
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa
File: a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa (raw, json)
Hash identifier: 6YAOoLKmt3616SOuEi4QVq3zjIK9P5uFNL+DxRib5Xg=
Subject key identifier: 43:4A:D1:7E:C0:FB:F7:1D:7A:2C:F4:E1:C9:49:C9:E2:B3:68:4F:47
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584EC0A74F2BCCD7BE3B120C6800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 33363
IP address blocks: 97.68.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:4f:2b:cc:d7:be:3b:12:0c:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=6c77bd9b-b818-473d-b9ae-27ff921c474f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:f2:55:a6:5e:5d:9c:4c:27:95:6e:8e:93:
5c:14:4b:fd:38:cb:03:0b:a8:72:92:0f:4c:a1:a1:
7a:a6:ba:ee:ba:4e:61:18:79:85:96:a0:c9:49:86:
15:e5:68:cb:fd:cb:c8:a7:a8:4f:83:d2:c5:13:af:
83:cf:bb:eb:46:5d:50:7c:70:e8:f0:86:41:f9:27:
5c:4c:7c:9b:6e:7e:45:46:8f:e6:9e:d2:0c:5e:df:
d2:3a:4a:25:35:28:7f:e5:62:29:a3:73:25:6e:f1:
f4:d0:ad:bc:ef:6a:88:8a:88:88:87:39:8c:ff:f2:
9b:5c:e9:4e:13:8f:c7:43:d1:f7:99:1c:5f:83:d7:
a7:86:75:b1:cc:d2:bb:18:80:29:36:a1:6c:9b:d4:
5f:af:45:af:de:fe:22:20:6c:a8:2f:bd:92:ac:8d:
44:4b:ad:56:10:b8:98:8e:db:4c:bb:92:a3:c5:b2:
2f:3d:05:a9:ba:35:a3:27:b9:cc:80:93:4d:82:77:
a8:3e:06:de:ca:8b:40:eb:1e:e8:2f:c2:fd:10:aa:
a7:2f:94:36:12:f2:63:40:6d:83:a5:dc:ec:c3:17:
7b:ae:05:8d:a5:57:72:f8:90:46:9e:31:72:6c:7c:
0d:a5:37:86:0f:3a:a4:b8:00:22:56:62:71:eb:fa:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4A:D1:7E:C0:FB:F7:1D:7A:2C:F4:E1:C9:49:C9:E2:B3:68:4F:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
97.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:63:89:d9:9a:6c:d5:1b:43:5a:dc:95:2d:3d:0b:d2:5b:cc:
07:5c:b3:eb:0c:c2:31:20:67:53:68:3b:dd:01:b7:96:f9:f8:
da:e9:93:66:d2:60:3e:96:19:b9:c6:77:04:ff:50:e9:d7:9d:
f0:68:8f:55:50:6a:0c:20:a8:9f:58:04:fb:8e:45:91:06:33:
8a:2f:a2:c5:58:9a:d8:cf:31:3a:c6:fe:8e:b2:0c:35:63:11:
e0:04:c5:df:a5:d0:92:5b:17:15:62:bc:a8:86:d4:0c:42:f2:
b4:fb:c2:bf:95:84:9f:c9:d2:d7:80:f8:42:3d:64:39:df:ed:
bb:91:82:c1:d2:41:a0:6c:88:cb:00:8f:f3:3f:50:00:80:ef:
1a:e8:e1:c8:7a:9d:95:dc:aa:c0:86:ca:ae:16:65:70:d4:83:
31:c8:36:96:8f:36:9c:c1:b6:96:76:6d:87:0a:f2:1e:98:10:
2c:25:1c:4f:cc:d8:4d:ce:b0:ef:c9:bc:55:df:1b:5a:b8:3b:
2e:a8:2d:2d:05:96:61:d7:8c:39:b1:fc:8c:ff:c8:38:1c:26:
53:9a:c2:da:5c:3f:d2:66:52:da:c8:ca:25:3c:da:e6:52:ee:
89:12:49:ec:ef:f4:b0:65:32:6d:55:73:b7:9f:d3:64:10:95:
5c:ba:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:42:26 2026 by rpki-client