
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa
File: 9a747c3b-3fd9-3e48-a4c5-c02174460043.roa (raw, json)
Hash identifier: mrxry/ZgVeav8FZGTtYas+KyPWXUtHeKsNJgkrjR/ZQ=
Subject key identifier: 66:98:84:C4:B9:D0:A8:07:CE:F6:F4:BF:72:D0:05:EF:09:53:C8:27
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584EB84719753DD57B5674D66C40
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa
Signing time: Tue 04 Aug 2026 01:00:12 +0000
ROA not before: Tue 04 Aug 2026 01:00:12 +0000
ROA not after: Mon 02 Nov 2026 02:00:12 +0000
asID: 31898
IP address blocks: 67.217.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b8:47:19:75:3d:d5:7b:56:74:d6:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Aug 4 01:00:12 2026 GMT
Not After : Nov 2 02:00:12 2026 GMT
Subject: CN=f71dd2b1-1137-472a-9996-171db7922788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:b8:ab:49:f1:76:9e:63:63:25:66:87:57:
1d:78:93:9c:d0:54:40:78:25:b0:6f:92:87:db:30:
e1:8c:65:ba:0d:78:bd:37:60:6f:e3:c4:7f:96:ca:
88:68:32:a2:6a:47:ab:ff:be:18:0c:84:e1:f2:95:
3c:45:49:7d:90:1b:00:f2:16:98:59:a8:ff:be:cd:
7f:07:5a:ad:d0:ba:ad:a2:ca:13:34:60:cf:69:f6:
30:9e:73:87:4d:49:0f:a1:fd:27:84:ee:0d:32:f3:
a5:46:ac:3f:b5:f0:b0:cf:51:8b:c8:b5:75:df:0a:
94:9c:93:2b:5d:4c:9f:1b:0e:b3:39:19:08:25:31:
30:b4:a2:70:d3:0c:7c:d8:6f:b7:06:17:ce:69:a5:
bc:e7:b9:cf:a9:e5:11:1c:ab:d8:d1:24:9e:10:f8:
ff:77:6b:7b:e4:2f:1a:70:07:6b:3f:00:e6:b7:05:
83:96:c3:35:dc:bd:21:30:fe:12:c8:bb:5f:4c:a6:
38:cd:ac:04:a8:a1:db:b3:47:5c:cd:62:a0:2e:8e:
04:e1:2b:fc:64:eb:4d:31:a1:c7:d1:1b:2c:62:70:
d5:12:e2:16:f6:2f:27:a0:ef:19:f5:26:f0:d6:33:
00:17:8c:70:bb:1f:24:7a:95:fe:3e:57:f9:95:26:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:98:84:C4:B9:D0:A8:07:CE:F6:F4:BF:72:D0:05:EF:09:53:C8:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:e8:16:cd:7c:1a:2e:65:7d:cb:b6:61:7c:4d:70:74:71:02:
cc:17:53:b7:58:7b:03:c8:e9:3a:5f:78:a3:ec:d5:d9:db:a6:
b4:f3:d2:7a:d1:9f:72:28:ff:33:9d:f0:fd:f3:a8:ba:fe:03:
27:d2:9f:b3:81:1a:96:54:5c:dc:52:01:07:f0:45:3f:b4:88:
b5:9e:12:ec:41:5a:c3:60:0c:7a:d6:c7:09:66:36:2e:30:c8:
6a:dc:04:11:ae:fd:fa:1b:a1:a4:23:0c:fd:77:87:86:69:4a:
00:59:12:73:5d:0d:ba:80:6e:1c:ce:9b:70:ee:cc:d3:5e:56:
0d:60:8a:db:24:cc:7f:f9:b1:07:01:4f:55:30:47:b8:b6:a6:
e0:43:6d:bd:d7:71:d4:29:2c:43:2b:6c:93:88:4a:03:97:3f:
1b:34:89:00:e4:50:95:3d:dd:7c:3f:f0:2e:ab:b1:cc:b9:ab:
5f:d4:50:38:e8:31:86:64:b6:b7:ef:56:f0:61:5d:3f:4c:36:
b5:03:7e:ca:76:7c:c6:d9:72:3f:90:1b:a9:67:6b:95:1c:d8:
ff:75:c5:52:1e:5a:19:b0:d8:fe:d6:d6:7a:ee:19:c3:e9:8d:
cc:b9:01:06:5d:bf:e6:b0:7c:dc:d9:0e:2d:71:62:46:06:25:
b1:d3:f6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 09:06:56 2026 by rpki-client