
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/70500725-1d16-3314-af46-dc1cac6e83b3.roa
File: 70500725-1d16-3314-af46-dc1cac6e83b3.roa (raw, json)
Hash identifier: LBO0xA7lF880hM4WYrBRjf0Tbs4IrELOzRtoiputmzE=
Subject key identifier: 73:02:A1:86:50:83:2E:8E:B3:9D:51:42:5F:6D:B8:B1:F9:5C:A1:23
Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec
Certificate serial: 010D0C9F4328584E4C54B0B2EC8E2CE66CE73180
Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/70500725-1d16-3314-af46-dc1cac6e83b3.roa
Signing time: Fri 26 Jun 2026 09:00:12 +0000
ROA not before: Fri 26 Jun 2026 09:00:12 +0000
ROA not after: Thu 24 Sep 2026 09:00:12 +0000
asID: 400967
IP address blocks: 45.42.172.0/23 maxlen: 24
45.42.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 07 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4c:54:b0:b2:ec:8e:2c:e6:6c:e7:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec
Validity
Not Before: Jun 26 09:00:12 2026 GMT
Not After : Sep 24 09:00:12 2026 GMT
Subject: CN=d7087b8c-73c5-4324-a182-12696dc889cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:9d:96:a0:02:89:24:72:ee:7a:9b:1d:3f:
02:ee:23:ff:59:f8:a0:49:b1:95:ab:5c:a0:78:8f:
31:15:e4:ce:4a:38:74:6c:af:26:c8:41:8f:99:2a:
1a:ed:27:70:c6:7f:9d:a1:fb:5c:41:b5:53:75:46:
38:8c:33:51:0e:33:31:de:46:a8:ef:40:f6:01:bb:
be:ff:3c:2a:c6:10:19:51:33:6b:01:72:e9:d2:4c:
79:8f:1a:cc:cb:d6:9a:ad:b4:aa:12:1e:a3:42:2a:
da:cf:41:be:45:09:eb:25:dd:16:82:83:7c:96:14:
23:98:3a:f3:0f:6a:48:06:f8:e2:27:9e:89:ea:26:
74:40:fe:45:8c:91:ca:ea:20:ef:ee:b6:fe:c3:da:
b4:a3:36:d6:d7:24:e4:e4:39:ce:c1:e5:2c:91:f5:
41:c6:44:cd:a7:e0:74:3a:2f:db:59:7b:7d:6a:aa:
0a:de:88:1c:28:d3:d7:48:8f:9b:8f:3c:8d:2f:c7:
a3:eb:ff:04:03:ed:0d:51:b8:0b:19:ec:15:9f:fe:
d5:58:73:7d:16:c1:c0:64:17:60:5e:6f:39:ee:44:
a7:c0:16:2d:a9:d9:93:73:c3:0d:ea:71:4b:bb:13:
9e:a1:c4:19:a4:43:81:2a:4a:e0:03:84:7a:a9:37:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:A1:86:50:83:2E:8E:B3:9D:51:42:5F:6D:B8:B1:F9:5C:A1:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/70500725-1d16-3314-af46-dc1cac6e83b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl
X509v3 Authority Key Identifier:
keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.172.0-45.42.174.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:68:14:c4:b1:39:c6:4e:c7:6f:7f:e3:b6:97:ac:d9:96:57:
83:10:95:7a:cb:bc:30:dc:91:e8:5b:e3:71:67:59:e2:99:35:
97:9d:df:f3:6f:95:31:08:34:73:f8:75:a9:4c:c2:d4:a9:ae:
55:93:fc:7e:38:34:31:c2:08:69:19:69:9e:90:15:04:4b:dd:
84:b8:b8:e3:ea:d0:c4:e5:3d:03:8e:73:b0:59:73:82:d6:80:
f5:8d:87:0d:9f:a9:a3:4a:95:7a:36:4f:9e:ff:77:fa:fb:35:
b2:ca:4b:38:f4:e2:cd:11:de:2d:8e:9f:bc:3a:bc:d2:c5:cb:
4e:d5:b7:58:a2:61:36:26:96:02:b2:94:13:f8:4b:8f:d5:b2:
0d:21:db:00:bb:d8:a4:b1:87:e5:13:53:50:12:0a:de:da:2d:
52:df:eb:e8:da:a5:d4:46:50:45:6e:6b:39:1e:cf:78:78:9a:
5b:2c:bf:e5:37:57:e4:b4:1e:af:6d:5f:2b:e1:96:39:6a:8a:
4a:a2:45:52:c6:c7:04:e5:eb:c5:f4:80:f0:70:a4:14:4d:db:
cb:18:06:3a:32:76:36:70:f5:1f:80:9e:86:00:0b:92:aa:d7:
e1:dd:29:68:9c:ff:1d:79:99:75:23:bd:12:5d:73:c2:17:0f:
7c:de:d1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:37:44 2026 by rpki-client