
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa
File: af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa (raw, json)
Hash identifier: O6ZlJKz2ZNi1fhsqkF3fjYRHB/fpIHFyAHbT8FM7NUQ=
Subject key identifier: 18:E7:47:2D:F5:B7:6A:EB:B4:B3:1E:AF:83:DA:6C:48:D7:49:8B:4E
Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial: 010D0C9F4328584ECD371AF4E19D5C1FDBE6B3E0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa
Signing time: Tue 11 Aug 2026 13:00:11 +0000
ROA not before: Tue 11 Aug 2026 13:00:11 +0000
ROA not after: Mon 09 Nov 2026 14:00:11 +0000
asID: 42
IP address blocks: 207.34.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cd:37:1a:f4:e1:9d:5c:1f:db:e6:b3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
Validity
Not Before: Aug 11 13:00:11 2026 GMT
Not After : Nov 9 14:00:11 2026 GMT
Subject: CN=b05811a1-49e1-4570-9e22-68799d8b52b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f3:d8:76:a7:3a:27:e4:5a:3a:8e:0e:fa:28:
7e:05:c7:f6:ce:32:ae:34:f7:49:ee:d3:06:69:ca:
f8:73:52:19:78:6e:ca:19:7b:98:ed:a9:db:27:fd:
39:61:5d:66:70:3f:7c:6f:8a:35:be:69:6c:3b:01:
7e:38:26:45:ae:80:6e:92:68:18:98:31:8a:e0:84:
6d:b4:11:fe:97:ea:a0:c3:96:33:8a:65:40:dd:aa:
7f:23:55:6c:6d:e9:ac:d4:96:e6:3a:93:0d:cf:a7:
03:ac:41:5e:82:fb:46:6e:ed:29:83:73:70:0d:47:
4a:44:cb:85:8a:0f:5c:e9:0e:15:59:55:91:17:bc:
30:bf:95:39:71:16:4f:4f:03:62:7c:49:e3:32:5b:
58:f1:7e:e4:be:e5:29:88:b8:f1:45:5a:b9:9a:07:
07:53:fa:bc:89:5d:00:c9:29:53:10:c9:6b:d6:ee:
6a:7a:bb:65:85:4b:fa:a5:de:b5:94:06:7b:a7:3e:
6e:2c:a1:64:ef:00:75:91:a4:d4:4e:6d:e9:e1:0a:
f0:f6:73:88:de:0e:08:a3:4c:43:11:e7:ca:d4:50:
ae:af:55:fd:b0:05:45:e2:fb:08:6c:46:74:e6:d4:
c6:fd:bd:b4:e2:7e:00:66:74:9f:ca:fc:32:db:8e:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E7:47:2D:F5:B7:6A:EB:B4:B3:1E:AF:83:DA:6C:48:D7:49:8B:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
X509v3 Authority Key Identifier:
keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
sbgp-ipAddrBlock: critical
IPv4:
207.34.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:1c:2f:23:73:73:88:3a:93:3f:2b:7e:44:d8:30:60:2f:87:
40:dc:31:c5:d2:fa:9d:e7:98:af:0c:66:3a:bd:a4:fb:7f:41:
8b:7f:90:b3:3c:87:58:4c:0d:80:61:32:99:ad:ac:44:46:b0:
03:d9:ae:28:18:ac:1f:01:6e:d9:af:58:83:20:fc:1a:3d:5e:
d5:a6:0e:e2:73:45:bc:54:52:fd:a0:00:38:44:51:8f:f2:1f:
f9:41:c8:b9:78:3c:72:72:64:0c:92:4b:43:f4:8b:d9:2a:df:
52:6c:f6:e1:c5:49:e9:7d:00:b2:5a:3b:80:83:ba:63:cb:bb:
67:fe:f5:15:96:1b:5c:ac:40:ea:67:01:2a:f4:19:06:7a:31:
62:92:61:62:c9:c2:20:79:93:51:ea:62:1d:21:7b:39:77:94:
48:95:29:0e:75:62:e1:66:1a:a8:02:00:b5:70:01:d3:f6:91:
a5:0c:7f:47:54:c8:ec:60:a2:fa:1d:7a:a4:e7:27:2f:11:5a:
d7:f9:f9:09:79:c5:d8:a8:80:62:5b:cb:44:78:34:ef:41:c9:
df:77:c1:f7:88:46:eb:ba:c8:2f:16:25:3c:ce:e8:e5:0d:c9:
32:9b:43:db:c2:ba:6e:81:9d:11:7d:4d:c0:cc:13:09:49:bf:
18:2a:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:37:34 2026 by rpki-client