
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b3a2dc4a-cebf-325d-ab5b-8f0e65395b7b.roa
File: b3a2dc4a-cebf-325d-ab5b-8f0e65395b7b.roa (raw, json)
Hash identifier: mxviCFfNo9Wel5pzOoV7P93oXxjSuZFLs4sO6kwRBXY=
Subject key identifier: D4:3E:DC:5F:A7:F7:80:96:ED:3C:FF:D7:AE:43:D3:21:7E:33:DD:24
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584E86F50B2C24F068E1E3F51E60
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b3a2dc4a-cebf-325d-ab5b-8f0e65395b7b.roa
Signing time: Fri 17 Jul 2026 09:00:14 +0000
ROA not before: Fri 17 Jul 2026 09:00:14 +0000
ROA not after: Thu 15 Oct 2026 09:00:14 +0000
asID: 5650
IP address blocks: 72.244.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:86:f5:0b:2c:24:f0:68:e1:e3:f5:1e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jul 17 09:00:14 2026 GMT
Not After : Oct 15 09:00:14 2026 GMT
Subject: CN=5ae579f1-5935-4b32-8ea6-57bd0de66ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:c2:ac:af:0d:f3:2f:ef:1e:9e:be:65:df:
ca:a3:50:1e:50:99:e3:af:ef:9f:cf:74:37:49:b8:
21:f2:fd:05:25:f7:b4:2b:00:43:e3:25:44:87:08:
46:5f:5e:8a:94:7b:03:61:73:e5:75:98:cf:e1:14:
82:29:23:5a:8a:f9:38:8e:df:83:5a:05:c9:b0:aa:
88:4a:ce:2f:46:24:f4:78:15:4c:a6:42:5d:f3:2b:
bd:c6:e9:52:bf:8e:50:17:7d:34:71:2f:75:f4:98:
d2:26:d2:a8:e6:c0:01:b6:48:90:f4:2c:65:88:ca:
1d:9e:66:07:1c:30:d8:b0:31:7d:6f:48:5f:f0:ad:
33:4a:6f:eb:73:84:14:57:c9:87:99:83:c1:cd:30:
ac:47:59:41:aa:4e:ed:cd:6d:9f:92:8f:77:22:d3:
38:b7:df:f5:26:5a:6d:00:3a:e7:61:57:88:41:ea:
92:75:e3:b7:c2:5a:76:b6:80:ae:5a:33:04:1f:d4:
b9:60:1e:54:55:b8:2a:f6:cc:1d:b6:51:d4:01:31:
d7:ee:95:87:fb:ab:ad:a5:81:b9:a3:e5:1d:a8:40:
5d:bc:78:7d:bc:c1:1d:18:fb:60:3c:e2:6d:51:5b:
18:36:ce:0c:1b:ed:19:2f:28:1f:d2:c5:f5:8a:94:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3E:DC:5F:A7:F7:80:96:ED:3C:FF:D7:AE:43:D3:21:7E:33:DD:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b3a2dc4a-cebf-325d-ab5b-8f0e65395b7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.244.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:69:31:48:cf:24:4d:88:9c:11:92:79:a0:1f:5c:53:96:d8:
ac:9b:ea:6a:be:ea:38:b3:91:e5:a4:a2:00:ef:be:d6:ae:78:
4e:06:ae:e5:41:4a:53:a5:5f:e5:d4:c3:a5:c9:00:ef:9d:35:
92:6f:a1:19:63:b5:9a:f6:6b:ec:41:54:c6:c2:3a:70:a7:28:
87:fc:7f:b8:95:75:06:2c:26:6a:07:86:31:7f:00:3a:b8:2f:
cf:3f:89:4a:61:df:00:35:fc:fc:5a:b8:c3:96:a3:d8:ba:e7:
85:a7:2b:ea:45:49:4d:35:52:da:4c:30:aa:e0:a2:a0:5d:0e:
37:0b:10:e4:10:11:13:86:c9:e3:01:fa:91:f3:f7:e4:95:44:
90:96:65:c9:19:e2:5a:94:35:fe:55:ca:26:24:c2:af:5b:ac:
c1:72:db:ee:69:17:8a:75:f8:22:4f:78:5b:ff:81:be:0f:91:
08:26:c7:90:97:98:2f:39:47:a7:61:e6:03:c0:0f:e5:2c:36:
3c:5f:86:62:8c:c5:c9:93:1a:07:37:e2:68:a8:17:ba:9b:b4:
47:20:de:4d:cf:f5:3a:50:37:4d:3f:bb:25:a3:2a:d6:3b:0c:
73:ea:50:32:60:fe:5a:d5:4a:4f:12:f3:79:f7:80:cc:c4:3e:
2e:74:aa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:49:18 2026 by rpki-client