
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa36029f-7d9b-3bb7-a76c-3dc98420def0.roa
File: aa36029f-7d9b-3bb7-a76c-3dc98420def0.roa (raw, json)
Hash identifier: mq0YiyJMAUWffQiUrxDhOxLe6WRyn4yp/Wyke1H06CY=
Subject key identifier: CF:B7:AB:D9:7D:2C:F7:9C:78:83:11:53:0C:41:96:A1:37:DD:DD:33
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584F4974C47171625104A9064400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa36029f-7d9b-3bb7-a76c-3dc98420def0.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 0
IP address blocks: 50.88.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:c4:71:71:62:51:04:a9:06:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e16e7d7a-9828-4b1e-ba70-5acf33f702c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b6:bf:d5:32:f2:4a:47:36:46:4c:ec:67:f8:
e6:70:d1:72:9e:dd:f0:17:cf:e1:4d:f6:d0:0f:eb:
f9:35:c6:48:d4:77:f1:bc:d9:82:98:7d:d7:29:ba:
ee:d5:24:68:0c:bc:ee:b2:a2:c2:aa:15:03:25:26:
91:9f:80:3a:46:a6:79:d8:80:42:66:b1:98:1c:34:
70:9e:94:e6:ec:e9:9b:86:9c:0e:1e:d2:b3:dd:3a:
04:e8:2c:08:24:49:8f:c5:f0:e8:61:79:95:8c:33:
41:1c:1b:56:e5:f6:4d:03:b7:bd:6b:81:03:8a:ba:
72:e9:53:e0:fe:41:b6:ad:d5:5a:5b:e2:b8:33:60:
76:48:7e:2b:b5:a0:ad:13:33:25:09:61:49:8f:54:
d7:2f:df:7d:19:d1:27:e4:de:12:7d:ae:ba:07:d1:
fe:f2:54:c0:73:23:b4:4e:b9:16:73:da:96:9a:57:
9d:53:46:b2:31:18:7f:f7:05:82:5f:42:e3:46:f1:
61:00:58:85:ec:8c:1a:bb:50:6e:70:e9:f5:36:18:
6c:5b:0e:c6:34:8b:b7:af:cd:28:7d:0e:fc:b3:da:
30:58:f6:e1:1f:a7:40:fc:40:cf:41:b4:9b:70:19:
b1:86:bc:4e:af:fc:5f:d5:af:e3:7e:6d:ea:b9:8a:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B7:AB:D9:7D:2C:F7:9C:78:83:11:53:0C:41:96:A1:37:DD:DD:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa36029f-7d9b-3bb7-a76c-3dc98420def0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
50.88.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:17:b9:a4:13:f2:da:e8:ae:49:d4:90:16:ad:66:0b:5f:44:
59:e2:55:f4:b8:7f:ac:c7:e5:be:d9:37:49:df:e9:8f:7d:c9:
67:95:12:a8:ca:be:ff:6b:2a:17:16:7c:bd:87:01:1c:b1:8c:
af:a8:31:d7:95:11:aa:03:37:3c:aa:85:ed:72:76:31:90:6f:
1d:dc:1b:1c:dc:44:59:35:e8:30:23:7d:34:10:dd:68:d9:21:
2e:46:7a:b6:e8:97:d2:58:8e:9e:7e:2f:d2:05:cc:e1:8f:66:
e3:2e:33:97:38:6d:d6:78:cb:11:23:61:69:8c:54:98:9d:fa:
ef:c2:28:1a:7d:24:1f:5d:79:d8:6b:5e:39:6f:c9:af:d5:e7:
fa:9d:91:29:bc:ed:54:23:b8:25:2b:7f:fb:60:a3:07:55:c6:
e4:77:60:b8:cd:5f:4a:a7:30:ae:b5:3b:5d:a0:4d:44:6f:90:
84:fb:12:f6:f1:13:11:34:0b:31:f3:90:c6:f4:d7:a4:e8:91:
3d:97:30:81:b5:73:58:0f:2d:3e:47:24:99:e4:7e:d0:1f:a4:
fd:44:b7:ab:44:6a:06:e1:73:78:ef:2a:ae:af:b1:24:b3:ec:
18:2b:b4:73:32:59:51:e7:18:93:3a:00:82:44:9e:c3:42:af:
d4:71:9e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:21:39 2026 by rpki-client