
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/73be8573-d1ea-397e-a168-f5f7d625c273.roa
File: 73be8573-d1ea-397e-a168-f5f7d625c273.roa (raw, json)
Hash identifier: OFaR78GKZDqH11LGrLwjwl1yMReLpdapuWuiw6xoWZY=
Subject key identifier: 71:B6:37:A4:AD:54:D3:1B:B3:B4:39:64:57:6E:8F:0D:36:9C:F4:5D
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F4328584E6B0A1E3E7F24AE3CCFFCE480
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/73be8573-d1ea-397e-a168-f5f7d625c273.roa
Signing time: Tue 07 Jul 2026 09:00:12 +0000
ROA not before: Tue 07 Jul 2026 09:00:12 +0000
ROA not after: Mon 05 Oct 2026 09:00:12 +0000
asID: 395382
IP address blocks: 162.248.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6b:0a:1e:3e:7f:24:ae:3c:cf:fc:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Jul 7 09:00:12 2026 GMT
Not After : Oct 5 09:00:12 2026 GMT
Subject: CN=fc392da3-8b4c-4dd6-9921-4700b49771d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:b9:0b:06:0a:3a:b8:a3:7e:f9:b9:ea:da:
a3:23:f5:10:c0:4b:18:da:28:71:c0:e0:e0:9b:19:
07:c3:c8:50:b9:37:17:8a:04:d7:88:3d:60:cc:d6:
b4:49:c4:26:c4:52:b7:a9:71:73:71:8e:72:ed:6d:
f9:7c:bd:81:9e:c0:64:39:28:b1:34:8a:9f:bf:d7:
c2:b8:6e:65:47:0d:82:d8:2d:2f:e3:c2:ca:39:bb:
71:e5:ac:49:6d:ba:ba:ed:9d:1a:b8:0a:f2:c2:2c:
5a:8d:cf:d2:a1:69:62:a7:3a:50:88:7a:30:42:82:
7e:e2:3f:cb:b9:4b:2d:4f:0f:64:a5:2a:f1:62:35:
63:75:1a:f9:e5:12:b1:4d:5e:8c:fb:ed:1a:8a:2d:
d3:5d:8d:72:64:5f:71:57:4f:17:29:85:a1:e8:51:
44:6d:7e:25:d7:61:2a:8e:bd:63:7f:92:53:bf:64:
68:91:4d:aa:0c:fc:5e:7f:70:68:64:b6:50:91:85:
52:0d:7b:1a:17:ce:df:0c:2a:32:3f:58:87:5f:7d:
5c:44:36:11:81:7f:65:1c:93:32:92:68:2b:2b:e7:
bb:cc:e6:b9:fa:bc:06:8f:0a:41:8c:fc:fb:46:dd:
f2:38:b2:63:73:d1:a9:a1:c2:20:b7:e8:48:b3:e0:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B6:37:A4:AD:54:D3:1B:B3:B4:39:64:57:6E:8F:0D:36:9C:F4:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/73be8573-d1ea-397e-a168-f5f7d625c273.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
162.248.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:4c:51:34:ba:8c:8d:b9:ac:f7:4a:f3:3d:4c:75:d8:4c:20:
5a:9d:c6:09:78:4d:a2:bd:55:1d:a7:09:fd:4a:48:42:c8:94:
97:4b:09:c3:58:b5:08:97:53:1d:2d:ca:de:1b:63:25:8c:b3:
17:bb:38:58:90:31:5f:7b:b3:d6:8c:48:83:67:a3:da:12:fa:
b5:e2:c5:f6:16:ce:f7:e8:24:47:fc:07:8b:75:73:7a:dc:ed:
b3:e8:fe:02:a0:32:9c:fc:54:b9:7f:21:03:20:12:28:7b:ac:
48:1e:4f:3a:2a:74:14:32:d0:48:e6:14:5e:7e:28:56:95:54:
d9:a1:7d:43:08:83:8f:cf:02:dd:65:19:3c:a5:05:3d:d5:3d:
80:47:36:04:10:16:23:c0:ae:25:32:a6:77:3c:52:75:14:4d:
e5:e6:ce:d4:98:aa:ce:6a:6f:83:a0:f4:0c:ed:30:a1:33:69:
f6:f5:be:19:c3:a4:b1:8d:fd:e5:f2:ef:5a:1a:cd:76:96:15:
03:5f:82:7f:f9:1f:a4:fe:7c:82:f7:e8:2c:ac:12:96:ff:68:
f7:8e:08:d5:bd:93:43:ae:b6:d5:4e:b5:a8:32:75:6b:3b:7f:
99:98:b4:84:5a:f8:cb:b9:51:01:e3:1d:4b:c5:95:a0:c9:01:
ed:ca:d2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:09:11 2026 by rpki-client