
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa
File: dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa (raw, json)
Hash identifier: bDfUTz4Wg2gRS1nVxSQxpdGg+lV47UAtn4INJqKmA3s=
Subject key identifier: 4D:2C:20:44:07:BD:FA:08:93:4A:B3:DC:EB:06:9B:81:D8:BA:22:8E
Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e
Certificate serial: 010D0C9F4328584E94EA5EAD2D15CF0B8D29C400
Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa
Signing time: Wed 22 Jul 2026 09:00:11 +0000
ROA not before: Wed 22 Jul 2026 09:00:11 +0000
ROA not after: Tue 20 Oct 2026 09:00:11 +0000
asID: 11550
IP address blocks: 72.42.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:94:ea:5e:ad:2d:15:cf:0b:8d:29:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e
Validity
Not Before: Jul 22 09:00:11 2026 GMT
Not After : Oct 20 09:00:11 2026 GMT
Subject: CN=ae1b6250-7944-4800-a0c4-9d450ab0010d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:f0:b3:1d:78:8b:82:e6:fb:51:03:bf:90:
95:c4:44:cc:b3:e7:5a:af:73:cd:2e:b2:17:1a:77:
9d:e2:f4:97:59:66:5f:04:30:35:22:ca:a7:e8:26:
1d:5c:06:5c:18:18:93:06:30:ee:a4:81:df:4b:aa:
c6:e5:c7:fc:87:70:ec:63:37:cc:24:8f:6f:e2:a5:
fe:8c:36:9d:b5:74:55:0d:1e:90:05:2e:41:fc:c7:
0b:be:83:77:99:44:b8:50:40:20:ae:1c:e0:68:c7:
a6:d2:2a:a2:48:56:fd:aa:3a:49:54:a9:0f:38:52:
a7:d3:f2:08:fb:5b:4e:60:1f:f5:05:19:35:ea:d8:
60:8e:fe:2d:de:7f:b8:f1:a3:5a:4d:b3:7d:37:64:
bb:6a:f0:4e:61:ac:28:54:c9:38:f6:5a:ea:8c:e0:
b6:28:9f:79:ea:48:65:7b:73:4a:30:ba:d2:6c:6d:
6c:69:5e:84:df:c7:13:1c:2c:56:01:84:08:9b:45:
63:3e:0c:7a:20:81:7d:1f:32:7b:b5:e1:bd:e7:22:
91:24:9d:06:83:56:d9:d1:63:98:a6:45:1e:78:97:
2c:8f:3d:1f:c4:4d:b8:a0:bc:f9:b5:be:ff:44:43:
79:7c:e9:ee:18:ce:a4:d6:0b:18:7c:1f:7f:e2:bb:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2C:20:44:07:BD:FA:08:93:4A:B3:DC:EB:06:9B:81:D8:BA:22:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl
X509v3 Authority Key Identifier:
keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
sbgp-ipAddrBlock: critical
IPv4:
72.42.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:ba:74:c5:f2:1d:b2:e0:f2:96:dd:74:6a:bd:ae:4f:0c:9b:
61:02:3c:d9:70:a8:bb:17:e6:a8:b7:84:8e:d8:10:5c:46:e7:
66:74:79:ce:07:f1:5a:45:ce:f7:2d:eb:4e:14:d5:62:0f:d4:
7a:d2:80:cb:78:51:f4:0e:5b:60:6f:28:21:02:73:81:df:f9:
ac:85:f3:17:9d:f6:1d:ca:f4:71:59:01:b2:12:f2:d4:0b:3f:
91:ea:25:73:fc:ec:9b:29:48:46:09:2d:04:ed:42:19:e8:61:
ca:7a:12:5b:49:4d:6d:f5:56:18:33:88:80:b7:a6:00:24:7c:
82:12:f5:41:2a:2e:a8:1a:71:c4:64:eb:62:c7:93:a8:47:cf:
9d:a6:f9:d5:61:f6:0c:c6:69:57:3a:76:fa:39:2c:04:f0:7b:
2c:d2:ac:d0:fa:d9:7f:1f:df:56:1c:1a:8f:67:af:87:f4:a3:
a0:4e:c7:e1:b8:16:01:ca:f4:2f:4e:64:c6:93:55:f1:eb:66:
83:7c:9d:52:75:c6:a4:19:ad:f1:a7:90:0e:49:4b:3d:e7:f6:
9f:4f:bc:0f:be:9d:f2:d2:ae:ef:ad:d3:e5:2c:33:2a:c6:c1:
c8:f5:57:41:b4:a3:74:b4:80:6f:be:88:40:4a:1f:a5:5c:89:
2f:c0:7e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:12:07 2026 by rpki-client