
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/62512761-ce98-33f9-89a6-01cca15fbf4f.roa
File: 62512761-ce98-33f9-89a6-01cca15fbf4f.roa (raw, json)
Hash identifier: tRXcc/5iTTlkPMYeet2SWlCaA/2VLBYu8xMq3ClRrFA=
Subject key identifier: 0B:B5:ED:01:51:52:00:30:17:CB:61:47:D3:41:39:20:56:0F:9D:E5
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584E66DA15E2B8F7C2915821C280
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/62512761-ce98-33f9-89a6-01cca15fbf4f.roa
Signing time: Sun 05 Jul 2026 21:00:11 +0000
ROA not before: Sun 05 Jul 2026 21:00:11 +0000
ROA not after: Sat 03 Oct 2026 21:00:11 +0000
asID: 13576
IP address blocks: 208.53.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:66:da:15:e2:b8:f7:c2:91:58:21:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jul 5 21:00:11 2026 GMT
Not After : Oct 3 21:00:11 2026 GMT
Subject: CN=43cbc5ae-f1e6-477d-82cf-39a18bb2414e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:75:5a:57:16:35:91:0f:92:d0:17:e1:ad:
da:ed:65:ef:db:5a:1c:59:48:4b:79:e2:2a:05:81:
7b:df:e9:f4:b4:69:f8:b3:93:e9:d1:3f:13:00:25:
bb:1b:c0:d6:c2:76:2f:5e:ce:d1:50:af:72:1c:f8:
50:6f:79:75:14:50:fb:7e:39:52:92:aa:b2:19:ce:
c6:2d:1c:31:92:29:b1:05:34:13:5f:54:2b:5d:ed:
61:5e:29:79:b9:d5:8d:ec:04:59:87:d5:27:21:27:
44:af:be:e2:f5:56:a6:11:57:f7:78:cb:f5:03:34:
a2:b5:a9:c7:e3:f8:ac:60:78:b1:7c:a4:8d:21:dd:
7d:07:b3:34:c2:30:2c:e2:ab:a6:72:08:1e:93:69:
7f:de:50:44:6b:95:ca:8c:66:7e:34:60:f2:66:aa:
af:d4:b7:02:19:0b:e2:5b:86:b6:37:ed:2d:ca:ed:
e5:3a:aa:35:9d:2e:ff:2a:93:ed:d2:bd:7c:5a:e6:
2a:8a:f7:48:a9:c0:11:7c:2b:3a:34:a1:bc:ea:39:
b3:69:66:1a:4f:3c:c1:7a:18:b7:76:89:3a:46:45:
3e:22:9b:8f:46:b9:ad:1f:d7:1a:5b:5e:28:d5:e4:
c8:ad:3a:15:ee:a9:65:18:09:28:da:76:e2:d5:39:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B5:ED:01:51:52:00:30:17:CB:61:47:D3:41:39:20:56:0F:9D:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/62512761-ce98-33f9-89a6-01cca15fbf4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:f6:90:3f:d4:e9:bd:20:42:e8:5d:31:ca:e5:99:d5:7f:5d:
23:7a:34:68:3f:d5:09:5c:14:14:f9:84:db:04:e9:27:6a:75:
da:78:11:ea:fc:25:cd:46:7a:49:71:cc:5d:a1:d3:e6:51:cf:
c7:8c:b2:a4:c3:93:dc:e1:4a:e4:dd:36:ad:ba:ec:c3:0f:8c:
6f:be:ba:6f:ca:dc:13:e6:35:bd:68:ac:82:d9:66:ea:11:76:
e8:74:ca:7a:cd:7a:30:36:82:40:69:93:01:33:db:2b:50:3a:
e2:77:2c:3c:6a:f6:95:18:b8:b6:de:ec:88:ef:fe:08:3c:38:
fb:eb:66:8c:cc:98:cc:ca:2d:be:cb:08:23:91:cd:e1:a2:c2:
46:df:77:18:6f:1a:e2:a2:ef:2c:41:08:cb:67:cf:07:4d:dc:
81:f6:cf:2e:4b:02:8f:9e:e3:2c:81:2a:0b:ef:ce:97:01:90:
e3:7e:9c:1e:5e:e4:f3:ac:fc:a8:a7:0f:63:d5:a2:c7:b9:f7:
8f:32:2d:08:f2:1d:5a:f6:58:cc:6e:30:bb:e5:fb:9d:a5:ef:
a9:96:f4:d6:62:21:c3:53:54:56:e5:d2:64:6c:74:f7:0b:41:
0f:da:f0:4c:40:a3:30:e4:0e:96:3a:b1:58:b8:cf:8a:b6:13:
bd:b3:44:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:16:23 2026 by rpki-client