
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa
File: 68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa (raw, json)
Hash identifier: YvKqPITMQKDWHhqMkrBbXylAEoIVZ9bj1gWByiONnng=
Subject key identifier: D9:71:B8:D2:51:3A:A0:96:4B:23:9B:9E:CB:12:67:52:70:50:A4:84
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584E3E5F40B47502A341B3069ED0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa
Signing time: Sun 21 Jun 2026 09:00:12 +0000
ROA not before: Sun 21 Jun 2026 09:00:12 +0000
ROA not after: Sat 19 Sep 2026 09:00:12 +0000
asID: 16696
IP address blocks: 67.221.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3e:5f:40:b4:75:02:a3:41:b3:06:9e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Jun 21 09:00:12 2026 GMT
Not After : Sep 19 09:00:12 2026 GMT
Subject: CN=72683f6a-ac04-4697-8a25-1f8d8c624f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:68:b2:48:7a:2f:04:78:3b:85:6d:f7:d3:
69:db:0e:ee:df:bd:84:fe:ae:06:3c:5c:02:2a:44:
b9:ce:19:5f:ff:b9:8e:5e:5a:ca:46:bc:56:92:dc:
5f:e8:30:3e:00:98:db:0c:fe:f7:82:42:15:ed:f7:
df:c1:2f:90:d0:75:74:12:ab:6e:a9:82:36:9a:37:
4a:f2:0d:c0:44:f6:35:c2:f4:31:57:b7:02:e7:2d:
a6:2c:d1:96:df:2e:ac:6a:75:3c:9d:76:56:cb:4e:
60:2c:7f:cb:4e:10:87:53:9f:79:5c:f7:d3:28:c2:
f9:3e:c7:cf:44:4c:79:aa:04:aa:ea:95:68:95:78:
7c:d7:fb:79:1c:48:05:e5:f2:ec:24:7b:7b:b6:fe:
4c:a6:6c:36:be:60:e1:f1:55:4c:4f:dc:7b:82:76:
7e:91:6f:07:b7:30:03:a8:35:67:58:3c:2f:07:17:
e4:3e:7e:f2:7c:4d:14:65:b0:0a:95:1d:1f:45:a8:
fe:ba:ef:b4:b4:43:d0:3f:9f:82:2c:0e:ac:6f:4a:
58:46:37:13:54:42:d6:ea:24:9f:f1:2e:c5:60:cd:
bb:65:c1:83:ae:97:11:52:f3:77:f7:39:58:d0:03:
7d:cf:ec:5a:ca:5d:8c:3d:b5:12:f0:f9:16:5a:8e:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:71:B8:D2:51:3A:A0:96:4B:23:9B:9E:CB:12:67:52:70:50:A4:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:d5:39:55:44:76:24:16:ca:c2:6d:2a:7a:ef:4e:0f:ed:35:
47:ac:41:15:6f:88:63:a9:79:66:dd:f7:b2:97:35:54:93:5e:
78:cd:ee:8e:4b:9b:ca:3e:ee:49:5e:22:ed:c5:28:70:2c:f1:
2e:a5:18:b7:a3:d2:a2:a1:c4:77:05:cf:96:59:4a:c0:a6:26:
ac:bb:f3:d4:49:41:a2:6e:78:76:5a:6a:27:ab:f7:b0:78:a5:
1f:60:4d:61:8d:0c:15:8e:72:ca:78:55:ef:9b:d7:9c:6f:0d:
89:7a:c7:14:ec:87:20:0e:71:d0:8c:2a:73:f9:c6:6f:2d:0b:
fd:50:ed:28:32:c8:ea:48:17:09:3d:38:2b:52:dd:5d:91:da:
76:94:e7:98:6a:22:7f:5b:2a:08:2e:7d:de:ef:32:94:89:5b:
34:16:08:32:fd:63:59:c4:a7:ba:4d:75:73:60:3d:91:6b:45:
47:8f:c1:1d:08:3a:e1:9e:d6:aa:4f:52:a3:00:84:be:4d:14:
a1:cf:98:15:01:c1:3e:a2:35:e8:19:88:94:5a:db:ca:9b:03:
24:a7:48:b6:67:39:34:a5:54:4e:d1:4b:a1:b2:7d:be:29:32:
bf:9c:01:a0:d2:5c:8d:32:c4:1f:67:5c:40:48:4e:9b:e5:75:
57:20:69:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:06:26 2026 by rpki-client