
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/fc7437a2-442a-31c1-9f06-b2c943af5caf.roa
File: fc7437a2-442a-31c1-9f06-b2c943af5caf.roa (raw, json)
Hash identifier: NEDRGvuI8qHKxk8fvxB4E+r6iLzaq0aSH5rEey5bHMM=
Subject key identifier: 31:C7:6B:C1:50:C6:F9:9D:6B:8B:93:41:D1:76:44:9F:3A:F7:5D:AE
Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial: 010D0C9F4328584E4559EECDA64D65E416339400
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/fc7437a2-442a-31c1-9f06-b2c943af5caf.roa
Signing time: Tue 23 Jun 2026 21:00:12 +0000
ROA not before: Tue 23 Jun 2026 21:00:12 +0000
ROA not after: Mon 21 Sep 2026 21:00:12 +0000
asID: 395425
IP address blocks: 72.42.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:45:59:ee:cd:a6:4d:65:e4:16:33:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Validity
Not Before: Jun 23 21:00:12 2026 GMT
Not After : Sep 21 21:00:12 2026 GMT
Subject: CN=02de6818-a5b6-4d65-89b8-50dde993d2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:21:60:52:58:6c:5e:20:31:45:aa:9f:3f:
c1:57:d3:32:23:6f:eb:b8:2b:24:e4:64:ec:c3:50:
14:df:d8:0a:4f:de:82:48:29:cd:0f:63:7a:e0:2f:
04:78:b0:f0:6d:ce:fc:00:e6:e0:30:c7:4b:09:2b:
71:23:45:10:a5:93:7a:84:02:9c:a2:3f:e3:e6:34:
1b:87:fc:db:76:44:f6:99:95:ee:e7:ab:07:ec:01:
83:5b:82:a8:1b:8e:ab:a6:95:5e:78:88:32:c2:18:
07:6c:58:6a:a8:60:49:f7:32:a7:70:10:5f:85:b8:
c6:fd:5e:b5:a9:7a:69:83:ec:e2:01:53:20:c1:42:
4e:20:0f:e1:44:f7:6c:75:f7:7c:44:cb:7f:14:ee:
d0:52:b9:66:ae:9e:f9:a6:e4:e4:66:b1:09:82:af:
fd:e7:af:fe:c4:f2:e1:32:f1:e2:76:53:ef:2a:74:
0e:76:d8:1b:f6:1b:fa:f0:c9:65:99:36:99:c6:0a:
71:8e:98:36:28:2d:fa:e1:b9:a1:a5:c6:92:7a:77:
2e:3a:59:08:e4:59:57:57:fb:00:14:12:a3:c9:15:
ad:d8:78:05:54:40:d8:ca:68:ac:b1:99:5e:6c:54:
e7:e5:17:74:04:36:dc:aa:1b:cf:44:e8:16:70:df:
48:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C7:6B:C1:50:C6:F9:9D:6B:8B:93:41:D1:76:44:9F:3A:F7:5D:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/fc7437a2-442a-31c1-9f06-b2c943af5caf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
X509v3 Authority Key Identifier:
keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
sbgp-ipAddrBlock: critical
IPv4:
72.42.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:3b:91:da:18:d1:35:fd:f9:80:d3:b5:43:86:dc:a0:65:be:
f0:17:49:a5:9e:b7:95:8c:3b:6b:d5:ec:46:ae:d3:79:5a:5d:
6a:06:bc:b8:5c:5c:1b:68:11:1b:4a:e5:bd:7d:22:26:2c:48:
6f:c5:a3:80:76:67:24:c3:b5:4c:47:4f:93:b6:45:e8:38:2e:
28:7f:5b:d6:67:af:3e:0f:4b:7a:d0:b9:c5:22:97:73:68:79:
65:61:f3:7a:30:e8:be:8b:94:ab:ce:3b:fe:11:36:f0:e7:0c:
19:ad:05:48:88:06:04:49:da:ea:ad:b7:17:a6:3d:78:70:55:
da:1c:a5:7c:a1:bb:5b:52:b8:22:92:bd:66:1e:ba:ac:23:97:
03:c1:c2:77:1c:72:44:ca:3c:43:e7:6d:f9:9e:00:65:a3:4e:
45:85:33:8b:37:ce:b2:08:12:86:e4:c9:5a:25:d2:0c:95:5d:
94:d1:51:fe:0f:ed:0f:e1:ea:ba:c1:ac:86:34:b1:dc:19:1c:
10:a7:1d:05:b0:ff:25:6c:a9:90:c2:18:22:d5:32:0a:c7:af:
f9:4c:ea:da:13:15:99:0f:da:2b:65:43:d8:ff:26:93:a7:6d:
92:31:0f:57:0d:fe:8a:06:73:2f:d0:6a:90:99:29:00:18:5f:
f6:7d:16:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWe7Npk1l5BYzlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWM2OTdjOWQtMzI1YS00NjBmLWFiMmYtOGNmNzFiMWJl
OTg0MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk
MDJkZTY4MTgtYTViNi00ZDY1LTg5YjgtNTBkZGU5OTNkMmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbghYFJYbF4gMUWqnz/BV9MyI2/ruCsk5GTs
w1AU39gKT96CSCnND2N64C8EeLDwbc78AObgMMdLCStxI0UQpZN6hAKcoj/j5jQb
h/zbdkT2mZXu56sH7AGDW4KoG46rppVeeIgywhgHbFhqqGBJ9zKncBBfhbjG/V61
qXppg+ziAVMgwUJOIA/hRPdsdfd8RMt/FO7QUrlmrp75puTkZrEJgq/956/+xPLh
MvHidlPvKnQOdtgb9hv68MllmTaZxgpxjpg2KC364bmhpcaSencuOlkI5FlXV/sA
FBKjyRWt2HgFVEDYymissZlebFTn5Rd0BDbcqhvPROgWcN9IcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDHHa8FQxvmda4uTQdF2RJ86912uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5
N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIxYmU5ODQvZmM3NDM3YTItNDQyYS0z
MWMxLTlmMDYtYjJjOTQzYWY1Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWM2OTdjOWQtMzI1YS00NjBmLWFi
MmYtOGNmNzFiMWJlOTg0L2VjNjk3YzlkLTMyNWEtNDYwZi1hYjJmLThjZjcxYjFi
ZTk4NC5jcmwwHwYDVR0jBBgwFoAUEjvZdTKrj92cHFYpzjLx33slhhkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3
MWIxYmU5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCrhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABo7kdoY0TX9+YDTtUOG3KBlvvAXSaWet5WMO2vV7Eau03laXWoGvLhc
XBtoERtK5b19IiYsSG/Fo4B2ZyTDtUxHT5O2Reg4Lih/W9Znrz4PS3rQucUil3No
eWVh83ow6L6LlKvOO/4RNvDnDBmtBUiIBgRJ2uqttxemPXhwVdocpXyhu1tSuCKS
vWYeuqwjlwPBwnccckTKPEPnbfmeAGWjTkWFM4s3zrIIEobkyVol0gyVXZTRUf4P
7Q/h6rrBrIY0sdwZHBCnHQWw/yVsqZDCGCLVMgrHr/lM6toTFZkP2itlQ9j/JpOn
bZIxD1cN/ooGcy/QapCZKQAYX/Z9FlM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:36 2026 by rpki-client