
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa
File: ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa (raw, json)
Hash identifier: d80t9GNB6gcJuCWMMaE5EWYXzBqPgFOD9hPcrGPT+Po=
Subject key identifier: 03:0D:EC:E0:BF:35:6A:40:F8:B2:7C:A9:6A:AB:65:CB:9E:D1:8D:95
Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial: 010D0C9F4328584EAD1C516D6EDC31D61D340600
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa
Signing time: Fri 31 Jul 2026 01:00:11 +0000
ROA not before: Fri 31 Jul 2026 01:00:11 +0000
ROA not after: Thu 29 Oct 2026 01:00:11 +0000
asID: 14618
IP address blocks: 149.72.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ad:1c:51:6d:6e:dc:31:d6:1d:34:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Validity
Not Before: Jul 31 01:00:11 2026 GMT
Not After : Oct 29 01:00:11 2026 GMT
Subject: CN=22f72426-9323-4937-847e-810bd48fb49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a5:55:92:47:4a:e5:2a:85:75:09:83:00:b3:
37:52:d1:90:84:97:1f:b0:b3:9c:21:f2:2a:4c:91:
8c:7f:11:85:03:49:75:60:0f:93:3b:9f:b2:de:fe:
50:e3:00:1e:95:ba:5b:95:45:00:ee:b3:00:a4:c3:
68:76:39:a7:9d:ff:d3:8b:4c:ec:1b:e0:6d:27:ae:
c0:44:74:8f:7b:3f:59:31:c2:cb:12:62:86:62:c1:
38:b5:0b:03:ba:6e:93:18:89:6f:90:2a:48:fa:4f:
ca:1d:39:ce:20:17:0f:fb:e9:f7:6c:51:c9:ae:82:
e5:9b:3f:0c:1b:c5:95:88:47:0b:25:62:4c:74:f5:
fc:41:18:55:5f:9b:61:32:72:cf:fc:d4:b6:1c:57:
2e:22:8e:6d:24:d1:bf:52:9c:27:04:10:af:c8:bc:
72:9f:b4:47:39:df:61:6b:69:32:ff:1d:35:73:1d:
ae:ff:54:69:f9:f2:d6:e7:c7:a3:1b:56:46:c7:5f:
bf:32:ad:3e:54:57:03:3f:8a:94:30:f4:38:ac:ff:
b0:3a:51:24:58:ae:64:07:dc:a4:7b:78:c6:72:e3:
20:fb:b4:e5:ec:79:37:01:2e:9b:ba:b2:ce:36:f8:
b4:4f:e2:04:50:e1:b3:03:eb:50:65:8b:e9:7d:a1:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0D:EC:E0:BF:35:6A:40:F8:B2:7C:A9:6A:AB:65:CB:9E:D1:8D:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
X509v3 Authority Key Identifier:
keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
sbgp-ipAddrBlock: critical
IPv4:
149.72.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:37:af:8f:cb:01:3b:fb:02:51:8a:b1:e3:de:0e:c6:aa:1e:
fd:66:60:d4:4f:23:38:92:1e:8e:c5:77:1d:52:78:51:79:d5:
99:82:bf:9d:bd:34:86:46:bf:3e:56:16:35:eb:11:2c:88:db:
2c:b5:e4:d4:0b:59:7c:63:3d:7c:58:9c:51:8f:27:fe:f0:98:
bb:f9:d2:97:91:2f:b3:83:25:5d:b7:ed:7f:ff:6a:b9:af:7d:
41:af:62:0a:42:81:de:17:ce:f6:fe:38:f9:fe:d3:98:2d:72:
ae:52:ca:72:42:30:74:f4:36:41:4c:f9:19:33:85:62:59:63:
6c:49:b1:09:8c:6a:38:8b:be:29:c8:d2:62:0b:b9:1b:89:e4:
58:95:31:25:8d:47:eb:52:f4:4b:a1:9a:23:5b:3b:86:39:88:
04:88:43:9b:9e:59:f5:eb:97:72:aa:c2:7a:30:65:6c:ea:ee:
2c:ea:b2:33:a4:6c:a5:0f:06:47:22:dd:7a:58:6a:76:ab:ac:
80:79:30:fe:79:c6:ea:47:b0:2d:e2:aa:fa:41:c0:b5:f7:b8:
eb:1c:8f:db:b4:7c:2a:db:5a:04:16:7a:96:1e:87:1f:21:a2:
2b:a0:85:c7:de:55:04:4b:bb:d3:15:fc:05:20:9c:bb:c5:6a:
f5:75:89:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:08:25 2026 by rpki-client