
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/8eeed7a6-1a45-3e5a-9cc6-ae7a8936753f.roa
File: 8eeed7a6-1a45-3e5a-9cc6-ae7a8936753f.roa (raw, json)
Hash identifier: WdJtJpJ/8RBL6uMu5o5tdvvmhS57ki1f2OXR2CzNLeQ=
Subject key identifier: 0E:EE:9A:1F:47:FE:CF:B8:A4:13:12:7C:DD:F1:60:E9:FF:0E:6F:6A
Certificate issuer: /CN=d982f1ba-c920-429c-a52e-66234d07865d
Certificate serial: 010D0C9F4328584F40A978BC3EE06AFF051A0200
Authority key identifier: 01:54:25:46:D5:2A:CA:79:F4:51:6E:66:35:2C:17:48:59:9A:0C:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/8eeed7a6-1a45-3e5a-9cc6-ae7a8936753f.roa
Signing time: Mon 21 Sep 2026 21:28:39 +0000
ROA not before: Mon 21 Sep 2026 21:28:39 +0000
ROA not after: Sun 20 Dec 2026 22:28:39 +0000
asID: 399065
IP address blocks: 72.21.0.0/21 maxlen: 24
162.33.192.0/22 maxlen: 24
167.224.0.0/20 maxlen: 24
169.150.32.0/19 maxlen: 24
170.203.0.0/21 maxlen: 24
170.203.32.0/20 maxlen: 24
195.85.120.0/21 maxlen: 24
208.56.240.0/20 maxlen: 24
216.205.32.0/20 maxlen: 24
2602:fce7::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/d982f1ba-c920-429c-a52e-66234d07865d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/d982f1ba-c920-429c-a52e-66234d07865d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:40:a9:78:bc:3e:e0:6a:ff:05:1a:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d982f1ba-c920-429c-a52e-66234d07865d
Validity
Not Before: Sep 21 21:28:39 2026 GMT
Not After : Dec 20 22:28:39 2026 GMT
Subject: CN=372e596e-9d08-4810-a098-1d641ad90600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:f9:75:06:ea:3a:74:80:28:26:d6:70:d0:
ac:6c:43:6f:06:b1:16:e9:5b:95:dd:69:0b:f3:8a:
77:f4:74:dd:5c:7b:cd:0b:bd:3d:18:7b:fe:76:b5:
7f:cd:9a:8b:74:a7:54:4a:07:85:30:5b:2b:39:d4:
56:bf:c8:87:cf:ef:a6:b9:db:9a:1c:12:2e:bb:cf:
d2:41:8d:31:70:f8:16:bd:f0:5f:19:7a:9f:67:b6:
12:17:e9:12:d4:ff:f4:f9:a0:34:72:76:e2:a6:4b:
ce:72:1c:0a:fb:06:06:0b:9f:87:bb:ae:55:dc:6a:
b3:63:a9:27:ee:af:d3:65:e0:56:20:e0:27:e6:2d:
03:b5:16:6a:0a:7f:a9:1d:4b:f7:b3:8b:83:2d:55:
e5:b6:dd:a0:4d:0b:1b:e8:82:56:33:96:f5:69:7e:
ed:ed:40:be:03:30:d5:9c:9c:cd:2f:9e:8f:47:59:
74:6d:1a:2f:66:c9:cd:3b:bb:4b:b2:27:25:fa:81:
c8:e6:00:48:51:44:0a:dc:e7:1f:fe:75:db:2e:aa:
f6:a4:e9:df:e2:33:98:b5:17:7c:5e:33:a8:14:3c:
c4:12:dc:fb:37:2d:36:de:29:3d:a6:55:07:ff:8b:
3f:39:09:a4:be:14:62:1a:10:10:a6:6f:a9:2c:b0:
d0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:9A:1F:47:FE:CF:B8:A4:13:12:7C:DD:F1:60:E9:FF:0E:6F:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/8eeed7a6-1a45-3e5a-9cc6-ae7a8936753f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/d982f1ba-c920-429c-a52e-66234d07865d.crl
X509v3 Authority Key Identifier:
keyid:01:54:25:46:D5:2A:CA:79:F4:51:6E:66:35:2C:17:48:59:9A:0C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d.cer
sbgp-ipAddrBlock: critical
IPv4:
72.21.0.0/21
162.33.192.0/22
167.224.0.0/20
169.150.32.0/19
170.203.0.0/21
170.203.32.0/20
195.85.120.0/21
208.56.240.0/20
216.205.32.0/20
IPv6:
2602:fce7::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:83:35:fb:78:a7:8c:73:f2:70:b4:26:cd:02:99:ef:2a:17:
43:c7:b0:55:3d:1c:6b:c9:9f:e1:20:78:36:39:7b:ea:83:54:
cc:d0:c3:61:0d:68:9f:2f:29:df:bc:b4:b1:5f:ed:9a:17:ea:
fa:f9:a7:c7:aa:48:dd:33:a0:e0:7c:b3:f4:f6:79:32:dc:9c:
a9:6e:6b:3c:f0:39:73:e6:48:a5:71:40:0e:6c:6a:14:5b:27:
be:12:34:5e:15:7b:91:ec:37:34:ba:50:bd:84:3b:95:e1:63:
b4:9d:9e:48:dd:e8:ae:0e:45:64:06:b7:85:1b:5f:7b:62:08:
66:96:eb:80:bc:d6:93:56:90:0d:59:a2:9d:b6:b7:6a:af:87:
bf:5a:f9:b5:a2:b5:da:94:30:b4:36:12:4a:91:8a:6c:ca:f2:
92:1b:35:68:3d:53:48:3a:f1:22:b9:f3:7e:21:d3:ab:71:0f:
dd:04:00:4f:2b:26:87:b1:09:c9:22:47:a9:1b:2e:ae:13:45:
f7:1f:75:38:86:c5:df:84:89:2e:d1:78:d0:8c:e2:ca:54:5e:
85:29:21:65:9f:42:66:f9:3c:56:89:48:a3:47:ca:ef:bb:b3:
64:17:9e:8e:37:52:29:50:9d:c7:08:0e:be:6b:5e:bd:b1:76:
58:36:1a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:05:36 2026 by rpki-client