
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa
File: 861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa (raw, json)
Hash identifier: 1PO89hUZNx9LTklQiSh2Gjz/IdMy8TO9PnUunqFIGok=
Subject key identifier: 81:15:20:E6:97:8A:66:8E:50:D9:A7:3C:61:36:74:6A:8E:E1:C9:34
Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
Certificate serial: 010D0C9F4328584E9D4A756AF5485A23D5B23AC0
Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa
Signing time: Sat 25 Jul 2026 09:00:11 +0000
ROA not before: Sat 25 Jul 2026 09:00:11 +0000
ROA not after: Fri 23 Oct 2026 09:00:11 +0000
asID: 14511
IP address blocks: 216.196.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9d:4a:75:6a:f5:48:5a:23:d5:b2:3a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
Validity
Not Before: Jul 25 09:00:11 2026 GMT
Not After : Oct 23 09:00:11 2026 GMT
Subject: CN=83e35d9b-b517-43ac-8bcc-6ea9a0a714b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:02:6c:ab:d5:7e:2e:de:4e:5d:37:1b:c7:58:
5a:60:1e:17:16:c3:0b:b9:7b:4e:c7:f7:b0:94:11:
26:64:78:69:7f:53:ac:7a:24:ac:9c:24:7a:e3:52:
31:82:f8:74:4d:bc:e3:b6:71:fa:95:fe:05:b3:13:
5d:a3:43:9c:8b:91:eb:0c:4b:71:25:52:97:60:33:
65:ba:91:6b:74:2c:9a:6f:d5:c9:51:0c:b9:9f:e8:
bd:b1:47:db:36:ca:0b:71:bf:e0:3b:70:68:c9:62:
de:ee:b3:2e:22:4a:49:23:7e:87:15:c5:08:3f:e5:
c5:84:60:19:0e:d4:0f:cc:9c:63:de:f4:c6:ca:e4:
6e:f3:30:d7:ea:2c:d7:62:04:5b:9f:a1:98:43:35:
8d:b7:f7:d0:e9:cf:59:32:d6:fb:00:df:be:56:6d:
0b:7d:2d:dc:2c:6b:aa:b4:12:53:1f:eb:21:7d:23:
55:39:6b:5e:6c:88:d8:60:86:f9:1a:55:ab:21:8a:
5d:61:77:25:e7:0d:d2:ea:21:98:cb:00:80:71:58:
b4:ac:31:c3:0e:7e:6c:c9:76:5c:4a:49:90:66:fe:
7f:29:8a:e9:40:a8:ef:ea:c1:b0:f6:80:7b:5c:9b:
df:b1:d9:e8:ab:6f:c7:c3:a8:b3:0a:e4:d9:03:39:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:15:20:E6:97:8A:66:8E:50:D9:A7:3C:61:36:74:6A:8E:E1:C9:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl
X509v3 Authority Key Identifier:
keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
sbgp-ipAddrBlock: critical
IPv4:
216.196.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:bb:a3:76:ed:e0:30:ec:c6:3c:d4:10:90:4a:a7:74:5a:a6:
6e:2c:0c:d4:9f:39:84:8a:d0:df:9a:3a:c8:e3:5a:f7:cb:99:
31:06:86:c2:4b:56:9b:2c:28:5b:bb:c7:fe:3f:b9:a9:e6:a0:
34:e5:1b:21:17:e5:94:e6:41:a5:24:3a:47:ed:fe:9c:26:3f:
b3:24:97:72:f8:08:11:9a:62:f9:21:35:de:e0:77:3f:95:e6:
d8:73:67:c8:7e:b2:69:65:3f:f1:18:c7:cc:e5:75:5a:1c:47:
53:2c:54:62:e4:4d:54:63:24:b1:b3:55:4d:9c:8f:47:92:93:
b4:f8:df:38:51:86:2b:56:af:82:1c:5d:62:f5:32:d8:3c:3d:
72:ae:23:5a:e8:b6:f3:14:96:b3:b9:02:de:9c:00:ad:c8:02:
d8:e8:aa:a7:d6:16:51:c2:ad:94:af:fe:ff:c6:df:96:fd:cc:
7e:12:32:ba:16:79:84:98:5c:31:de:7c:0c:b3:20:c4:20:37:
ae:24:6e:d9:9c:a2:4f:cd:72:7d:09:a8:a5:ff:13:91:25:ad:
12:6d:b4:9f:ad:d0:95:dd:4c:02:cf:c7:bd:7a:39:7c:90:1e:
7a:a2:75:ee:fb:96:05:ce:77:45:77:d7:f7:4c:15:d1:91:52:
9b:8d:57:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:31:48 2026 by rpki-client