
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/68cca627-b58a-370b-84c1-d2f948564a04.roa
File: 68cca627-b58a-370b-84c1-d2f948564a04.roa (raw, json)
Hash identifier: nHkII6Kibq+mqo44O9wjbgLsdAkmjqJaSKhnF1Y7gCU=
Subject key identifier: 4A:A2:86:0F:8D:33:D2:4C:31:6C:BE:8B:B5:57:5F:E9:38:8D:61:76
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584D146D91542C45C40349068FC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/68cca627-b58a-370b-84c1-d2f948564a04.roa
Signing time: Fri 06 Mar 2026 15:38:30 +0000
ROA not before: Fri 06 Mar 2026 15:38:30 +0000
ROA not after: Thu 04 Jun 2026 14:38:30 +0000
asID: 81
IP address blocks: 198.86.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:6d:91:54:2c:45:c4:03:49:06:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 6 15:38:30 2026 GMT
Not After : Jun 4 14:38:30 2026 GMT
Subject: CN=8650dab4-8f48-4107-a943-9e8098df2db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:ec:ba:be:f1:ec:ac:fd:9d:6a:24:5b:06:
fb:fd:c2:b2:b7:b5:03:c2:d5:35:99:a1:1b:ce:ec:
82:8d:40:a6:f6:4b:fc:b8:84:cb:18:e9:d1:8b:97:
0c:b0:20:b7:97:41:fd:f6:37:73:a8:76:16:4f:ab:
37:41:86:7b:eb:79:c7:ea:d8:df:e6:9b:8a:50:99:
1d:eb:41:07:16:37:a4:f6:45:f1:0f:40:c5:14:28:
a6:dd:c8:17:01:d9:46:17:fe:4e:8d:c6:92:8d:63:
0e:b1:6e:48:60:09:58:72:78:72:a4:e1:eb:35:41:
c8:bc:07:dc:47:d6:af:af:57:0a:3c:65:aa:54:20:
90:03:38:70:e4:9c:9e:9e:c0:a2:2c:25:65:ca:81:
57:0d:86:53:99:72:3f:c0:4e:8d:10:d2:e0:82:92:
60:ab:6d:50:bb:46:b5:90:83:43:5b:d5:e3:c6:36:
55:76:74:c6:09:d2:8b:72:50:2a:08:37:be:f9:a4:
ce:96:51:88:94:12:23:42:1a:8b:0b:c5:8a:e3:be:
d9:bd:63:af:c0:77:05:ed:9e:0b:09:d2:84:57:a5:
fa:92:73:b7:bd:16:81:a1:f8:26:65:2d:75:e3:05:
50:b5:74:12:1c:30:33:14:2a:b6:35:58:25:1f:04:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A2:86:0F:8D:33:D2:4C:31:6C:BE:8B:B5:57:5F:E9:38:8D:61:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/68cca627-b58a-370b-84c1-d2f948564a04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:17:d5:93:14:a8:b2:8d:8f:aa:11:58:b0:b0:1a:38:01:d7:
6a:ee:ba:8e:07:c8:c4:d0:b1:d2:99:8e:c7:73:b8:b5:87:9d:
c4:15:18:b7:97:63:c6:63:41:76:05:f5:89:1e:5b:39:e7:c3:
8d:76:62:bf:2b:70:23:31:00:4c:a4:7b:b1:e1:e9:f4:7a:3b:
09:aa:8f:c6:e8:21:a4:be:93:73:af:d6:f6:10:df:5e:24:34:
32:9f:38:5c:2c:82:ec:70:38:b7:98:4d:15:13:4e:47:01:00:
3e:a7:4c:9e:6f:7b:9e:1d:bd:8c:8f:98:9b:7b:52:ab:51:cf:
45:c2:cc:d8:b9:89:7a:04:fd:1e:4f:11:07:fe:81:ee:1c:ec:
a5:e8:d2:52:ea:78:6d:55:0e:c3:f8:38:b9:8e:e2:3b:4a:20:
f1:aa:93:2c:c8:01:b8:49:22:0a:7f:17:32:41:27:14:cd:90:
23:c0:96:f5:b9:f2:10:32:2d:0c:4b:84:dd:aa:32:f5:71:ae:
1e:24:25:fb:4a:f3:68:0a:c2:a5:f7:63:20:7a:41:be:8e:8e:
6b:b2:6e:ab:6c:92:f6:74:90:6a:be:eb:7a:07:b2:7f:d7:eb:
bb:99:df:ce:9c:6a:a9:34:51:d6:41:e5:9d:04:da:7f:e5:54:
fd:6a:29:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:34:43 2026 by rpki-client