
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/524b77c2-e79e-3a16-a843-947a161df571.roa
File: 524b77c2-e79e-3a16-a843-947a161df571.roa (raw, json)
Hash identifier: GNHqACUPrccC7u/VWcuTgObddzIlHVSPJKV5s9WlMEk=
Subject key identifier: 81:EA:23:01:D5:4F:40:5D:BF:1B:EB:BB:55:C6:D1:16:6B:E6:DC:33
Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial: 010D0C9F4328584F49769B73DF94567FEE0250E0
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/524b77c2-e79e-3a16-a843-947a161df571.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 13737
IP address blocks: 68.233.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:9b:73:df:94:56:7f:ee:02:50:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d5626f85-3ef1-4e0b-9f66-f60ae656d7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:0b:dc:d2:f0:79:cf:9e:d9:0d:84:72:be:
58:7b:93:05:d4:b4:4e:42:37:df:e6:1f:16:c5:af:
20:76:7d:96:dc:a5:43:2f:6f:5e:00:45:22:95:b5:
07:50:3a:6e:3d:cc:27:59:e5:23:bd:86:d2:38:7a:
1a:f2:8c:98:da:a4:c3:33:23:aa:ca:74:68:c6:d2:
68:48:31:2a:0a:33:77:e3:21:0a:ad:00:16:a8:eb:
c4:b7:18:e0:90:7f:0d:22:70:a4:40:91:c1:52:8b:
52:5a:cf:bf:68:02:f6:c2:ba:46:2b:44:77:79:8c:
73:be:b4:d8:1e:9d:c6:67:c7:b9:6d:b3:84:9c:55:
d1:31:9d:98:43:25:80:7b:26:6b:24:55:56:69:1f:
94:f6:fa:21:f7:d4:63:ae:f8:ce:2b:db:65:b8:c9:
a7:0d:7b:a2:25:bb:42:6e:28:90:5f:dd:6b:f8:d5:
74:d1:5a:c6:91:08:6f:d2:cc:f1:7b:37:5d:a9:bd:
6f:10:15:fa:b5:a5:b5:8f:69:ae:2c:72:68:47:66:
8d:f5:6c:2d:90:75:c6:04:86:d8:cd:1a:d6:aa:8f:
93:40:4a:7a:f4:ce:4c:8a:60:c5:f9:e5:5c:8b:5d:
04:97:cd:07:ae:3c:81:a9:4b:24:3d:48:fa:3a:2d:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EA:23:01:D5:4F:40:5D:BF:1B:EB:BB:55:C6:D1:16:6B:E6:DC:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/524b77c2-e79e-3a16-a843-947a161df571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
X509v3 Authority Key Identifier:
keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
sbgp-ipAddrBlock: critical
IPv4:
68.233.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:9e:f6:e4:d5:93:da:4c:62:55:4e:2d:58:7f:ea:c8:4b:d1:
0b:fa:e6:e2:63:5a:d3:b7:7e:3c:d7:45:f1:27:25:e0:6e:d9:
97:58:bc:d4:b0:84:c5:9f:c4:cf:53:8c:29:e2:21:4b:4e:9c:
16:07:da:43:43:be:c5:15:45:42:45:3e:f0:14:57:29:0d:ba:
e3:93:6d:51:6e:c5:0a:9f:bb:25:9d:54:b4:ee:d3:c9:f0:a2:
f7:77:b2:23:e6:31:21:8c:4c:56:d4:10:60:59:60:b0:a9:bb:
54:b5:9d:b2:0c:68:c3:71:84:e9:15:20:e7:07:f9:06:93:12:
e1:c6:a7:42:23:56:9e:b1:29:76:f9:68:03:35:22:7b:24:e0:
ea:47:02:66:ad:a5:53:97:92:a8:a5:53:00:c1:3c:ab:3f:ee:
6a:71:35:b1:29:6c:77:7f:d6:24:fe:be:86:cb:10:30:7e:1f:
33:ce:05:eb:44:08:f8:3f:7e:08:80:92:5b:ce:4f:89:18:1b:
e8:6d:bb:a0:cc:c4:37:07:d4:26:5c:17:30:2a:9d:c8:dc:74:
d1:82:14:a9:ab:fe:89:74:61:67:ed:70:00:bf:19:45:54:ab:
8c:59:1c:f2:91:a5:53:57:6e:03:ec:64:85:f5:c7:1f:3a:cd:
f5:90:a4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:31:19 2026 by rpki-client