
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8d1639cf-dfcb-37a4-ae19-752a2e7240f2.roa
File: 8d1639cf-dfcb-37a4-ae19-752a2e7240f2.roa (raw, json)
Hash identifier: HZ9vL1PsyV5h9v/qQa7wdEIl5lYhXSHN+4RLHkP/AkY=
Subject key identifier: BF:97:4F:CC:66:44:A5:52:0B:53:23:97:ED:07:2A:96:94:C0:E7:AF
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFEC226E93A0B116B99140
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8d1639cf-dfcb-37a4-ae19-752a2e7240f2.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 72.31.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:ec:22:6e:93:a0:b1:16:b9:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=bc944fdd-f411-43ad-bada-cf43bf45d00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:45:ff:e9:7c:ff:3a:bf:c6:8b:78:2d:5e:61:
57:58:ce:59:b5:71:4b:e9:98:73:76:12:ba:99:d8:
c9:04:e3:b3:67:28:56:b8:38:bd:7f:87:ca:b2:e1:
4d:2e:8e:39:66:e4:b6:70:77:8b:eb:bb:1f:65:47:
16:a8:93:4c:e0:be:df:9c:4e:19:0e:b1:35:bb:3e:
15:94:65:ee:d8:b1:58:d1:70:c6:0a:4d:da:c6:53:
75:e5:4a:1c:78:c0:73:f9:bc:96:24:af:7d:c3:29:
2e:81:b3:76:04:50:44:20:45:42:73:cf:40:64:28:
86:4e:60:aa:f1:ae:2c:10:38:ef:83:35:6f:7e:17:
95:c1:18:9e:5e:73:8f:bb:12:db:6c:76:18:bf:eb:
a5:59:73:56:d5:d7:e8:cb:47:21:05:62:6c:01:db:
e0:c5:96:70:09:0a:58:d7:ee:f5:5e:71:d9:7c:f9:
02:5a:f8:e5:d6:85:06:f9:3d:c3:bc:03:63:8e:44:
56:1a:61:14:d5:28:4a:18:fc:a7:ba:0c:2f:9a:09:
be:1e:97:12:bd:1d:81:4e:dc:4e:de:18:f4:a3:fc:
b3:e3:fd:d4:99:fe:78:bd:28:31:c0:b6:55:c3:b2:
81:72:3f:8f:c6:bd:41:1f:fe:01:13:b1:4a:4a:3a:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:97:4F:CC:66:44:A5:52:0B:53:23:97:ED:07:2A:96:94:C0:E7:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8d1639cf-dfcb-37a4-ae19-752a2e7240f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:65:47:fd:f0:c5:2c:5e:86:3f:9c:c0:42:c3:4e:99:a4:88:
a6:aa:5f:08:3c:a3:2c:22:55:68:bf:41:33:5d:15:f9:55:61:
9a:d2:6e:6a:65:56:b5:7a:7e:80:19:0b:7b:53:61:5c:c7:a1:
ee:fe:30:25:ec:37:c2:ab:56:5f:e2:df:b2:5d:bd:7c:12:4f:
74:86:f2:d9:21:f3:3d:ec:36:f4:bd:ec:ec:ce:b1:31:68:3b:
41:36:11:16:30:a6:c6:49:3f:5f:93:ab:bd:15:9b:5b:6e:6b:
ca:7d:db:9c:0b:16:53:16:f3:aa:e9:2f:2e:f6:0a:75:66:5e:
8b:a9:6f:57:d3:4e:dd:f6:c0:28:18:98:c8:da:ac:8e:0c:b9:
db:ef:ca:29:73:af:3f:b3:0c:5c:d4:2f:fc:ac:84:f3:3a:7c:
44:36:a1:ab:bc:d3:20:e9:d4:ff:18:f6:bf:df:e2:f8:14:e8:
03:9b:94:c6:7b:bc:48:55:75:0a:0a:6d:c7:0c:c0:5e:f8:55:
da:c5:be:7e:1c:e5:44:52:d8:31:f2:d5:b6:54:e3:88:34:f6:
31:3a:9c:30:f9:f8:59:4e:e7:50:d4:25:40:ef:1b:fe:c8:d4:
d4:83:43:b6:54:50:06:be:ac:fa:6e:86:73:3f:39:5a:af:97:
07:67:99:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:37:59 2026 by rpki-client