
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10ce5a68-25ea-3908-a5a8-13bbd9e1942a.roa
File: 10ce5a68-25ea-3908-a5a8-13bbd9e1942a.roa (raw, json)
Hash identifier: +b/nkdsGI+1i0v9b1NSNpoY0Ys/gvm3qBsyovecPIx8=
Subject key identifier: 5C:84:C2:6E:25:21:14:97:81:4E:71:AE:7E:4D:3B:C9:A6:BA:ED:5C
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584EC0A74AFA6F40EF6279EE1C00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10ce5a68-25ea-3908-a5a8-13bbd9e1942a.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 33363
IP address blocks: 72.31.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:4a:fa:6f:40:ef:62:79:ee:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=d5078a27-7a9d-49d2-8d0b-0bf8fbb40fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:39:56:e2:d3:5a:85:85:bf:a3:7f:2b:55:
e4:74:a4:aa:f0:2f:9b:c4:08:0f:85:58:78:3b:f8:
cf:28:9f:4e:c7:30:10:f6:fc:5d:4d:e8:d9:eb:7e:
0d:52:1f:4c:6c:a7:f2:be:ab:46:b8:a4:48:dd:37:
d2:9e:84:06:41:01:b9:b8:dc:40:e3:bf:32:3f:40:
a1:3a:50:47:51:58:e8:0f:b8:00:42:d5:01:f3:f5:
29:ea:9e:6d:03:da:4d:29:28:5e:7f:3b:d5:91:bf:
5f:4a:4a:79:cb:ff:f2:88:44:c6:5b:d8:ac:51:24:
9a:7a:c6:0c:62:84:9a:75:f0:38:9d:cc:da:71:0a:
fe:35:d6:bc:9f:3e:99:b7:0d:0a:62:75:cb:a3:ab:
2a:95:cf:c1:35:fe:c4:3c:cd:9f:4c:0a:38:1f:71:
24:f4:0f:8f:c4:67:76:0b:c4:3c:14:85:85:3d:0b:
eb:8b:27:a2:d4:4e:d9:db:6d:78:07:1c:5f:95:3d:
de:2d:dd:fa:46:83:94:68:95:b6:60:2c:71:68:f3:
e5:30:1e:34:e9:0c:e3:62:14:2c:56:f4:48:f2:e2:
6b:12:49:aa:94:6d:74:ad:f1:98:5f:28:e3:5b:77:
83:d2:ed:8a:6c:0f:0f:64:55:2c:64:1f:9b:ff:d0:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:84:C2:6E:25:21:14:97:81:4E:71:AE:7E:4D:3B:C9:A6:BA:ED:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10ce5a68-25ea-3908-a5a8-13bbd9e1942a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:c9:ab:1f:4a:7d:a7:f2:f0:1a:33:80:38:d5:62:a6:cd:48:
43:0f:b4:e7:1a:7f:b7:01:07:91:e9:8b:49:84:83:69:0c:2a:
de:e6:64:cd:55:d2:08:33:8c:c9:91:23:45:70:68:9a:0d:2c:
c0:f0:06:6c:c3:ce:bc:9c:3e:fe:52:5b:67:bb:99:7d:50:98:
1a:49:05:20:8b:8c:fd:82:e6:f0:38:b2:e7:2d:bb:80:9d:db:
ab:ba:6c:1a:37:6c:1c:66:64:d2:53:89:c1:4b:8c:b5:0e:18:
37:8b:ad:c3:65:e2:21:4b:0a:f2:41:e5:aa:6e:ad:b1:d6:15:
ad:30:a6:e1:e4:80:f9:16:40:5b:55:80:8b:d1:ed:dd:de:be:
3e:50:b4:d7:19:3b:ef:81:0d:82:9a:30:cb:77:0a:88:2c:3f:
66:ff:c1:b2:c0:ba:bf:35:cb:1e:87:b6:ab:7c:3a:1b:c1:d6:
74:1d:dc:10:12:40:ad:f1:85:77:28:57:16:1d:31:e0:34:6b:
bb:3d:82:ec:b2:bf:19:10:36:f2:6b:70:d9:89:e5:cc:cf:bd:
20:49:5c:53:aa:29:17:9d:fc:97:7f:26:8d:ab:9b:29:88:f2:
41:5a:53:5d:d7:fa:24:80:3f:40:32:5c:b3:b6:37:52:66:a9:
49:19:78:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:03:25 2026 by rpki-client