
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa
File: 3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa (raw, json)
Hash identifier: FPTMuKHExxrmnfrS6Lxi6bXSF9qFjMmkOz9SbvKX73o=
Subject key identifier: D2:92:D7:B1:E9:2C:00:11:25:F4:2E:46:5E:F1:F1:44:DF:32:DF:CB
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584E4129DB9EB10AAE32F39F5B00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa
Signing time: Mon 22 Jun 2026 09:00:11 +0000
ROA not before: Mon 22 Jun 2026 09:00:11 +0000
ROA not after: Sun 20 Sep 2026 09:00:11 +0000
asID: 9009
IP address blocks: 172.94.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:41:29:db:9e:b1:0a:ae:32:f3:9f:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jun 22 09:00:11 2026 GMT
Not After : Sep 20 09:00:11 2026 GMT
Subject: CN=d650188b-fe54-42c6-895e-51962e7b5c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:12:3f:fe:fc:4d:09:e5:56:fe:90:35:21:61:
fb:57:c8:19:e4:72:87:24:3f:a7:ab:97:27:01:52:
af:82:a6:a5:ce:38:95:76:99:15:24:93:f4:5e:47:
39:d1:11:9a:39:60:39:0a:46:8a:b7:96:3e:25:85:
67:eb:74:28:c0:0f:b5:6d:57:60:d8:34:e0:1f:d6:
e4:df:a9:71:aa:48:4b:4b:40:c9:43:16:63:0a:80:
98:f1:be:88:30:05:6d:6b:90:77:b5:2e:c1:23:a9:
cd:28:86:09:88:1f:81:15:b6:4e:0d:25:ee:13:a5:
b0:27:dc:ee:6b:53:ed:3c:2a:43:a7:20:cf:24:19:
fd:99:d5:bb:e5:8f:32:bb:48:93:a6:ca:df:41:8e:
ce:a4:20:da:ed:8c:b3:f9:d9:6d:9b:68:36:88:3f:
19:50:a8:45:89:dd:cb:ce:7f:0b:a6:b4:90:df:bf:
1e:81:cb:d6:d4:6b:f3:91:88:63:78:3e:c0:85:12:
ee:d9:15:1e:08:bf:90:86:40:43:d3:19:70:45:ab:
10:f6:1c:0f:b9:80:2e:56:24:3b:52:ad:11:11:8f:
7a:6f:76:27:69:af:0f:3c:79:f1:1d:17:8b:bc:a1:
46:95:ce:94:66:be:86:a9:2b:5e:4a:74:e4:d5:fb:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:92:D7:B1:E9:2C:00:11:25:F4:2E:46:5E:F1:F1:44:DF:32:DF:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:f5:8f:fd:92:10:48:d6:b0:85:e2:25:8b:b5:48:13:f0:b3:
44:49:df:8b:77:9a:df:4a:c3:5e:9b:a8:1e:1c:5a:3d:b4:fe:
e2:cc:a6:eb:73:5c:3d:eb:c9:32:87:c1:1e:37:e4:1f:92:22:
d2:38:48:65:79:fc:00:be:a9:0c:6c:a0:3b:87:85:f1:3c:13:
21:c4:69:b8:43:75:ee:5b:7b:82:f9:de:f3:e0:e8:71:c3:c7:
c8:b3:d2:9e:6d:2d:29:1c:b4:ca:e8:a5:64:7e:d1:bf:f8:0c:
2c:ea:e9:78:74:8c:19:29:b2:cd:f1:d2:43:66:77:f6:ae:b1:
16:c7:d7:13:86:24:2e:81:15:a4:2d:1b:59:e0:ac:34:53:fa:
cb:ff:d7:fa:23:07:19:fb:a2:08:70:e2:10:e0:62:ac:97:25:
32:80:78:74:ab:15:08:a3:b5:95:85:f0:35:06:5c:82:f5:e0:
17:52:90:f9:85:04:fa:b4:f7:8e:c0:0c:47:f2:21:90:c7:f2:
80:7a:e8:19:74:a9:28:c9:8c:5c:53:7e:b2:c2:48:23:f6:80:
c1:40:b1:7e:8c:4f:a4:83:29:69:ce:a5:3e:02:19:11:a6:a2:
d7:83:40:9c:98:98:8c:9a:9a:3f:0d:26:a5:29:77:e2:a4:e4:
1f:0a:88:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:56:57 2026 by rpki-client