
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/caa81f92-b27f-32a1-bbda-f61104514b4d.roa
File: caa81f92-b27f-32a1-bbda-f61104514b4d.roa (raw, json)
Hash identifier: pbeV7bvVI+8UXmresVFvffCA85m70PDR9tazS24yCgw=
Subject key identifier: D4:E1:FF:59:50:FA:A6:7B:42:D8:7C:B7:45:53:B0:80:95:7D:C1:02
Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial: 010D0C9F4328584F067245E34A7D0E3B8834B500
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/caa81f92-b27f-32a1-bbda-f61104514b4d.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 26744
IP address blocks: 68.170.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:45:e3:4a:7d:0e:3b:88:34:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=7aa7c1e6-33f8-4cc8-bfc2-e3e8b56300ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:cc:03:d9:f4:6c:60:d7:3b:27:ae:ce:1a:
84:a9:75:2d:ca:95:e6:3b:f0:82:ac:53:b2:8a:5c:
e5:fc:dd:bc:a2:8b:56:c4:28:52:b5:61:db:88:ff:
04:ca:77:8b:ed:26:f4:72:7b:fd:f2:94:8b:dc:7e:
f8:55:e6:e1:25:b7:44:0c:c7:bf:c0:5b:b1:7a:67:
91:d6:70:56:e5:47:d4:e2:a3:ed:e2:58:a0:f6:37:
de:1f:40:fc:c1:df:89:5f:a7:80:58:50:21:26:b9:
9a:fd:bd:7f:bd:7c:dc:97:e2:67:de:dd:ba:0c:40:
02:13:37:4e:f1:da:db:26:b9:d4:df:7d:93:ba:3d:
f2:8a:32:0c:36:20:e6:1b:fd:1d:a0:7c:38:e9:a2:
8f:d2:68:5e:ca:ca:03:d7:02:38:dd:4e:de:72:b6:
86:37:2e:2d:df:19:d0:d7:5d:d4:89:72:ca:e1:3f:
5c:46:2c:2e:68:7a:2b:96:e2:f0:7a:4c:f9:6f:49:
1e:5d:ee:3b:7d:eb:18:1e:8a:b2:21:f2:6e:cc:58:
71:bf:b8:f1:20:36:85:37:13:a9:c1:19:bd:d3:bc:
65:16:7e:92:3d:8c:5f:d7:5f:c7:24:f8:8b:30:b1:
f9:1d:ba:97:a4:0d:43:fd:36:0a:3f:20:88:c9:42:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E1:FF:59:50:FA:A6:7B:42:D8:7C:B7:45:53:B0:80:95:7D:C1:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/caa81f92-b27f-32a1-bbda-f61104514b4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
X509v3 Authority Key Identifier:
keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
sbgp-ipAddrBlock: critical
IPv4:
68.170.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:1d:c0:c0:d4:0b:ba:00:4f:c1:2c:ca:fb:5e:d4:9d:8f:b6:
68:57:9a:fa:c2:71:71:63:4a:87:31:85:04:01:74:51:57:b0:
a7:e2:d0:68:c9:e3:47:c6:1e:2d:25:47:3f:c3:85:0a:3d:ba:
21:5a:1c:2a:63:2f:fd:2b:41:c5:50:db:84:b4:49:b3:19:89:
02:41:c0:a2:9b:e8:aa:c5:fa:16:75:d7:97:6f:58:98:8d:a9:
a9:12:47:1f:b2:76:4e:45:16:b9:8b:e6:9d:af:37:f9:5b:3d:
00:dc:8e:00:a9:2c:91:b3:8c:cb:d5:be:a8:af:66:bd:8a:01:
c6:e7:06:58:df:e8:f7:5d:32:ee:a7:dd:68:9a:76:f3:2d:de:
20:0f:c0:d4:61:5e:7f:8e:41:31:4a:99:90:7a:12:f0:5d:9f:
48:25:d2:b7:d3:9c:9c:4c:49:c5:f6:dd:72:3f:f4:e3:2f:ba:
e7:d7:d3:aa:f8:9f:7f:98:af:a0:a8:9a:b5:1d:b5:4a:f9:70:
d2:9b:d8:81:5a:d6:9c:24:e2:2d:54:9c:b4:49:ab:12:76:99:
99:89:26:65:52:5d:b9:b9:e1:bb:25:1a:3b:00:99:a1:c0:c5:
96:06:58:66:5f:15:9a:72:18:78:f8:6f:47:3e:80:76:9b:4c:
c0:15:b0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:41:52 2026 by rpki-client