
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/7fd3a4b1-ba11-3623-b7e3-d4c5fe23a8fb.roa
File: 7fd3a4b1-ba11-3623-b7e3-d4c5fe23a8fb.roa (raw, json)
Hash identifier: ZVdBW6HpW1mZT4Yx3x9aLpciEHEY/0fS6Onv6flaTYM=
Subject key identifier: DA:42:AB:5A:97:13:37:20:D8:88:46:AC:D6:C7:43:80:47:0C:A2:F7
Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
Certificate serial: 010D0C9F4328584E6EC9FF10BFB33CD0E3AB3200
Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/7fd3a4b1-ba11-3623-b7e3-d4c5fe23a8fb.roa
Signing time: Wed 08 Jul 2026 17:14:26 +0000
ROA not before: Wed 08 Jul 2026 17:14:26 +0000
ROA not after: Tue 06 Oct 2026 17:14:26 +0000
asID: 394195
IP address blocks: 67.223.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6e:c9:ff:10:bf:b3:3c:d0:e3:ab:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
Validity
Not Before: Jul 8 17:14:26 2026 GMT
Not After : Oct 6 17:14:26 2026 GMT
Subject: CN=a850491a-a449-4aeb-b7d3-2f7c3b71f338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:d1:02:b1:c9:6a:7c:11:22:ed:c4:1e:85:
51:78:6e:2a:8f:50:37:10:6d:9f:13:ac:2f:2d:83:
93:a3:ee:e4:3d:b4:08:b6:8c:a3:02:15:45:77:c5:
88:9d:b3:42:99:25:d4:e3:d2:fc:eb:8c:d4:2d:ce:
dd:fe:cd:f9:64:74:c7:3d:92:68:c3:ff:4e:03:ae:
cd:91:3c:a3:bc:5a:1b:64:55:0d:5a:87:12:d6:c4:
e7:99:7e:d3:eb:fc:1f:68:4c:48:57:7a:3d:da:77:
54:9e:b1:d7:72:41:31:7b:98:29:4a:c8:c3:da:70:
fa:b7:3a:2b:d3:df:1c:6d:70:b1:a5:d7:71:af:d2:
9d:ff:c9:34:3f:8f:7d:e3:71:57:ed:f2:86:e9:f4:
83:64:07:bd:10:64:c1:05:23:98:39:32:6c:e8:db:
71:41:c6:09:83:ab:de:eb:95:02:e7:ac:5a:15:53:
97:f6:05:3c:1f:1a:f0:2b:45:ce:a2:b8:52:5c:73:
83:9d:3f:68:df:41:21:1c:fe:51:3c:8e:27:26:bc:
b9:e8:3c:ff:80:3f:5a:1f:8e:50:77:f8:23:28:70:
40:76:7b:63:5c:63:91:ea:2c:45:5c:1a:5a:f1:b7:
01:39:76:73:9b:7a:f3:44:ab:13:95:5f:81:b9:88:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:42:AB:5A:97:13:37:20:D8:88:46:AC:D6:C7:43:80:47:0C:A2:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/7fd3a4b1-ba11-3623-b7e3-d4c5fe23a8fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl
X509v3 Authority Key Identifier:
keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
sbgp-ipAddrBlock: critical
IPv4:
67.223.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:24:90:f4:56:45:a7:31:d6:40:a8:a4:ae:fc:c0:59:d5:d9:
24:a8:a6:93:34:74:fc:d3:d4:92:73:ce:19:ef:dd:e1:53:43:
a4:62:81:88:1b:fa:78:e7:fb:c3:03:de:34:75:ff:1e:2d:ab:
5c:05:47:47:31:92:0c:d5:8f:fe:29:01:42:1a:ae:43:70:71:
27:74:ff:87:55:2d:fe:2f:bb:0d:74:a0:08:bf:34:58:da:6d:
d9:24:58:3f:d3:92:94:c9:5d:78:1e:df:04:2d:b1:f5:da:fd:
b6:8d:68:ed:ad:56:9b:3e:19:8d:6a:04:eb:bf:42:89:df:be:
36:44:6e:46:06:b9:7b:78:8a:92:7f:46:09:c2:0d:89:f1:fe:
7f:6a:33:7b:2f:64:d6:b7:fc:f2:e7:e2:59:16:e7:b1:aa:ca:
70:55:c1:56:38:26:a8:9c:31:e9:f9:7c:0e:de:6d:36:d8:cf:
61:8c:9a:6a:b4:d0:0b:26:0a:0c:6e:f0:dc:1d:d7:9f:5b:1a:
f0:f4:49:25:96:dc:ec:0b:b1:59:a1:a9:23:f2:d9:63:cc:3a:
3a:ce:1c:c6:74:f8:4e:3f:83:4c:59:24:61:3b:ff:4c:86:dc:
01:be:57:36:ff:89:ca:b5:a5:e9:f1:f2:0f:9c:6f:16:77:b0:
75:4c:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:04 2026 by rpki-client