
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7afc29aa-fc78-3f3a-a822-c2c8089da233.roa
File: 7afc29aa-fc78-3f3a-a822-c2c8089da233.roa (raw, json)
Hash identifier: F20DBsaknTKi5NMjTPGGgPil4JPu5HVy/0LEz231Zsg=
Subject key identifier: BF:CA:4C:AB:29:A7:81:03:01:EA:65:61:F4:16:7F:0D:FE:27:77:F1
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584DF7A5ED0E15F43702E61BF3C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7afc29aa-fc78-3f3a-a822-c2c8089da233.roa
Signing time: Wed 27 May 2026 01:00:14 +0000
ROA not before: Wed 27 May 2026 01:00:14 +0000
ROA not after: Tue 25 Aug 2026 01:00:14 +0000
asID: 834
IP address blocks: 72.244.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f7:a5:ed:0e:15:f4:37:02:e6:1b:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: May 27 01:00:14 2026 GMT
Not After : Aug 25 01:00:14 2026 GMT
Subject: CN=841e5c60-f51d-4c2e-a1fb-e3b2b4113fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:c0:91:f4:11:74:53:ff:3a:94:10:49:74:
80:0f:e0:a3:a4:db:0b:92:99:48:57:d6:75:00:ac:
1e:4f:50:ec:da:29:7d:37:81:93:5e:0e:62:70:bd:
1a:49:20:4c:04:4c:06:64:86:cd:1a:ef:75:6d:fe:
67:c7:e6:2c:bf:b6:0a:e0:ca:02:f1:e9:5c:d3:98:
29:51:bd:ce:4f:75:d2:f9:fb:cb:d4:e6:97:2b:6f:
38:cb:04:d3:46:bc:05:ac:b1:23:29:f8:48:32:11:
be:88:00:04:b8:1b:cc:b9:35:12:f9:8a:75:cf:f4:
d8:5b:26:13:18:e0:8b:45:58:60:9d:24:c0:47:64:
b3:7d:8e:7a:57:9c:55:d6:d4:d8:d6:c9:c6:35:08:
16:d8:1a:47:3d:84:dc:82:54:55:5e:69:ba:de:93:
02:0f:df:8d:b1:13:21:9e:84:7c:1e:0d:0f:17:4b:
4d:93:83:bd:b2:10:11:35:50:70:c8:8a:48:00:b2:
c8:26:a7:07:80:4a:39:2c:fe:75:55:8d:3a:66:ba:
19:6b:93:ea:e7:52:01:75:31:5b:7e:cf:3f:cd:51:
d5:6f:41:8e:ec:86:79:25:af:aa:b5:f0:8d:e9:29:
0c:16:42:47:40:10:3a:fc:1b:e2:49:a7:8e:ef:8d:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CA:4C:AB:29:A7:81:03:01:EA:65:61:F4:16:7F:0D:FE:27:77:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7afc29aa-fc78-3f3a-a822-c2c8089da233.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.244.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:dc:ac:1a:5c:01:83:68:78:dd:7e:4c:f7:4c:4b:64:76:d4:
10:b3:6d:b6:fe:c5:8f:48:44:36:73:4a:f1:fb:ba:04:9f:62:
23:12:d2:2b:50:4d:5d:d0:7a:97:92:6c:9f:ac:b1:e2:cd:ab:
16:0e:fa:5f:17:01:9d:54:4d:b1:14:ec:37:24:24:5c:93:50:
f6:39:3d:c7:99:3d:78:ac:65:c8:60:c7:16:05:17:34:a4:30:
f3:e8:1e:17:15:28:e4:12:b7:0a:7c:0d:d9:be:59:f8:c0:23:
33:fe:ed:04:3e:18:bc:1a:22:17:89:20:0d:e3:cf:bf:93:cd:
fd:01:ea:99:9b:39:98:d2:2a:b8:86:9e:56:ad:61:24:07:14:
b2:1e:19:37:9c:04:34:0b:4f:05:19:48:28:c8:2d:bb:56:3a:
e3:05:d6:f3:32:f4:d1:25:bc:c5:4f:f9:11:eb:90:ba:5d:77:
2a:bb:22:2a:a2:dd:58:0f:ef:06:de:c2:15:33:cd:81:19:fa:
51:0f:d0:89:89:a2:83:52:52:38:c3:7e:2a:85:2b:e3:60:70:
60:78:44:19:76:84:e5:8e:5c:c0:8f:88:85:bb:ab:e4:0a:2c:
f3:58:52:65:11:65:f8:be:c7:60:3c:4a:fe:2d:35:7b:cf:6e:
d5:2e:41:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:16 2026 by rpki-client