f:e8:83:bf:bc:80:81:f9:47:7b:1e:f3:03:6e:31:
d5:ca:68:3c:f3:42:55:2c:10:ee:ff:e4:4a:31:6c:70:9f:74:
7a:0f:93:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:37:05 2026 by rpki-client