
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/a12abfa0-4549-3bf0-816e-c00fbe746ad8.roa
File: a12abfa0-4549-3bf0-816e-c00fbe746ad8.roa (raw, json)
Hash identifier: KnrWCpkhT4dZtlFBkfieAWlXjc/OV/QFVKL0sdKHiIY=
Subject key identifier: 56:33:46:E6:5D:4A:63:F4:CE:F0:E4:57:5A:27:B1:04:45:3E:FD:CC
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F4328584E858F8DDE441CB7A1AD64FA20
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/a12abfa0-4549-3bf0-816e-c00fbe746ad8.roa
Signing time: Thu 16 Jul 2026 21:00:12 +0000
ROA not before: Thu 16 Jul 2026 21:00:12 +0000
ROA not after: Wed 14 Oct 2026 21:00:12 +0000
asID: 26042
IP address blocks: 67.220.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:85:8f:8d:de:44:1c:b7:a1:ad:64:fa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Jul 16 21:00:12 2026 GMT
Not After : Oct 14 21:00:12 2026 GMT
Subject: CN=20d5c041-dae8-4a95-88c6-8efc354171d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:76:4c:92:00:ff:07:5d:ac:69:c6:0e:53:
2e:84:ce:75:d9:00:59:6b:ca:d3:d8:aa:eb:8c:af:
f9:5f:56:a6:0f:2c:c3:e6:31:8a:0f:8b:1f:ce:d5:
44:40:6f:ce:bc:f5:be:e0:58:19:a6:30:96:e7:10:
2b:4e:d6:7c:a0:4a:63:85:b1:b6:53:ce:c9:71:8e:
a5:2f:f0:4c:65:a3:79:da:68:43:5a:ad:9b:70:f7:
4f:11:28:dc:46:40:a6:67:ce:3e:1d:a1:19:07:36:
0b:ba:f0:5c:56:f5:12:37:9a:cb:aa:ab:3d:d7:7f:
22:04:54:9a:fc:ef:83:cb:b7:1b:7f:bb:98:c8:2d:
34:91:e4:83:5c:26:4d:49:e1:68:1e:12:ea:d8:8a:
4e:24:a8:65:fa:11:e1:67:eb:fc:73:90:b6:23:56:
b9:cf:72:70:60:c1:73:90:dd:e1:ea:c4:5f:ef:a7:
98:5c:cc:b5:e6:1f:57:c1:bc:e4:8b:35:c6:95:36:
1d:91:aa:46:46:29:01:99:9b:5b:1f:5a:af:00:e6:
ff:95:a9:0c:c3:6d:c7:f7:0c:7f:eb:aa:2b:89:9f:
1b:bc:0f:1b:08:f5:09:b3:8d:90:e9:a4:38:5f:5d:
da:91:ed:1b:98:91:9c:a3:29:bf:ba:56:7b:1e:59:
18:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:33:46:E6:5D:4A:63:F4:CE:F0:E4:57:5A:27:B1:04:45:3E:FD:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/a12abfa0-4549-3bf0-816e-c00fbe746ad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:d6:a9:34:cf:e0:20:3a:ba:b3:53:d0:37:81:b5:95:ed:be:
2a:16:f7:bf:74:46:82:c8:07:a1:e4:07:91:4a:de:e6:bc:3c:
7d:d5:a6:3b:3b:58:b5:b4:54:a6:33:5b:24:2c:a0:cf:ff:99:
05:fa:4d:f6:50:61:5d:85:2a:a5:09:08:c3:2c:6a:08:74:63:
62:1c:11:10:ed:a7:58:a7:6d:62:5b:3f:45:0e:aa:fc:a7:2e:
e0:c9:9e:11:fe:16:b7:f6:aa:f0:e1:ac:05:8c:ca:e1:cb:b4:
0f:3f:3a:46:5a:a8:b3:50:17:25:2b:7c:34:58:55:4d:76:3c:
90:7b:bd:61:81:5d:23:e1:1e:3f:08:ea:e9:34:01:0e:89:0f:
12:bb:aa:42:9e:af:39:8d:f8:17:97:e7:d0:e0:c2:f7:25:c5:
5f:cb:a6:de:5d:0e:db:e3:dc:94:26:a6:30:58:49:58:ae:01:
4c:aa:c5:0b:2c:c8:3a:0f:11:e4:c2:ee:b5:dc:e0:bb:54:60:
47:94:b4:9b:e4:1e:7d:23:68:b7:31:d0:69:b6:ab:7b:e5:2b:
df:4f:da:a0:9f:6e:1f:c1:8f:e7:55:35:24:b9:00:92:ba:9c:
a5:88:14:50:e1:e6:97:15:8c:41:73:08:5f:18:8e:b9:1a:f4:
de:c4:b2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:17 2026 by rpki-client