
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3fd6507f-d7b1-37d5-8221-258d1a8197a5.roa
File: 3fd6507f-d7b1-37d5-8221-258d1a8197a5.roa (raw, json)
Hash identifier: Ak0CdCQMdQ/X2WDyL/VdDwdCxCMKKhqQhDGIjV4DzBY=
Subject key identifier: CB:13:E3:9D:53:9E:EF:14:52:86:4D:76:E0:6B:EC:B6:52:93:E3:92
Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial: 010D0C9F4328584EA795C6B70B8FC0C24A82A180
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3fd6507f-d7b1-37d5-8221-258d1a8197a5.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 834
IP address blocks: 172.84.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:95:c6:b7:0b:8f:c0:c2:4a:82:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=f92b3ac9-1d42-48c9-a3e9-32efeafc21fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:b5:2f:be:0f:7c:dc:1e:0a:7a:21:72:7e:
2b:b0:66:da:3c:31:fb:3a:00:10:76:a4:16:f7:fd:
51:1a:8c:98:05:91:49:db:fb:ab:04:c2:dd:d8:57:
15:3b:d3:8a:46:e5:b9:9d:b6:a2:ed:c9:14:2d:cc:
7e:f3:26:c7:d2:4d:a3:a0:89:a6:34:ec:ed:a6:b9:
1c:c2:94:30:25:33:d0:80:29:ef:7e:df:f2:ba:a3:
8e:8f:84:a4:6d:0f:81:a8:e4:40:0a:e9:09:9d:01:
ef:d6:20:7f:dc:6c:90:ee:77:46:e0:21:78:b8:dd:
13:2f:07:d9:50:f6:49:b9:70:6d:36:3e:d0:7a:b1:
2b:48:48:5b:84:a2:c2:70:e9:46:10:86:7b:eb:90:
04:c0:02:d5:a2:f5:82:cb:b0:13:9b:21:0b:00:03:
62:9c:da:2b:f8:bb:d2:fa:0e:e2:5f:83:d5:dc:49:
6d:6c:16:9d:4d:38:f1:c2:6e:f8:bb:15:21:56:32:
02:21:74:b2:7d:b5:28:31:c2:4f:ae:ac:0f:81:12:
3a:ba:37:4a:c1:fb:b6:80:53:1f:ba:f3:4d:a9:12:
e2:b7:43:b0:f5:ed:c4:08:1b:ef:c8:ad:65:1a:66:
9d:69:46:69:5f:ed:8e:56:7c:b1:66:3b:4f:56:84:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:13:E3:9D:53:9E:EF:14:52:86:4D:76:E0:6B:EC:B6:52:93:E3:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3fd6507f-d7b1-37d5-8221-258d1a8197a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
X509v3 Authority Key Identifier:
keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
sbgp-ipAddrBlock: critical
IPv4:
172.84.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:42:f2:03:ec:b1:7f:d1:bf:3e:ea:a5:c6:de:59:60:f9:4c:
03:6c:0e:8d:ab:ff:c9:3b:24:49:e0:49:ce:7c:79:f6:2a:03:
44:9b:08:51:1f:62:2b:20:c8:70:19:f2:dc:92:3b:9e:0d:9c:
11:9f:33:37:79:97:00:0b:3c:07:ff:f8:5b:d9:42:dc:b9:f1:
f9:8d:fc:1c:1b:aa:9e:6a:8b:17:0c:c4:2c:33:a7:f6:e8:49:
b4:a2:b4:b2:73:13:ed:84:dc:4e:f8:b3:0b:cb:cb:73:db:93:
05:f5:20:63:ac:db:cd:fc:b1:19:68:59:70:98:54:e9:34:eb:
4e:86:7b:bf:ce:ff:00:03:8d:43:8b:90:db:5b:ad:c8:25:7a:
79:a6:f5:c3:b5:b5:57:90:a4:a4:f1:46:48:b6:e8:e4:65:1e:
39:b0:cf:fb:bc:7d:7d:66:d8:3c:71:e4:aa:64:af:0c:fc:ec:
33:e2:ce:9e:c5:70:a9:ed:b6:b6:b3:a8:0a:d6:2c:b8:94:f5:
e4:80:eb:fd:b4:97:1d:26:a5:97:5b:ea:b5:1a:69:d5:f9:89:
ea:8c:ff:e9:ae:b2:28:66:9a:11:97:a8:9b:ba:a8:9a:49:dc:
b3:03:e8:a5:d2:02:e8:11:99:df:72:29:f3:0f:e8:33:7b:13:
1a:4d:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 06:52:22 2026 by rpki-client