
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/007f1617-e313-3e2f-97b8-0dcc7c385c83.roa
File: 007f1617-e313-3e2f-97b8-0dcc7c385c83.roa (raw, json)
Hash identifier: iwOnphR6VegjEmP9RgoO+8iMUrlbbolhNca4sZpDI2w=
Subject key identifier: B7:A2:37:97:4F:CE:B8:F1:E0:46:A9:6C:CA:2D:8C:B6:EE:8E:1F:DD
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584D1B1A1482471EC3FA0AE28F80
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/007f1617-e313-3e2f-97b8-0dcc7c385c83.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 11090
IP address blocks: 72.35.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:14:82:47:1e:c3:fa:0a:e2:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=7d76a100-7e53-4170-8dc3-5a0f663faa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:fe:9b:1b:33:1d:0b:8b:f4:2c:f5:0b:5b:
f4:6c:d4:37:ec:19:bb:64:07:7b:db:25:28:38:9b:
53:75:f1:18:3e:6c:b4:7b:1c:da:1c:36:6b:f6:80:
af:a2:14:4b:ad:1e:fa:4d:99:ff:dd:d6:33:6f:42:
47:f4:cf:70:f5:57:89:dd:60:8b:8b:12:c3:4e:f5:
42:b2:7b:95:bb:c5:36:1b:ef:91:45:2b:b2:2b:02:
17:47:82:18:bb:38:22:ee:0e:a0:45:91:a0:69:7c:
a3:14:74:f8:e6:3e:5f:5f:c2:3a:93:ff:54:81:a4:
8c:78:9e:9b:a0:6a:0f:5c:89:e8:81:4a:18:fd:ca:
1f:8d:16:8b:74:81:87:61:54:d1:48:00:ee:7c:a8:
a3:9f:2f:6b:c6:a2:c5:0e:86:5c:6d:a5:60:cc:06:
8e:4d:f6:1f:85:95:1d:d3:bc:e8:88:79:79:0a:93:
82:fa:ec:3b:eb:b1:94:f7:20:63:e3:b5:4d:9a:6d:
54:50:73:09:6f:31:7f:7b:36:bc:0d:0c:2d:69:32:
fe:36:70:f5:46:2d:a3:96:90:8b:ff:99:29:30:7c:
a5:9a:c8:b6:88:3b:a7:89:dd:c6:46:76:00:19:e0:
6a:9f:41:07:a6:3a:c7:d4:12:68:59:3c:79:4c:d0:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A2:37:97:4F:CE:B8:F1:E0:46:A9:6C:CA:2D:8C:B6:EE:8E:1F:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/007f1617-e313-3e2f-97b8-0dcc7c385c83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
72.35.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:3a:31:1a:4d:68:d7:44:d1:6c:ee:6a:e2:15:99:07:3a:a6:
30:cd:b1:17:ae:4a:7d:67:68:c3:bd:07:6c:5e:1f:13:65:67:
01:82:d4:15:41:3c:86:55:50:ad:5c:be:6c:d0:cc:ee:c5:c8:
b5:03:98:49:86:cb:94:18:92:21:1e:7f:36:81:13:05:04:7b:
50:db:a4:19:15:4d:14:a5:66:4f:a1:2d:ff:85:ec:f8:47:12:
96:67:7f:5f:1c:91:ae:b0:6c:e6:81:55:3a:80:42:f0:6e:8c:
02:c8:c4:cc:95:e3:6d:3b:22:0d:c5:8b:a6:77:e6:bd:66:2d:
ab:55:36:cd:aa:4f:e8:f6:0c:69:e3:c3:27:69:e5:aa:a5:61:
6c:47:2f:2b:0a:be:9e:a4:4c:48:57:bd:6d:44:7b:6f:cb:e6:
52:1f:fa:43:53:84:d1:c9:d3:8d:36:e1:f6:88:b2:48:23:91:
cd:a4:56:64:d6:a2:7c:94:ba:3b:e0:e5:0b:f1:79:0f:66:88:
f9:be:09:91:ad:5e:1b:a7:8e:d4:75:2a:83:38:7a:a3:8a:56:
05:f0:0d:3a:db:ab:cc:c2:3a:1c:3c:a3:80:21:50:cd:d5:97:
c6:61:7b:77:a0:48:12:81:bb:54:a0:62:57:56:9a:32:9e:e9:
50:0e:31:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:53:03 2026 by rpki-client