
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/872948d5-8843-3551-ad73-6e3b95de2630.roa
File: 872948d5-8843-3551-ad73-6e3b95de2630.roa (raw, json)
Hash identifier: sXMlCjOAb3jl8nqkE7uGGDbvEczPL4dS6JfYTUBd7us=
Subject key identifier: F5:28:8B:4C:34:47:EC:F6:DB:FA:A7:69:5C:A7:11:98:D9:FF:9D:F3
Certificate issuer: /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial: 010D0C9F4328584E991A54CB407CA65404045CB0
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/872948d5-8843-3551-ad73-6e3b95de2630.roa
Signing time: Thu 23 Jul 2026 21:00:11 +0000
ROA not before: Thu 23 Jul 2026 21:00:11 +0000
ROA not after: Wed 21 Oct 2026 21:00:11 +0000
asID: 398391
IP address blocks: 64.226.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:99:1a:54:cb:40:7c:a6:54:04:04:5c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Validity
Not Before: Jul 23 21:00:11 2026 GMT
Not After : Oct 21 21:00:11 2026 GMT
Subject: CN=cecacafd-ec7f-4e40-bbd2-7767a211c554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:57:9c:f9:09:5e:69:28:a1:49:47:dd:28:
3e:46:a1:1f:10:7e:92:f7:0c:4b:d5:41:40:95:c2:
66:86:2f:11:eb:59:62:14:e2:8b:a4:d7:62:35:62:
b3:bb:64:c4:16:06:db:40:57:ff:0e:9e:62:9b:f4:
22:06:3a:9e:f2:3e:16:0e:ba:e5:21:61:f8:a8:3c:
79:17:8e:ee:45:6f:08:49:41:c6:2c:f8:d5:c3:c1:
88:e5:87:d3:80:d1:84:68:dc:ab:37:7d:b0:5d:d4:
9d:e5:6b:91:c1:55:d5:e7:87:b0:04:23:95:4a:e2:
b4:fb:08:44:4f:29:e7:b4:e2:64:e9:7e:46:f3:37:
92:64:6e:e0:57:5f:b7:1a:2f:27:bc:ea:b3:3b:66:
0c:07:3e:9a:3b:1b:f3:8d:5d:8e:1d:90:55:89:74:
23:ab:4b:58:bf:9e:45:dc:75:f5:14:5b:0a:9b:99:
7a:b0:08:b3:f1:af:15:f9:85:5e:24:49:00:ad:a0:
04:ca:ca:c8:bc:11:bf:a2:24:8e:88:72:7d:b5:1c:
a4:aa:db:c5:be:44:3d:9f:b1:2e:ac:ce:c0:22:40:
82:cb:10:28:56:91:bb:30:dd:f4:75:70:f1:8d:4a:
30:fe:ee:9c:f5:87:11:67:6b:9d:42:cf:71:55:42:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:28:8B:4C:34:47:EC:F6:DB:FA:A7:69:5C:A7:11:98:D9:FF:9D:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/872948d5-8843-3551-ad73-6e3b95de2630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
X509v3 Authority Key Identifier:
keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
sbgp-ipAddrBlock: critical
IPv4:
64.226.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:77:9a:c4:3d:b8:cf:91:51:57:f0:44:93:d9:90:be:a4:82:
91:4e:ef:03:4f:67:3a:99:97:06:a3:87:4b:a4:17:28:e5:d8:
72:28:66:74:cc:45:5c:87:b3:46:80:4d:f0:61:6e:e0:51:90:
65:48:d9:7c:c2:1b:15:e9:86:5b:66:14:44:f8:ad:89:9b:e8:
a5:0b:34:e0:24:75:a6:3e:0a:c7:33:50:2d:5d:e2:11:f1:f0:
b7:68:84:46:2a:ba:d1:c5:7b:8b:2b:3e:fd:45:19:1f:a5:78:
62:e3:27:94:4e:07:09:c2:b7:c3:04:3a:47:c2:13:fc:91:1d:
14:f0:41:b6:dd:88:91:14:34:74:5d:46:39:bc:9e:3d:7f:e5:
77:6a:78:46:90:96:7d:55:5f:42:8c:ad:d0:46:12:87:42:22:
e9:5c:c6:51:d6:35:88:e2:04:8e:94:d7:6e:f8:8b:d8:51:db:
f3:5a:2a:cc:1a:1a:6f:9c:72:45:54:b5:d0:f0:61:76:be:27:
8d:3c:1f:ac:83:ce:a9:f2:4f:28:c8:1e:5e:1e:52:fa:45:fe:
48:72:9b:68:f4:9a:51:c8:7d:b8:ea:dd:6e:9c:16:f5:b9:8a:
82:47:fb:e1:12:37:d3:55:6d:c0:59:a6:bd:49:95:cc:b4:c5:
1a:64:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:53:50 2026 by rpki-client