
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d8b1e428-dd9f-3495-b471-740b0fab423f.roa
File: d8b1e428-dd9f-3495-b471-740b0fab423f.roa (raw, json)
Hash identifier: yH8dk9jtvHp1Co7P3RePSnkN6yZPs3NcSjZ8VI8Ru7Y=
Subject key identifier: 3A:6E:98:0E:19:F8:68:EB:7D:CE:75:37:F2:BE:0B:C3:32:AE:5E:49
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F4328584EA79452B08EE44A43770E6600
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d8b1e428-dd9f-3495-b471-740b0fab423f.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 834
IP address blocks: 72.9.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:94:52:b0:8e:e4:4a:43:77:0e:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=f35c9d32-6b77-4c8d-8736-b3ed4c0893c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:ae:8c:90:1c:7d:87:83:c9:fc:05:6c:2a:
ff:f7:e9:44:cc:c4:fe:b2:2b:2c:68:8a:92:39:ab:
27:a1:65:6b:cc:22:76:d8:fe:d5:62:9d:35:a9:17:
8b:3f:37:e4:e7:a6:6f:3c:40:23:11:cb:d2:e5:8d:
d9:86:4e:93:bb:cb:30:08:9a:54:02:ec:a1:65:e4:
2a:a8:ae:73:eb:49:3b:8d:fc:77:b8:e8:0a:22:60:
45:07:01:7e:8c:7c:57:a7:21:df:56:95:b1:23:4f:
0b:08:c0:33:73:89:80:4e:59:38:4b:a5:40:9d:16:
a4:ed:f9:17:f5:66:ab:0f:a5:e5:17:31:14:56:e3:
bb:69:49:f2:8d:40:ae:07:f8:68:48:99:0a:ba:d1:
5d:48:a4:61:44:52:b2:2c:d1:99:fc:04:b5:78:40:
da:ec:5a:86:9d:64:c4:a8:d9:9e:2c:7a:8c:6a:ff:
4c:2c:dc:19:c6:38:9e:6a:59:73:38:67:c1:7b:46:
86:24:12:45:3c:2f:89:67:8c:1f:77:c3:84:c2:95:
c8:04:51:79:b5:6d:3d:62:27:bf:51:42:61:09:59:
f7:44:ea:74:b5:c4:0a:d1:ab:ce:da:4c:14:2c:22:
33:b4:fa:56:1b:d4:7d:38:51:af:ed:e9:3d:01:3c:
41:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6E:98:0E:19:F8:68:EB:7D:CE:75:37:F2:BE:0B:C3:32:AE:5E:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d8b1e428-dd9f-3495-b471-740b0fab423f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
72.9.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:ce:f6:ff:fc:a9:cd:a9:2f:13:53:0d:6a:9c:d5:f9:cb:7b:
f4:b6:08:3f:70:be:20:b5:a8:ee:a5:df:91:38:de:c6:bd:b8:
78:ea:eb:a6:4f:50:e6:b4:60:ef:a0:29:28:68:41:4e:fd:d4:
ed:25:36:d6:23:a9:1e:8c:21:0c:39:84:63:e1:4e:88:a8:16:
fe:f6:f9:af:76:83:0f:e1:ea:10:9c:e5:b0:36:2e:b4:18:8c:
7c:52:45:14:4f:3e:0e:fc:86:78:b6:69:c9:ba:f1:6b:95:bb:
23:8d:da:c5:a2:3d:9d:da:7e:5f:35:88:ca:26:f2:8f:c4:fc:
b3:7d:d5:9c:b7:98:47:56:f9:8c:fd:87:c0:d6:c7:fa:be:53:
ac:7d:20:d5:1d:30:13:7f:69:c9:72:0e:d8:60:74:32:83:9f:
81:6f:8d:4b:b1:03:05:d4:a1:ba:d4:59:7e:13:39:de:f8:3a:
47:47:76:a7:e3:b2:fc:d5:d8:1e:bd:50:3e:0c:9e:09:25:cd:
9c:29:7d:6c:c9:96:ef:d0:95:f7:ac:43:52:82:09:21:6e:3b:
18:cc:6b:e9:5d:59:64:9c:6f:48:a3:df:41:36:0a:ca:58:85:
0e:92:38:00:8c:69:a2:9a:c5:cf:8c:ab:79:53:0f:a4:b4:97:
0d:1b:62:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlFKwjuRKQ3cOZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjM1YzlkMzItNmI3Ny00YzhkLTg3MzYtYjNlZDRjMDg5M2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2KujJAcfYeDyfwFbCr/9+lEzMT+sissaIqS
OasnoWVrzCJ22P7VYp01qReLPzfk56ZvPEAjEcvS5Y3Zhk6Tu8swCJpUAuyhZeQq
qK5z60k7jfx3uOgKImBFBwF+jHxXpyHfVpWxI08LCMAzc4mATlk4S6VAnRak7fkX
9WarD6XlFzEUVuO7aUnyjUCuB/hoSJkKutFdSKRhRFKyLNGZ/AS1eEDa7FqGnWTE
qNmeLHqMav9MLNwZxjieallzOGfBe0aGJBJFPC+JZ4wfd8OEwpXIBFF5tW09Yie/
UUJhCVn3ROp0tcQK0avO2kwULCIztPpWG9R9OFGv7ek9ATxBSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDpumA4Z+Gjrfc51N/K+C8Myrl5JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZDhiMWU0MjgtZGQ5Zi0z
NDk1LWI0NzEtNzQwYjBmYWI0MjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAn3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzO9v/8qc2pLxNTDWqc1fnLe/S2CD9wviC1qO6l35E43sa9uHjq66ZP
UOa0YO+gKShoQU791O0lNtYjqR6MIQw5hGPhToioFv72+a92gw/h6hCc5bA2LrQY
jHxSRRRPPg78hni2acm68WuVuyON2sWiPZ3afl81iMom8o/E/LN91Zy3mEdW+Yz9
h8DWx/q+U6x9INUdMBN/aclyDthgdDKDn4FvjUuxAwXUobrUWX4TOd74OkdHdqfj
svzV2B69UD4MngklzZwpfWzJlu/QlfesQ1KCCSFuOxjMa+ldWWScb0ij30E2CspY
hQ6SOACMaaKaxc+Mq3lTD6S0lw0bYoA=
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:26:20 2026 by rpki-client