
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3f51f917-15c6-360f-9df2-b1d062ea6b7a.roa
File: 3f51f917-15c6-360f-9df2-b1d062ea6b7a.roa (raw, json)
Hash identifier: T1Q3ErTrm1QLjc783eeqQfG62sMAe7D7JI9aPLcKBg8=
Subject key identifier: 7F:8B:17:01:FB:FE:EB:5C:1C:41:CD:E6:32:ED:2E:44:07:17:B1:5A
Certificate issuer: /CN=3cfc6d7b-a1e6-4d32-803d-0e5060c00725
Certificate serial: 010D0C9F4328584E74CF73D114BC48E9ECDCC180
Authority key identifier: 04:25:0A:C7:4E:4D:D3:95:46:55:BB:39:96:37:F5:FE:A3:71:5B:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3f51f917-15c6-360f-9df2-b1d062ea6b7a.roa
Signing time: Fri 10 Jul 2026 21:00:12 +0000
ROA not before: Fri 10 Jul 2026 21:00:12 +0000
ROA not after: Thu 08 Oct 2026 21:00:12 +0000
asID: 19211
IP address blocks: 66.235.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:74:cf:73:d1:14:bc:48:e9:ec:dc:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfc6d7b-a1e6-4d32-803d-0e5060c00725
Validity
Not Before: Jul 10 21:00:12 2026 GMT
Not After : Oct 8 21:00:12 2026 GMT
Subject: CN=f4e86751-608e-4e2e-8ac7-ca76d7a6db2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:08:98:52:74:41:ef:49:f6:a4:72:67:55:
74:98:aa:72:d2:4e:f4:1c:b4:14:02:56:bf:e4:f0:
67:a2:78:6f:93:c7:92:d3:1d:d2:7d:cc:e0:f6:ec:
76:b8:04:a6:d8:f6:14:88:2d:8c:9c:0d:29:c6:dc:
aa:47:d4:62:6a:bc:b5:c2:b3:79:36:36:9b:7c:f6:
84:42:9c:25:61:db:54:d2:6f:8b:8e:c7:76:a0:37:
5b:d3:7b:25:47:a8:3e:01:a6:f0:29:4f:53:7b:13:
18:b7:3f:7b:e9:23:49:ee:bf:79:f7:14:dd:2b:f3:
0c:6c:10:9e:98:3a:18:69:32:7b:00:4b:cc:db:2d:
16:41:78:2e:5a:a8:5b:dd:93:2e:d2:ad:85:fa:cf:
37:8b:82:24:36:d5:f9:21:82:1d:d4:b3:bb:09:f2:
1c:91:28:99:1f:9e:e3:8a:ea:e2:fe:b4:1f:96:6f:
f9:6b:7e:e6:dc:1f:f5:94:05:c0:c3:e4:df:e0:4f:
ae:71:ba:d4:ef:06:7f:90:7c:2c:e3:15:98:6a:ff:
0c:6f:be:94:1d:8c:f1:18:ce:e1:50:2f:38:17:53:
9e:a9:35:de:d1:09:34:3a:7b:ab:fb:79:62:a3:58:
e3:f5:6a:6c:28:de:17:58:33:2c:a2:04:44:73:75:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8B:17:01:FB:FE:EB:5C:1C:41:CD:E6:32:ED:2E:44:07:17:B1:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3f51f917-15c6-360f-9df2-b1d062ea6b7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.crl
X509v3 Authority Key Identifier:
keyid:04:25:0A:C7:4E:4D:D3:95:46:55:BB:39:96:37:F5:FE:A3:71:5B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer
sbgp-ipAddrBlock: critical
IPv4:
66.235.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:3e:c3:23:5c:17:db:fa:72:10:11:e5:48:b7:14:b3:2d:af:
85:c7:ae:6f:cc:9d:2a:84:8c:34:56:47:f6:de:2e:1b:f8:0f:
bf:14:9a:82:e6:c1:4a:67:cf:8f:a6:93:46:15:d1:17:2a:4a:
6a:b8:70:ed:88:db:91:9b:89:6b:7c:f1:ee:00:8b:cd:b1:64:
aa:99:c3:c8:26:24:0a:ca:87:75:23:f2:8a:d7:ce:1b:f6:9e:
f9:4a:8c:f9:eb:99:4f:0e:d9:dd:49:21:8e:e7:87:71:fc:2e:
f9:85:78:b6:bb:1c:3d:d5:5b:21:34:e9:fd:3f:59:c3:6c:e5:
ed:43:94:9d:8a:7d:bf:08:99:89:f3:04:5b:63:b1:d1:32:0d:
2a:2d:d3:13:8b:84:ae:12:89:90:cf:40:3b:86:f2:f1:3a:7e:
8f:0e:74:19:69:1d:b2:4b:91:77:57:c2:13:21:79:17:57:51:
d9:04:3a:38:fd:93:ad:6c:ca:46:aa:99:d4:08:cd:15:61:fd:
c3:6f:c6:f8:57:ba:5e:94:4c:6f:b8:64:95:a9:ca:64:b2:2a:
93:e0:f8:5b:2e:7e:59:41:d9:05:6b:75:59:3d:a5:a9:8c:ab:
2f:d9:cc:43:86:7e:e3:09:79:31:92:31:97:bb:db:38:f1:e0:
e7:c1:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:32 2026 by rpki-client