
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/626f9e31-6a7f-392d-bb46-19c6b9ec9ac2.roa
File: 626f9e31-6a7f-392d-bb46-19c6b9ec9ac2.roa (raw, json)
Hash identifier: yec/RTFF6h7ChzR1SEU4ijpHU8L5r8ksiUI8EN6+Qos=
Subject key identifier: FD:BC:B4:BC:AD:8C:B8:A3:1A:82:AC:AA:D1:5E:6D:98:BD:31:8A:74
Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial: 010D0C9F4328584F49871CB2DD2CB482D836DD80
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/626f9e31-6a7f-392d-bb46-19c6b9ec9ac2.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 398210
IP address blocks: 207.211.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:1c:b2:dd:2c:b4:82:d8:36:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=6c59a443-d998-4149-a0f4-11188a9f5883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:13:12:de:82:54:24:e0:25:9b:95:fb:5d:b6:
75:bd:3f:1b:bd:d5:86:09:77:75:3a:fb:9f:5c:86:
c2:78:7d:f8:19:0b:15:b9:6b:c3:cb:11:cc:bd:5b:
31:d9:71:18:97:86:6d:50:aa:e4:93:03:d6:4d:9a:
2c:87:b7:4d:76:07:5c:54:51:b6:e1:79:2e:99:5a:
69:45:00:97:b8:a3:8a:64:12:d2:c2:58:7b:c6:dc:
cc:db:60:66:e6:4c:91:46:e8:df:80:09:4b:c1:0a:
01:07:e4:2e:1b:1a:58:70:a5:05:f0:9d:63:df:d6:
3b:95:83:24:6e:01:9f:93:6f:03:c2:3f:19:fc:f9:
45:4c:85:28:c6:d7:bd:e8:ba:7d:4d:bf:a3:c2:5d:
00:94:e1:ff:3b:ff:06:06:40:84:80:6c:35:99:8a:
86:06:f5:06:b7:63:3d:fd:44:cc:d5:09:ac:8f:41:
1b:93:37:bd:6f:a2:0f:4e:6a:5f:50:32:1e:20:e2:
11:d9:cc:13:b7:c7:30:39:ac:5a:a5:cb:cf:c3:da:
44:0a:01:e5:ad:b8:58:4f:7f:01:3c:e6:47:48:fb:
0f:69:f8:ed:8b:d4:db:e0:fd:ea:ee:ce:29:a1:35:
e0:d1:76:33:c7:08:86:01:7d:4b:69:73:8b:73:64:
10:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BC:B4:BC:AD:8C:B8:A3:1A:82:AC:AA:D1:5E:6D:98:BD:31:8A:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/626f9e31-6a7f-392d-bb46-19c6b9ec9ac2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
X509v3 Authority Key Identifier:
keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
sbgp-ipAddrBlock: critical
IPv4:
207.211.246.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:08:f8:2c:23:9a:d7:94:99:32:7f:01:e4:43:e4:ab:cb:50:
65:9e:16:5c:28:10:df:25:97:39:8d:8f:34:c8:9f:a5:36:2a:
b4:d5:fe:fb:dd:29:e9:35:ab:2f:bf:c0:78:e0:19:2b:28:37:
b1:92:59:66:94:c2:07:69:e5:de:3d:a1:3d:9f:68:9f:36:a6:
0c:94:de:0d:bc:69:a7:c9:07:0d:a0:86:2d:f9:14:8a:8b:be:
86:14:8b:14:b8:47:65:0c:af:b5:50:4a:a8:64:5c:27:ff:56:
78:71:73:72:93:7b:05:71:62:ee:11:d7:f7:18:45:37:dd:10:
d4:e3:0d:81:30:bc:c8:9a:bd:fd:54:7f:5b:db:ab:8d:d7:26:
8a:c4:13:02:8b:66:5c:5a:9b:dc:52:62:7f:57:2e:c5:62:68:
d1:f2:6b:cb:fe:67:66:2e:72:99:16:13:c6:2f:56:ff:13:9a:
95:14:33:da:88:ad:a9:8f:07:2c:df:a4:3d:0d:db:35:c0:07:
c0:11:54:14:44:ee:e0:ec:4b:2f:e3:9f:cf:f5:0d:91:e3:c0:
be:f3:15:2e:e4:8c:62:27:4d:91:7d:a2:d5:15:b5:dd:fc:f6:
e8:3d:f4:c6:d9:11:86:ed:50:3e:b2:2c:44:10:9d:7c:04:7a:
8f:b8:e0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:55:09 2026 by rpki-client