
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/3a3ae330-53cb-3620-abcb-6a65fbe4a7ea.roa
File: 3a3ae330-53cb-3620-abcb-6a65fbe4a7ea.roa (raw, json)
Hash identifier: HJy50ZMKqXqNjJMONNF7Z6VYg14QTk6oPvLd23UPTio=
Subject key identifier: E5:BD:2E:12:3C:0E:83:10:21:A9:44:E3:19:DD:73:8B:52:CA:40:FC
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F4328584E5D149D50508302DE3885C200
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/3a3ae330-53cb-3620-abcb-6a65fbe4a7ea.roa
Signing time: Thu 02 Jul 2026 09:00:12 +0000
ROA not before: Thu 02 Jul 2026 09:00:12 +0000
ROA not after: Wed 30 Sep 2026 09:00:12 +0000
asID: 834
IP address blocks: 68.67.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5d:14:9d:50:50:83:02:de:38:85:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: Jul 2 09:00:12 2026 GMT
Not After : Sep 30 09:00:12 2026 GMT
Subject: CN=981408b0-f722-432a-b510-bbd7be392251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:08:b7:e0:e9:bf:c4:e1:9e:45:bb:a4:69:d5:
02:fe:d7:c4:c0:fd:24:28:dc:49:cb:46:27:3d:14:
22:a4:cc:29:55:3b:c8:1e:61:e7:ca:11:f5:88:01:
0a:84:fe:c5:b2:9e:ea:15:b6:c8:ca:f4:36:f3:a0:
81:db:bd:c8:80:2c:4f:db:7a:e7:c7:63:46:ae:c5:
63:60:a6:28:9f:43:da:ea:47:0b:dd:a1:f8:e1:1d:
30:78:8d:82:cf:f9:e2:61:d9:a1:ea:8f:34:3c:46:
f2:a5:a4:e2:34:cb:30:6d:e8:34:62:80:2c:bd:09:
92:13:35:ca:15:38:b8:3e:94:67:78:1f:76:c2:3a:
dd:7c:4a:be:f2:83:98:e0:d7:35:30:6c:d1:58:1b:
37:e0:1a:49:0f:43:52:00:83:cc:22:79:c1:30:c1:
a3:c4:a8:72:53:16:04:2c:cd:de:3c:e7:b6:97:fc:
82:bb:b8:3a:7d:78:d0:cc:ec:52:f3:09:35:cc:60:
65:ba:11:97:f0:79:77:31:1a:45:b8:5c:02:a3:ed:
db:48:ca:93:fb:c9:cc:e3:e5:8f:c8:99:50:2c:3e:
ed:dc:f6:e8:37:f0:3c:4f:bd:18:4a:11:57:3c:56:
a0:87:43:fc:29:68:de:fe:04:33:ce:18:a2:c0:2a:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:2E:12:3C:0E:83:10:21:A9:44:E3:19:DD:73:8B:52:CA:40:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/3a3ae330-53cb-3620-abcb-6a65fbe4a7ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
68.67.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:23:12:2c:f6:cf:1a:f7:93:01:1e:7e:f0:3c:c5:49:40:b7:
9a:d7:16:5a:90:36:24:36:1a:7f:58:23:70:e8:05:b6:dd:4e:
43:f1:d8:68:2b:ee:f0:d1:c9:f0:5b:20:ce:1e:8d:19:67:52:
45:d9:ed:e3:bf:8e:66:5d:f7:c8:ef:33:01:5f:0b:f4:39:41:
ef:d0:64:ee:4b:ee:2c:4c:46:2d:fc:29:10:6b:32:ed:9e:dc:
3c:9e:31:e4:5f:61:8c:5b:17:04:2a:d2:0f:9c:0b:3b:59:d4:
39:df:4f:32:64:fe:5b:a4:68:37:dd:24:e9:97:23:7f:d7:61:
3e:a6:20:80:1c:61:d7:49:a9:8a:06:ff:ca:11:b8:f5:d6:15:
65:f3:b5:c4:ec:44:02:f8:7c:51:30:18:a6:3e:40:06:43:8c:
fd:ca:03:b6:25:1a:29:9e:6a:22:1a:5f:7d:09:0d:19:67:31:
fc:a3:c7:a5:1d:c6:d9:ac:75:47:29:87:65:c2:35:ab:11:07:
a8:c5:e3:bf:1f:7a:d2:04:8e:18:f3:6b:54:fd:b7:d1:88:a9:
ff:8f:20:43:c5:21:be:83:77:d3:54:68:31:21:93:fd:e9:f1:
fe:3e:b3:a0:df:74:81:68:31:3d:57:06:52:2f:09:b1:7d:da:
42:3a:90:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:20 2026 by rpki-client