
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/841a9d0f-9831-3d66-9700-d6f60cf2d526.roa
File: 841a9d0f-9831-3d66-9700-d6f60cf2d526.roa (raw, json)
Hash identifier: POxk33EhVIg0orLxfYq/gNBmLFSfmSTaTD1jOjBxc9M=
Subject key identifier: 79:47:0A:29:D4:3F:65:EF:0D:F7:42:A0:46:69:95:B9:09:DC:17:79
Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773
Certificate serial: 010D0C9F4328584EA79596B962B831DD98D8C718
Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/841a9d0f-9831-3d66-9700-d6f60cf2d526.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 54340
IP address blocks: 72.59.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:95:96:b9:62:b8:31:dd:98:d8:c7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=bc26e3a5-79aa-4122-84c4-e7f262b1165a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d2:b8:b9:29:f7:b7:f2:2e:e0:ab:1f:b5:f6:
3f:36:d3:56:d2:8e:47:f9:51:21:ef:73:5b:15:01:
9a:94:29:01:72:f2:b3:71:4e:10:f0:65:b1:d0:93:
71:46:32:a3:f3:66:71:f6:ca:42:ac:44:d4:16:34:
a8:f0:2c:03:3b:be:d8:97:5a:4c:79:62:b3:50:b8:
d2:c2:18:e7:59:f9:73:14:09:79:2d:de:e6:1f:8a:
1c:7b:e3:95:ca:76:4b:30:a6:39:55:ad:73:e0:0a:
b8:b7:38:ba:88:33:71:51:67:9a:d0:92:61:79:73:
c1:4a:e7:d7:1b:21:8d:74:e3:d9:42:b7:44:b5:6f:
d0:20:c6:ac:df:38:de:62:6d:d1:f0:e7:d1:aa:ad:
32:a3:62:52:87:02:cc:02:c3:cb:6b:0f:d8:74:5d:
95:78:6b:c2:2e:6d:c3:72:84:24:c9:33:bb:7c:27:
62:84:7f:79:d3:6f:94:b7:dd:85:44:18:6d:05:aa:
1a:38:87:64:be:42:5c:3e:4a:75:d9:0c:d8:66:9c:
e1:e0:1b:21:f2:ac:45:56:b9:98:77:f4:96:d0:7e:
c8:07:15:c6:b4:cd:ca:53:3e:92:00:9b:0d:9b:f4:
e1:37:19:c6:8b:d9:b5:37:1f:49:e4:60:de:05:0e:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:47:0A:29:D4:3F:65:EF:0D:F7:42:A0:46:69:95:B9:09:DC:17:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/841a9d0f-9831-3d66-9700-d6f60cf2d526.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl
X509v3 Authority Key Identifier:
keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
sbgp-ipAddrBlock: critical
IPv4:
72.59.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:d4:f2:23:14:ef:d4:09:6b:d6:f5:65:19:4c:73:3d:c2:f4:
83:5b:67:c8:d7:c5:a4:3e:1e:fd:01:0b:a4:98:4e:d5:eb:aa:
63:77:c8:58:e3:e6:da:8d:d4:c5:95:fc:c9:e3:88:5f:11:e1:
59:18:e1:a0:40:3e:d0:a1:77:06:be:ad:13:de:c2:f8:de:bc:
da:3c:d4:65:63:03:39:11:70:a7:4e:85:2c:fa:96:43:98:4a:
33:ea:7e:71:93:ee:3e:a1:c2:64:95:80:8b:a5:36:fc:e4:aa:
2c:e8:60:e1:cf:78:44:50:71:9d:29:d1:b4:2a:27:bf:ae:0d:
52:93:fd:5a:ba:d4:8f:ea:cd:61:96:bc:9e:8d:0f:fa:ab:34:
02:ea:4f:be:37:fa:a6:ef:ce:4e:bf:32:80:5e:df:84:7f:a4:
d2:28:ef:e8:45:4d:2f:58:2a:1a:6d:85:73:16:88:2e:9a:76:
20:bb:18:5a:68:38:22:8c:93:a4:b9:24:c7:1d:e8:78:fe:25:
61:cc:ac:a0:d9:0c:2b:c8:b3:fe:11:b9:05:51:bb:05:05:e7:
1c:cd:e2:68:7d:e9:af:34:4c:a9:9f:ec:a7:98:d4:32:0d:53:
da:a8:bb:29:7a:e0:38:d3:90:46:fc:f0:14:59:09:ff:21:2c:
da:46:9c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:29:36 2026 by rpki-client