
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/3a9c4ed7-ef0b-33fe-9ec1-c1b72cd8fc48.roa
File: 3a9c4ed7-ef0b-33fe-9ec1-c1b72cd8fc48.roa (raw, json)
Hash identifier: on1v3btVvYiUd6DLZVdBAoGiIRJyYQt15Tb+JUe5s2E=
Subject key identifier: 41:50:18:4E:97:AE:2F:6B:FE:F1:9C:C6:11:AE:D1:FA:0B:A5:34:DD
Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial: 010D0C9F4328584E89BF94803499C1D72E2B8180
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/3a9c4ed7-ef0b-33fe-9ec1-c1b72cd8fc48.roa
Signing time: Sat 18 Jul 2026 09:00:12 +0000
ROA not before: Sat 18 Jul 2026 09:00:12 +0000
ROA not after: Fri 16 Oct 2026 09:00:12 +0000
asID: 46873
IP address blocks: 68.233.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:89:bf:94:80:34:99:c1:d7:2e:2b:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Validity
Not Before: Jul 18 09:00:12 2026 GMT
Not After : Oct 16 09:00:12 2026 GMT
Subject: CN=eb71ea90-13ef-4ae5-ae30-4f95fc788a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:51:31:e3:35:d5:f8:ea:96:8f:aa:31:30:21:
a5:ed:ed:a9:01:52:ec:b3:af:29:48:5b:27:ec:46:
f6:77:ed:aa:63:73:0d:88:01:b8:4d:e1:88:49:a3:
b1:69:43:38:c9:af:4b:63:1f:ee:56:a1:5b:95:4c:
ee:a9:8c:47:47:22:d7:23:7b:5c:66:a5:b2:20:11:
0e:d5:83:33:22:b2:f7:46:b7:cf:63:e6:22:57:cd:
8e:e9:67:b6:ae:f5:83:bf:08:de:f1:84:c6:a5:b2:
bd:26:51:42:44:59:54:c3:01:a8:a2:68:2e:bd:54:
47:d3:1e:b1:a6:a4:e6:fb:b5:8c:4d:0a:d8:85:6f:
1b:91:ef:fd:6e:cc:b5:62:ac:f7:a3:01:9c:2e:f7:
65:22:ad:b2:49:ea:63:09:2e:e1:9f:c6:42:df:57:
c1:96:7a:1e:97:06:eb:cb:fa:a2:0d:80:e9:b4:1c:
8f:1b:8d:77:dd:c2:ce:54:db:49:e7:29:5b:04:6f:
75:1f:80:50:c8:5a:bc:89:d9:33:59:c7:35:dd:ef:
c7:39:c1:01:fe:57:f4:93:b2:d3:aa:29:00:20:94:
29:57:5a:b8:65:ae:66:81:70:db:34:db:12:5c:72:
12:38:b0:60:39:45:91:be:9a:8a:c6:23:10:07:3c:
fc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:50:18:4E:97:AE:2F:6B:FE:F1:9C:C6:11:AE:D1:FA:0B:A5:34:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/3a9c4ed7-ef0b-33fe-9ec1-c1b72cd8fc48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
X509v3 Authority Key Identifier:
keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
sbgp-ipAddrBlock: critical
IPv4:
68.233.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:2a:d4:b1:27:e7:a6:f5:8f:b5:f3:ce:ab:fe:f9:46:38:75:
c2:42:7b:53:2c:42:80:03:10:7f:64:1a:02:a9:22:e2:1c:c2:
bc:21:0b:36:74:31:f3:06:8a:22:4e:8b:c9:8c:39:bd:a1:e9:
99:5d:0b:98:a2:c2:fb:7a:2b:c1:de:d9:5f:f9:27:fd:51:a0:
99:a8:32:81:b9:a7:fc:0c:ed:13:06:64:11:30:3f:19:01:2a:
da:f4:06:76:fc:b9:8f:15:e9:e0:d4:87:95:8a:04:89:1d:31:
70:c3:3e:22:9c:d8:71:23:c1:10:ac:c1:10:68:66:3b:3d:31:
da:38:96:7c:a6:a6:93:e0:1a:b2:2d:71:0f:8c:fe:18:65:85:
74:db:84:28:f2:f7:dc:18:1f:70:73:df:92:0e:bf:b1:a5:ef:
1b:e6:00:66:72:2e:18:b4:c5:82:7e:56:81:c2:b2:54:ce:d7:
43:41:fb:f7:72:31:ae:d5:a5:6b:15:ca:a4:d5:12:23:0a:b2:
39:28:63:88:fd:ec:05:7c:d3:0b:b1:00:5c:26:bb:2d:31:c3:
7e:39:aa:2e:ee:38:34:a1:15:0a:08:5d:2a:39:1d:4a:69:77:
86:71:7d:2f:08:f1:bc:6c:eb:bd:be:0a:a6:f8:3e:19:5b:88:
e5:a7:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:00 2026 by rpki-client