
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3897bbf7-b3d2-3cf2-8e7d-811e20bc7fc5.roa
File: 3897bbf7-b3d2-3cf2-8e7d-811e20bc7fc5.roa (raw, json)
Hash identifier: Z1pvXEcfrpu+TcOH5HV/iv4mE7IVBcbWxEmqYjnXhVM=
Subject key identifier: 82:67:32:DF:FF:D0:C7:AC:4C:8A:1B:41:A6:CE:DA:68:23:EF:50:2A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584E78FF8079451ADD07791F2600
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3897bbf7-b3d2-3cf2-8e7d-811e20bc7fc5.roa
Signing time: Sun 12 Jul 2026 09:00:11 +0000
ROA not before: Sun 12 Jul 2026 09:00:11 +0000
ROA not after: Sat 10 Oct 2026 09:00:11 +0000
asID: 11351
IP address blocks: 71.65.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:78:ff:80:79:45:1a:dd:07:79:1f:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Jul 12 09:00:11 2026 GMT
Not After : Oct 10 09:00:11 2026 GMT
Subject: CN=b637e509-5cd9-4823-84b1-288c48d2f69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:cd:d7:ce:20:d7:0d:3f:7b:42:c5:a7:08:
e7:de:08:71:3a:a1:54:08:39:c7:78:bf:18:4c:3b:
4e:71:14:8d:1f:e8:bd:26:62:eb:d6:52:a3:a9:7c:
99:f2:30:50:92:51:cd:57:eb:bc:d9:82:8c:07:d8:
41:75:34:8f:2b:cc:02:ef:d5:cd:2e:f0:c7:aa:26:
f4:b4:e7:84:6a:59:2f:52:36:45:e6:b3:e8:10:99:
5d:39:5c:86:0a:03:18:b0:e7:49:c0:8b:0b:f6:9a:
2a:e2:f9:3e:f3:19:c3:4c:29:f8:b6:f3:3b:4b:f5:
16:75:77:4b:1e:d8:a7:22:54:5f:01:9f:12:5e:cf:
76:49:f1:8d:f3:bf:54:a2:84:63:27:72:0d:f3:b3:
7a:0b:c2:e7:38:76:f0:47:76:7b:8d:f6:ad:00:94:
bb:1f:6c:ef:0e:d5:84:35:05:c6:b8:95:6d:bb:62:
6b:33:73:fa:fa:c8:f3:dc:9a:7f:29:4c:0d:f7:44:
ad:9e:5f:9e:25:f9:08:9a:f0:11:63:91:99:5e:8e:
6a:7c:eb:1c:5e:bb:06:fb:7d:55:dc:3e:35:08:4a:
49:b6:e6:23:04:c9:79:f8:1d:0d:a6:88:1a:02:ae:
ca:5c:f1:20:19:95:be:05:2b:5b:aa:4b:1a:dc:ae:
5b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:67:32:DF:FF:D0:C7:AC:4C:8A:1B:41:A6:CE:DA:68:23:EF:50:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3897bbf7-b3d2-3cf2-8e7d-811e20bc7fc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
71.65.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:bb:07:02:e6:e9:13:64:34:64:59:b5:0c:5a:43:1d:85:88:
91:fb:da:21:2b:84:6f:ef:26:c6:7a:8c:c7:33:b9:a0:45:24:
e8:0d:ba:99:53:82:a4:d2:4d:51:56:14:27:1b:9d:e2:03:7d:
64:74:d2:bc:bc:53:e9:5b:24:d3:5f:34:a6:d6:29:ab:a8:48:
10:35:ed:0e:c3:4b:94:a3:4d:5e:3b:e9:63:35:08:fe:e5:8b:
bf:5a:b7:80:b9:7f:20:ea:89:f1:13:46:48:ed:c6:cb:ea:cf:
6c:91:0a:88:ec:33:e7:84:b7:73:cd:fd:89:4f:0a:66:ce:a7:
4b:b7:d7:b8:21:9d:a1:a2:61:78:f3:eb:ab:ef:00:ed:f5:49:
1f:5d:7e:88:92:e2:a2:3a:33:c0:77:ea:b3:04:89:14:39:61:
28:6d:e0:68:ed:d2:6c:fd:97:da:77:21:48:a7:6f:f1:46:3e:
f1:d7:fc:4c:b1:20:f0:eb:b2:48:bc:cd:33:d6:39:bd:32:80:
eb:73:02:94:d3:5a:14:ba:b3:66:42:bd:64:de:8c:ae:17:7c:
8a:14:17:27:5b:59:6e:24:6c:f7:da:1e:a4:2b:d6:51:64:62:
5b:40:cc:40:bf:4e:e2:fe:cf:2f:ec:76:47:57:be:81:30:95:
c0:27:78:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/4B5RRrdB3kfJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk
YjYzN2U1MDktNWNkOS00ODIzLTg0YjEtMjg4YzQ4ZDJmNjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5rN184g1w0/e0LFpwjn3ghxOqFUCDnHeL8Y
TDtOcRSNH+i9JmLr1lKjqXyZ8jBQklHNV+u82YKMB9hBdTSPK8wC79XNLvDHqib0
tOeEalkvUjZF5rPoEJldOVyGCgMYsOdJwIsL9poq4vk+8xnDTCn4tvM7S/UWdXdL
HtinIlRfAZ8SXs92SfGN879UooRjJ3IN87N6C8LnOHbwR3Z7jfatAJS7H2zvDtWE
NQXGuJVtu2JrM3P6+sjz3Jp/KUwN90Stnl+eJfkImvARY5GZXo5qfOscXrsG+31V
3D41CEpJtuYjBMl5+B0NpogaAq7KXPEgGZW+BStbqksa3K5bBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIJnMt//0MesTIobQabO2mgj71AqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMzg5N2JiZjctYjNkMi0z
Y2YyLThlN2QtODExZTIwYmM3ZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR0EgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD27BwLm6RNkNGRZtQxaQx2FiJH72iErhG/vJsZ6jMczuaBFJOgNuplT
gqTSTVFWFCcbneIDfWR00ry8U+lbJNNfNKbWKauoSBA17Q7DS5SjTV476WM1CP7l
i79at4C5fyDqifETRkjtxsvqz2yRCojsM+eEt3PN/YlPCmbOp0u317ghnaGiYXjz
66vvAO31SR9dfoiS4qI6M8B36rMEiRQ5YSht4Gjt0mz9l9p3IUinb/FGPvHX/Eyx
IPDrski8zTPWOb0ygOtzApTTWhS6s2ZCvWTejK4XfIoUFydbWW4kbPfaHqQr1lFk
YltAzEC/TuL+zy/sdkdXvoEwlcAneGE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:19:56 2026 by rpki-client