
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa
File: 420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa (raw, json)
Hash identifier: bgiZv+qV0FpqIXDkiRqe9sPKCxMOOkoaDmtOmcgwzek=
Subject key identifier: A4:55:E2:90:D5:1C:2D:36:4E:A8:E8:E3:ED:43:18:6A:A2:C1:71:F5
Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial: 010D0C9F4328584ED001F281A686DD17BF30EF80
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa
Signing time: Wed 12 Aug 2026 13:00:12 +0000
ROA not before: Wed 12 Aug 2026 13:00:12 +0000
ROA not after: Tue 10 Nov 2026 14:00:12 +0000
asID: 13638
IP address blocks: 72.11.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d0:01:f2:81:a6:86:dd:17:bf:30:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
Validity
Not Before: Aug 12 13:00:12 2026 GMT
Not After : Nov 10 14:00:12 2026 GMT
Subject: CN=939fa334-13b1-4c5f-86a7-997eab7465c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:35:79:e1:bc:16:36:4a:1c:1d:2d:12:3b:
ec:6a:6d:62:7e:d3:9c:af:8e:96:c4:d6:22:d0:d6:
8a:bd:ab:55:7f:64:c2:78:62:1a:d1:41:6a:b9:10:
ea:fc:eb:c3:31:f7:72:f5:d2:fa:2a:dc:b4:05:77:
69:a6:36:ab:b7:1b:93:98:0d:03:c8:64:8b:51:a4:
15:c1:ca:04:7e:a7:4f:77:19:99:2c:d7:46:47:6b:
dd:fd:1f:1a:60:1f:47:85:e9:ac:bb:15:e6:8f:a5:
cf:14:62:e5:35:05:a1:dc:93:24:29:6f:56:63:a1:
c7:51:08:a1:d3:18:6c:e5:00:46:02:20:67:98:41:
07:97:31:e9:46:3b:c3:26:a6:e1:27:93:17:7d:9c:
62:99:29:03:87:ff:48:c7:be:49:1c:30:30:b6:12:
a5:a0:00:e3:30:3e:27:97:18:57:f0:04:13:79:b0:
2d:9b:29:66:bc:e6:2b:be:15:05:e2:5b:98:d7:cd:
51:7c:a6:65:eb:c1:96:7c:0d:4f:e7:15:32:11:57:
6a:03:73:8c:25:df:90:73:bc:89:b4:af:9e:cb:79:
5d:a3:2d:a3:c0:99:a3:dc:38:76:80:f5:ab:91:d8:
25:36:2c:34:81:24:30:da:98:66:b3:4f:e6:9a:57:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:55:E2:90:D5:1C:2D:36:4E:A8:E8:E3:ED:43:18:6A:A2:C1:71:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
X509v3 Authority Key Identifier:
keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.11.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:17:e1:48:2f:4f:db:b9:cd:c0:7d:f5:fe:5e:3c:de:ea:60:
fb:0f:8e:83:a1:cf:d6:6f:f5:a8:05:4b:25:eb:13:c1:a8:05:
a0:67:33:fb:8b:7b:a0:29:48:49:1f:f6:16:a4:2c:d0:97:c9:
c8:8a:ff:c1:96:54:e6:1c:a5:14:28:8b:e2:b9:62:0b:96:7b:
83:81:c1:af:78:5c:9b:56:74:aa:8f:93:5b:71:d0:61:9a:96:
88:31:fe:1d:a9:80:a5:a9:76:9c:02:84:a5:4f:b9:f0:91:06:
33:fb:28:64:ba:db:9f:26:99:63:33:06:e7:dd:d3:33:f9:1e:
52:06:74:db:23:67:af:03:c4:df:ce:0f:93:14:1b:ff:cb:d1:
28:6a:2a:b8:d1:6b:0b:75:d2:f5:47:94:84:da:f9:5d:b8:95:
5f:f8:a8:66:99:8c:c5:e1:a5:56:ac:f8:c2:e0:2a:ad:83:05:
0d:02:1d:08:33:b6:dd:a7:b2:d4:50:0f:07:dd:14:63:ad:6a:
e8:e8:6c:e8:72:b0:71:bc:de:b6:3d:b3:a2:b4:a1:bf:ba:1a:
5e:ed:45:00:4c:51:eb:16:98:18:a4:ac:a1:6b:bf:e5:36:c0:
60:38:4d:bb:e1:87:26:b6:9a:18:f0:50:e6:46:13:6f:5b:2b:
e2:0d:ae:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:11:59 2026 by rpki-client