
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/4ea6cab6-3bf5-37d7-8560-10b12a5b38fc.roa
File: 4ea6cab6-3bf5-37d7-8560-10b12a5b38fc.roa (raw, json)
Hash identifier: LKwgOI7wyLqXm3wPm+fM8WtZPwh4TTiJ9Ty4/R7Fo8I=
Subject key identifier: 9E:3A:DB:BA:1A:30:79:4F:D4:5A:18:28:00:EB:31:9F:7C:98:29:3A
Certificate issuer: /CN=f6666624-f7c3-4ff6-ac71-f4d940ccf093
Certificate serial: 010D0C9F4328584EBC7700144318392250D76C00
Authority key identifier: E4:C7:7F:E8:62:71:0E:FB:A5:9A:70:46:0F:3C:D4:BF:BD:96:EB:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/4ea6cab6-3bf5-37d7-8560-10b12a5b38fc.roa
Signing time: Wed 05 Aug 2026 13:00:12 +0000
ROA not before: Wed 05 Aug 2026 13:00:12 +0000
ROA not after: Tue 03 Nov 2026 14:00:12 +0000
asID: 36086
IP address blocks: 72.28.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bc:77:00:14:43:18:39:22:50:d7:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6666624-f7c3-4ff6-ac71-f4d940ccf093
Validity
Not Before: Aug 5 13:00:12 2026 GMT
Not After : Nov 3 14:00:12 2026 GMT
Subject: CN=0511a875-230f-4b31-b262-add47a48cb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b4:12:6c:5d:f9:f1:e2:a6:0a:a7:91:ce:05:
00:9a:b5:d0:01:d1:8a:f7:51:9a:6e:c9:97:0e:a5:
c1:f8:23:57:03:18:e9:ca:15:9b:b6:ec:8f:2f:23:
08:4b:8d:c0:5d:93:78:7e:a1:2b:82:37:ed:81:ae:
77:47:48:1e:7c:d5:b1:a8:51:5e:94:a5:b0:34:7e:
fd:10:20:6a:5e:5f:4c:68:ea:21:16:5c:24:d9:5f:
40:d4:6f:a5:30:27:68:b0:03:84:53:f0:57:c1:af:
35:c3:48:a0:62:2c:80:32:9e:0a:88:fb:67:e7:f2:
e9:d2:e7:ac:d3:a5:f6:f4:d7:3a:09:bc:3d:c3:a5:
a2:3a:37:67:66:35:44:32:74:cf:33:e4:59:21:ca:
7e:5d:d8:33:46:b6:0c:71:c3:c9:6b:a3:d0:1d:55:
c6:58:5e:b4:2a:f8:e6:46:fa:59:a6:91:87:45:91:
7a:cd:55:5e:d6:e6:ca:c9:d0:47:8a:db:ee:04:36:
7b:a0:08:91:1b:ca:f6:c3:7d:ee:1a:1a:f5:14:b2:
86:35:83:a7:8e:4b:86:e3:9e:22:58:fe:cc:91:bb:
a5:4c:96:ce:44:15:1c:40:bc:8c:34:47:37:68:9d:
af:32:29:70:48:14:d7:e6:a7:54:8d:80:54:5d:4e:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:DB:BA:1A:30:79:4F:D4:5A:18:28:00:EB:31:9F:7C:98:29:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/4ea6cab6-3bf5-37d7-8560-10b12a5b38fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.crl
X509v3 Authority Key Identifier:
keyid:E4:C7:7F:E8:62:71:0E:FB:A5:9A:70:46:0F:3C:D4:BF:BD:96:EB:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer
sbgp-ipAddrBlock: critical
IPv4:
72.28.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:2d:e6:95:3a:e0:a6:fe:56:7e:b3:c5:14:b5:3c:04:5e:4b:
ff:85:7f:40:e4:d6:09:f9:0c:08:08:7c:1c:b7:83:8c:f5:7c:
61:97:8e:38:dc:cb:5b:2f:e3:9c:24:12:d5:e4:84:47:9c:66:
2b:cf:8e:7e:12:5a:30:90:22:b5:0b:01:ce:90:57:53:c0:fb:
52:17:c3:48:52:3c:ff:24:89:9a:d5:ec:c7:7b:54:f6:4b:48:
b7:48:15:a7:10:0f:ea:9e:20:36:d5:01:3a:2a:b2:10:59:3e:
95:ad:89:d3:c0:01:c3:f8:d5:73:f0:50:9f:24:e3:85:6e:8d:
55:ac:35:ee:24:96:a1:3c:24:4c:a3:51:93:30:5e:9c:1d:80:
ae:eb:e6:3e:17:b9:ef:1b:3f:ba:eb:54:69:ab:f3:bd:50:b9:
97:c1:78:dd:84:51:cf:b6:d3:ce:53:9d:a8:67:78:c0:aa:0b:
e7:54:5c:30:6f:8e:ad:70:84:14:a9:c4:1f:a9:7a:31:70:c7:
7d:64:02:d1:52:ba:ac:f4:88:71:36:5c:f5:59:45:49:d4:3e:
80:8e:bc:71:b6:60:70:6f:88:16:96:be:98:6b:09:73:7c:f8:
09:be:3d:4a:db:fa:29:17:77:7c:9a:22:ee:32:a9:c0:e3:85:
d3:99:bc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:51:48 2026 by rpki-client