
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa
File: af9473bf-b67e-357e-95a9-91892269d8f7.roa (raw, json)
Hash identifier: makmGU/tJaFy3/LCVwwmuH98g8YNP+xE5UTNfB/KJpw=
Subject key identifier: 68:D2:31:25:8E:A6:4B:76:45:CD:E2:A9:DF:79:64:C8:02:68:F6:6E
Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
Certificate serial: 010D0C9F4328584EC371BEAB4BFA10B3EA312D40
Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa
Signing time: Sat 08 Aug 2026 01:00:11 +0000
ROA not before: Sat 08 Aug 2026 01:00:11 +0000
ROA not after: Fri 06 Nov 2026 02:00:11 +0000
asID: 14618
IP address blocks: 208.79.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c3:71:be:ab:4b:fa:10:b3:ea:31:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
Validity
Not Before: Aug 8 01:00:11 2026 GMT
Not After : Nov 6 02:00:11 2026 GMT
Subject: CN=3f4931e8-4493-4199-ab10-290fc9606ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:be:04:e1:f1:93:cc:80:1a:73:c2:28:39:
43:c1:39:67:e9:50:f0:78:8c:76:21:da:db:86:bd:
36:e0:c7:35:52:fd:50:fa:68:19:29:56:c6:b7:3b:
0f:f0:87:34:5b:33:64:d8:94:fa:70:6d:7b:49:98:
f3:76:ad:46:43:2d:d8:b4:3e:8f:03:17:96:33:e5:
46:ed:5a:a7:9b:45:47:48:b0:c3:5e:57:f6:78:25:
74:ed:b8:7d:75:0e:bc:50:69:83:14:bc:98:08:3b:
6d:2b:60:0d:b5:60:d7:d2:dd:a3:0f:ba:f6:95:a7:
10:24:72:ce:59:4b:1e:2a:28:b7:3c:a8:3c:69:a0:
f1:e4:fc:2b:62:d8:6f:9b:13:27:cd:e5:2e:af:58:
0a:33:1c:48:28:8d:d1:34:42:43:72:32:29:2a:e1:
0f:90:d2:fd:fe:19:20:9c:1a:7c:28:74:f3:e6:85:
c4:c0:b4:91:2c:ef:34:ee:64:e9:fe:b9:92:8d:f4:
d8:31:29:0a:17:75:96:10:fb:18:97:e1:c7:17:ca:
06:00:97:c4:ec:9e:98:20:ed:4b:2d:d8:93:7e:fe:
0e:46:12:00:be:40:49:4d:ac:21:47:fc:8c:81:b4:
1e:06:9a:e6:08:9f:ba:31:81:52:d6:55:24:2c:52:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D2:31:25:8E:A6:4B:76:45:CD:E2:A9:DF:79:64:C8:02:68:F6:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl
X509v3 Authority Key Identifier:
keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.79.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:11:55:ed:44:cd:e0:8e:2e:4b:25:f3:ce:14:3e:bf:a0:bf:
91:a2:25:fa:d3:97:4b:fa:03:95:57:8a:49:23:bc:ab:f3:7e:
02:31:db:58:57:cd:fc:a2:ac:f3:39:ce:35:c4:26:ad:45:72:
e0:ac:e0:fb:23:3d:e8:d0:35:69:28:bf:89:25:4b:05:46:8d:
78:ea:f6:02:4c:d7:5e:f0:f6:04:a5:e1:c8:cd:3c:3a:e0:40:
95:a4:2b:b8:11:a1:75:78:5b:f7:89:7b:2d:04:c1:9f:96:41:
a8:dc:8e:e6:ad:cf:d0:39:f7:3d:0a:4c:2c:1e:a1:25:2c:69:
80:df:34:54:6e:ce:85:ec:4d:09:92:d9:50:c5:3a:54:3f:48:
b3:22:9e:17:1d:54:ab:40:2d:3d:02:3b:26:32:b5:cb:2f:dc:
d1:62:f0:83:d5:17:33:43:b4:9f:cd:5d:0c:a1:55:b3:bc:00:
f0:25:5b:34:66:d8:a8:2c:0d:e4:fd:11:2b:cb:9f:e2:fc:48:
2a:2a:04:e4:15:46:d2:6e:ff:da:7e:4a:63:c0:7b:ba:61:ce:
45:9d:7a:2f:aa:2b:6c:bd:78:dc:a2:ee:10:59:9c:42:d2:cf:
2e:04:09:c3:3f:0e:a7:fd:ea:8f:4d:23:87:f5:70:1c:59:9a:
76:30:1d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:13 2026 by rpki-client