
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa
File: 25289940-5314-3e04-a710-ae91cf64f9b9.roa (raw, json)
Hash identifier: c9WZp5w+hyS+iaYA9fxC4O/8igXX+PzO+kT44SpGTJg=
Subject key identifier: 48:30:F8:F5:43:3F:A3:FF:BA:56:22:E4:21:0B:06:A4:64:51:FB:5A
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F4328584E4F1F35E6F748497CBE25B200
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa
Signing time: Sat 27 Jun 2026 09:00:12 +0000
ROA not before: Sat 27 Jun 2026 09:00:12 +0000
ROA not after: Fri 25 Sep 2026 09:00:12 +0000
asID: 13649
IP address blocks: 72.250.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4f:1f:35:e6:f7:48:49:7c:be:25:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Jun 27 09:00:12 2026 GMT
Not After : Sep 25 09:00:12 2026 GMT
Subject: CN=be178137-89d1-4a13-8c55-410b30d52b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:10:d4:13:12:f5:c3:a2:1c:8b:4b:ae:37:e9:
7c:9d:57:87:d2:04:c9:cb:3e:4e:07:e4:2e:4d:a8:
77:e8:57:16:0f:32:56:c0:b9:1f:35:ed:41:d3:bd:
7b:72:ae:e8:53:eb:10:c4:11:69:77:db:0c:1e:3e:
49:80:05:af:09:86:06:fd:a7:ed:09:4f:2f:d2:6d:
b2:3f:ee:49:a4:8d:29:73:e4:82:45:d3:65:d9:50:
2f:8f:09:23:1c:89:13:22:69:70:12:e5:50:06:ee:
f9:a5:d6:22:94:db:22:51:aa:a1:bb:24:a3:93:1e:
2a:21:45:4b:b6:fb:95:3e:be:bd:8a:14:7b:28:3d:
2f:30:89:a4:93:00:08:a6:c1:9a:d3:47:1d:7a:e5:
42:75:de:9e:44:ff:3d:cc:64:de:48:f5:60:9a:a1:
8c:40:e3:82:28:98:ea:76:29:e3:28:81:6b:64:8c:
56:b1:f7:d7:43:9f:6f:2e:e2:00:07:8b:e6:2f:32:
d2:22:c5:a5:09:23:e1:d9:1a:ba:0c:5d:be:e5:40:
77:f7:05:3d:6b:d8:ef:36:59:a2:f2:23:2d:c0:63:
b0:64:a7:a0:22:09:e4:b7:3d:be:a8:a1:a2:55:0b:
56:43:36:9f:9f:6b:5f:96:fb:38:30:9f:3d:e5:a7:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:30:F8:F5:43:3F:A3:FF:BA:56:22:E4:21:0B:06:A4:64:51:FB:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.250.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:a5:fe:c1:4d:1c:4b:67:79:0a:b2:d6:77:76:24:46:81:40:
d5:b0:fe:ae:c7:ba:b0:bb:fa:ae:a9:fe:f3:7f:11:5e:33:37:
49:d8:51:88:dd:b9:7a:35:11:81:d3:b0:b5:07:82:bb:c4:ed:
ed:1a:4f:5a:b3:6e:23:6c:08:6a:fc:da:75:ef:65:bc:a8:65:
3a:d4:7c:82:ed:6e:fb:14:1b:b2:5e:8b:be:f6:be:61:b9:dc:
56:65:21:8e:f5:43:3d:cd:36:83:f2:25:99:11:53:f5:a6:72:
6a:04:62:88:f3:c0:b4:d9:0a:45:6e:0d:3a:a5:2a:b1:77:f3:
6c:5d:35:a2:60:59:c0:cd:c7:ab:c4:bf:ab:d1:ab:e8:56:d2:
b0:e3:b7:aa:d1:fb:7d:6b:69:4a:6c:dd:50:a3:b2:e5:13:5b:
ed:18:5c:b1:16:14:e9:20:19:f6:03:6d:68:d1:22:f6:c1:b8:
33:c8:b9:47:ea:e1:f9:46:b4:2e:c9:33:81:1f:8f:da:b7:3e:
46:9f:42:48:46:22:60:f0:f7:09:5c:f0:03:0f:ba:34:9e:4c:
7c:ea:33:a5:ca:d0:2e:5f:7c:f5:7a:4c:b2:d8:4d:55:dd:d0:
b2:e0:84:4b:72:e4:07:ea:01:ca:7f:5f:ee:4e:ff:a9:99:b7:
0a:77:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:27 2026 by rpki-client