
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa
File: 0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa (raw, json)
Hash identifier: F8/PLSGsyk3GXZI2JG0rclPXM+xXBAbegWC6SlfE+E4=
Subject key identifier: 71:4D:29:4A:08:10:62:D9:96:2E:AD:C9:AB:86:36:DC:F8:59:2B:0F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584EA7886E70C57B89E4D2D41C80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 9009
IP address blocks: 172.111.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:6e:70:c5:7b:89:e4:d2:d4:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=6fc265d4-ece9-4131-bd19-e5038d41f6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:09:52:e9:70:2a:24:0b:d8:4e:1f:5f:12:
ba:94:26:63:cf:7b:60:50:2a:ac:26:cf:80:1f:c2:
1a:b2:01:d5:4c:be:f1:5a:ad:08:7c:43:8d:55:b8:
c8:9c:71:6b:c2:17:77:50:83:cd:7e:0a:cb:9a:39:
1f:f2:a4:59:ab:75:3f:0f:ff:ae:b5:27:2f:66:b6:
85:29:7a:86:d7:fc:8c:5b:40:c9:86:fc:d9:ac:32:
25:c0:51:b6:01:86:53:6d:4b:96:56:df:c4:5c:3b:
6d:e8:da:f4:18:09:9e:64:99:ad:31:af:19:9c:1e:
9f:48:d0:d8:af:6d:09:17:c8:d2:82:7b:5f:3e:84:
fe:50:ad:6d:5e:06:d4:4d:6c:db:85:f2:28:85:3d:
4e:46:42:2b:4e:60:cd:f1:57:81:92:1a:96:4c:7c:
8b:23:41:63:01:4b:59:23:72:f4:7b:da:d0:b7:63:
58:c4:53:ad:c3:95:81:f6:9b:2a:7c:ef:0a:0b:f1:
b4:a9:14:c9:ab:86:fb:3a:62:46:cd:5a:3a:06:bf:
dd:8a:bc:2e:0e:a5:f7:60:53:18:1a:46:81:a9:dd:
90:a4:a5:98:58:45:18:04:91:36:54:2a:ee:eb:ce:
24:53:10:1b:7f:b5:39:81:9b:6b:64:ea:db:eb:80:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4D:29:4A:08:10:62:D9:96:2E:AD:C9:AB:86:36:DC:F8:59:2B:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:91:40:22:57:9e:c5:74:0e:40:14:c7:6f:ba:2f:27:9e:be:
d1:02:9c:c9:45:aa:85:ec:95:23:92:18:4f:cb:a6:89:33:93:
3f:ea:69:7c:88:40:20:7e:24:85:fd:55:1a:f9:36:02:25:47:
28:ee:f0:67:12:9b:2c:c1:e7:57:1d:9f:4f:e4:9b:71:c0:4c:
83:24:24:e9:62:5a:49:93:9a:72:63:18:59:89:2f:ef:04:1e:
b3:88:20:21:8f:3e:f9:e3:19:cd:7c:18:aa:6a:ae:cf:93:ef:
12:a2:69:0a:9b:52:59:a9:ae:e2:32:bd:1c:db:c8:07:5b:76:
80:47:6d:0b:9f:d3:5b:3e:d0:3e:1a:b8:b3:ee:89:ef:56:67:
17:ea:f4:26:66:18:e4:fb:d5:47:c6:e9:c0:aa:58:a4:c3:83:
10:57:9e:e1:6f:79:fa:93:6c:6e:c0:7b:a2:6e:bf:d2:a2:eb:
85:d3:23:0d:53:5a:88:c2:15:63:d8:0c:d8:22:ff:1d:82:c5:
c6:f6:79:06:8e:53:b2:17:a7:ec:9e:be:21:e6:8d:6e:9a:e2:
82:7d:97:7a:f5:06:d1:46:df:07:64:24:fe:28:6b:2d:da:59:
93:8a:21:1b:7e:46:9d:71:86:63:c3:99:fb:4b:0d:f9:3d:c7:
82:18:0a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:05:56 2026 by rpki-client