
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52dc00cd-f147-37eb-85da-705a21518dd7.roa
File: 52dc00cd-f147-37eb-85da-705a21518dd7.roa (raw, json)
Hash identifier: JCHFfmTokhJhtOlDo38pO8tFhqqqL2gTzJt/kMG4/y4=
Subject key identifier: 06:6E:57:42:83:1D:98:A4:76:7A:B1:08:71:F6:5C:1F:FC:24:F1:82
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584EA7972EFF9894F71CE03C3400
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52dc00cd-f147-37eb-85da-705a21518dd7.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 852
IP address blocks: 209.171.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 01 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:2e:ff:98:94:f7:1c:e0:3c:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=2665fa31-0086-44a0-a448-fdcb9220f843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:c8:14:54:72:43:31:29:92:d1:27:d6:89:
ed:26:bd:f4:74:c3:46:cb:0e:7e:43:10:14:b9:14:
c1:96:e3:8f:0a:e6:c0:b4:31:85:24:aa:55:1d:d2:
4a:e9:d6:b2:77:ee:88:0c:11:ef:80:0a:be:8d:20:
a2:40:5a:37:8c:07:47:f8:e4:d6:8a:42:39:d7:9d:
ab:f0:47:96:36:56:31:cd:4f:cb:57:17:63:76:0a:
82:0c:45:5f:b5:1b:5f:99:36:e3:2e:a4:3c:ad:14:
28:8f:12:a3:11:ca:08:e7:18:3d:a5:b9:ef:a2:a8:
bd:15:ef:c1:75:ea:c9:83:b0:32:da:c1:47:35:c4:
cd:44:fa:3b:29:a1:cf:ee:70:d6:16:3b:82:0f:d6:
05:3f:a6:38:8b:33:66:32:3d:ae:d5:af:42:8e:3e:
8c:85:67:e8:14:20:ef:3a:d9:7b:e7:ae:fd:a4:3d:
df:07:8d:2f:d3:70:77:2b:3c:ba:0e:c5:85:ef:16:
bc:c2:3b:a8:e0:11:38:15:08:20:ab:e4:52:db:6f:
2e:89:ae:af:0b:15:9a:b0:7d:7c:7a:cf:0e:b0:30:
dc:8c:4a:61:4d:3d:8b:ed:3c:22:2c:5c:67:7f:af:
b8:ea:44:4a:a0:ef:a5:22:f3:d2:1e:90:88:85:40:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6E:57:42:83:1D:98:A4:76:7A:B1:08:71:F6:5C:1F:FC:24:F1:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52dc00cd-f147-37eb-85da-705a21518dd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.171.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:53:d8:7e:d0:8e:06:f4:de:db:1d:c9:77:50:6e:e3:7c:cc:
ca:b8:7c:23:5a:23:da:05:c5:75:b9:48:f7:75:6e:ff:49:39:
b4:2e:64:4f:8a:80:52:2a:03:61:f9:2a:9f:62:8d:90:8e:00:
f6:22:dd:8f:3e:db:5b:6c:7f:05:10:dc:16:07:42:dd:18:68:
38:aa:1c:3c:4a:40:37:d5:39:1b:b2:fe:9e:74:e7:38:1e:f2:
de:a2:b5:e4:96:45:2b:94:f6:0c:69:34:0b:a6:35:47:c7:85:
7b:c3:a3:e2:e0:7d:82:6c:48:13:45:7b:af:29:50:86:c1:1f:
0c:f4:47:ab:85:e0:0b:77:22:5b:55:e7:28:25:ba:4e:82:67:
67:d4:fc:3b:b5:fe:cf:74:26:1b:67:df:b5:ca:31:b9:b9:a3:
f6:08:ea:2a:8e:af:dd:8d:ea:ba:7c:d2:3f:48:17:22:4f:ed:
60:0c:03:08:ab:48:90:89:6a:bf:43:83:a2:4c:eb:c3:5a:78:
f3:44:cd:57:6a:1b:2e:dd:37:c3:91:0b:61:af:e5:a5:2e:1e:
1f:1e:3d:ca:fa:4c:aa:2a:cd:a9:e7:81:bf:5c:7a:ca:27:47:
59:83:fc:49:6b:05:b8:a5:dc:97:90:e0:39:4a:a0:96:20:64:
a3:59:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 08:43:19 2026 by rpki-client