
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/395230d0-3cf8-35a4-bfa2-c07d5555c094.roa
File: 395230d0-3cf8-35a4-bfa2-c07d5555c094.roa (raw, json)
Hash identifier: 1xzu2ucxnU6j/xPYtDi1aSeIItKvWnfZBd+u+V/FCwE=
Subject key identifier: 38:53:FC:18:E1:9F:2A:94:A2:03:DE:51:76:60:42:95:68:C3:A0:0F
Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial: 010D0C9F4328584E059C5A61B9518C05A7210E80
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/395230d0-3cf8-35a4-bfa2-c07d5555c094.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 14813
IP address blocks: 72.22.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 09 Jun 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:5a:61:b9:51:8c:05:a7:21:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=47a07afe-1793-41ca-836e-76d91e36edbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cf:8b:81:16:1c:dc:b3:a3:a4:3e:92:3f:ce:
52:a0:b1:40:25:a4:87:06:2d:7b:7e:c0:e4:54:88:
40:3a:36:15:76:41:c4:37:72:bc:4d:9d:5b:d4:7a:
7e:d5:c1:e4:a8:b5:f3:a1:81:be:45:32:bc:92:9e:
23:2f:ac:be:d4:a6:17:15:f8:d7:a1:be:cb:04:09:
50:f9:b1:c2:bb:05:67:57:a8:58:9d:2b:06:57:c4:
d8:28:37:66:38:fe:4c:3d:16:81:79:fe:9d:e7:ed:
59:05:0d:18:31:bb:60:7e:4d:4c:5f:52:a2:f7:4e:
7c:1a:27:ec:04:4c:49:d9:1a:84:eb:0a:ef:f1:91:
d7:b7:62:44:3d:4b:b1:81:9e:43:3c:c7:f0:3f:06:
75:07:ad:38:27:4a:29:06:2d:87:95:c9:2b:d4:cc:
51:72:0f:58:92:18:66:fa:a9:4a:a7:e0:2f:7c:19:
d0:95:a5:ba:10:99:5e:78:b6:1b:97:82:5d:87:69:
75:06:06:80:bf:d3:1e:6b:0f:fc:4d:14:d5:31:23:
6d:dd:c7:2c:e6:01:ab:60:d0:af:4e:00:9b:a8:7b:
ce:20:3e:35:f9:23:20:f0:cd:8d:31:10:be:bf:a8:
a7:f7:14:8f:61:53:fc:17:86:bd:8e:b5:f3:15:a8:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:53:FC:18:E1:9F:2A:94:A2:03:DE:51:76:60:42:95:68:C3:A0:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/395230d0-3cf8-35a4-bfa2-c07d5555c094.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
X509v3 Authority Key Identifier:
keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:1d:db:ab:bb:df:dc:d5:a0:92:58:2a:70:33:d8:ac:6e:59:
88:08:7f:17:bb:ba:27:2c:c2:56:b8:2a:0a:06:06:c6:a2:3e:
9c:a5:46:08:3a:bf:6c:30:22:85:83:5f:a7:05:19:e6:27:a5:
ba:53:7d:db:30:93:2b:13:c6:13:a4:6d:fc:8f:54:e2:6a:32:
00:7c:e8:45:b2:07:db:99:43:f1:10:13:57:f3:77:73:6e:5f:
ef:e3:1d:7e:5b:1f:e6:1e:79:7f:d8:6a:67:0a:4b:73:c9:b2:
6f:c5:87:b6:7e:b2:9c:f1:d9:db:0a:f4:53:7e:20:5f:52:cf:
76:e9:5d:9a:41:73:da:91:7a:c6:0d:2a:a7:5b:4a:8d:b1:4e:
91:38:8f:51:1a:b6:55:ae:bf:37:db:fb:d1:23:c0:ab:65:00:
69:91:2b:a3:78:d3:67:3b:7b:53:fb:b7:d6:37:89:24:7a:b5:
09:66:7b:41:e6:9e:a8:55:e2:29:60:f7:8c:57:3a:34:af:78:
b5:1d:08:a5:f5:3f:74:21:1c:a6:f7:39:d6:49:91:6b:56:70:
2f:5c:f7:ca:09:dc:90:5d:37:2d:11:b2:c5:d0:e9:62:82:3e:
e5:f8:f6:b6:8e:97:7f:09:aa:8e:de:73:0a:cd:a0:8e:18:8e:
60:ab:b5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 22:03:31 2026 by rpki-client