
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa
File: af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa (raw, json)
Hash identifier: AWnKwqpc/OanSvMDoTtWynHeQ4I9ZDPlOXQoRzGBuA0=
Subject key identifier: 11:D3:13:01:D7:CA:5C:FF:33:05:AB:0B:06:75:4C:5C:B0:36:2B:AF
Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial: 010D0C9F4328584E921FA193492B2DE0697A7A20
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa
Signing time: Tue 21 Jul 2026 09:00:12 +0000
ROA not before: Tue 21 Jul 2026 09:00:12 +0000
ROA not after: Mon 19 Oct 2026 09:00:12 +0000
asID: 395092
IP address blocks: 104.36.228.0/22 maxlen: 24
2607:a680:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:92:1f:a1:93:49:2b:2d:e0:69:7a:7a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Validity
Not Before: Jul 21 09:00:12 2026 GMT
Not After : Oct 19 09:00:12 2026 GMT
Subject: CN=026864f1-117c-42e0-9a86-d2e44b925e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:c4:1c:99:bc:d0:94:2d:e5:36:8c:0f:6f:
f0:95:61:32:2f:ae:a3:ea:ca:df:1d:3b:7a:ff:91:
8a:e1:02:2a:db:4d:7a:95:c0:5f:e1:12:a6:93:8a:
f1:93:52:78:ca:1c:b6:9e:dd:32:1d:7d:67:ce:c2:
2c:00:51:d9:68:e1:8c:da:61:78:f5:cf:9c:90:0e:
a6:33:1d:51:83:d5:41:bb:02:68:85:31:61:ee:8c:
a8:0f:e6:d0:ee:d9:9e:e2:a5:1e:da:7a:38:8b:27:
7e:bb:db:18:b2:13:39:17:99:98:b3:ec:ba:97:1e:
dd:f6:6c:95:0c:04:09:e2:59:87:43:7c:ca:05:eb:
7f:41:ac:35:bc:5f:06:67:bc:28:0d:42:a8:23:8d:
00:83:ab:e9:84:b2:6a:7c:67:43:f3:a5:62:e3:19:
b7:6f:85:8d:1a:c3:6e:a7:10:2d:d1:46:26:84:8b:
50:93:38:25:96:4d:f7:0d:bc:b3:77:23:69:5b:1a:
64:d4:24:d4:2f:03:d3:21:64:ed:3a:1d:69:ca:2d:
45:5b:fc:29:ba:2c:93:30:2c:3f:d4:0f:87:16:7a:
13:cd:c1:b7:63:1c:fa:32:f1:de:ad:3c:bf:e0:f2:
5a:57:ec:a7:74:4d:8b:8c:1a:15:f9:24:fe:0a:eb:
37:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D3:13:01:D7:CA:5C:FF:33:05:AB:0B:06:75:4C:5C:B0:36:2B:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
X509v3 Authority Key Identifier:
keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.228.0/22
IPv6:
2607:a680:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:bd:b2:06:f1:2a:4a:1d:58:37:a5:f4:ad:e1:e3:0e:1e:52:
3a:88:b7:4f:55:09:44:d6:e1:d2:55:3f:40:c7:49:85:4d:72:
c3:85:29:2b:cb:e5:7e:b4:f2:63:cf:d8:f3:84:ff:3a:95:34:
84:2f:ec:0d:3f:ee:02:1e:ea:6a:5e:6c:c6:1f:3d:d6:e5:26:
e4:7b:48:df:05:0f:fd:3c:8b:93:7d:be:5b:78:d7:c9:f5:92:
44:58:d4:74:62:3d:cf:75:b4:96:f1:2c:09:0e:f6:45:76:95:
fa:0a:a7:47:d2:41:0d:d3:e2:fa:19:be:21:73:15:3c:cd:60:
e5:3e:ed:c9:fe:9e:33:a0:7c:d2:83:e1:c2:6c:6e:11:5a:de:
bc:52:dd:76:f3:b0:14:e5:9b:eb:60:db:e5:8f:c1:f3:b0:8e:
26:9a:68:1b:89:29:96:d6:36:c7:9e:2c:73:f0:84:a5:a8:24:
11:f0:16:87:9a:2a:30:d9:82:7c:97:64:c4:b3:74:53:d2:1e:
67:ab:33:14:c5:3f:af:8c:a2:ed:1f:cd:31:af:07:0b:0f:61:
a7:4d:3d:16:4c:e5:1f:bd:12:08:6d:9b:cf:7a:48:13:a5:88:
a0:c0:d0:2d:ba:59:5c:a5:f5:05:54:43:80:00:2b:17:7d:1b:
d1:8b:b9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:51:53 2026 by rpki-client