
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa
File: 912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa (raw, json)
Hash identifier: hyOFLZb/j15zY0RIsydPXydUZSJZD1Arp5tJjx24wOk=
Subject key identifier: 8F:1B:4B:2E:12:24:D5:B9:45:6F:14:E2:D7:55:8F:72:C7:14:F2:0E
Certificate issuer: /CN=0e002701-2485-4643-ba40-3ea23fa41085
Certificate serial: 010D0C9F4328584E5A4A05EF6BAE3A3DF4FD7100
Authority key identifier: 89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa
Signing time: Wed 01 Jul 2026 09:00:12 +0000
ROA not before: Wed 01 Jul 2026 09:00:12 +0000
ROA not after: Tue 29 Sep 2026 09:00:12 +0000
asID: 16563
IP address blocks: 208.86.96.0/23 maxlen: 23
208.86.96.0/24 maxlen: 24
208.86.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5a:4a:05:ef:6b:ae:3a:3d:f4:fd:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e002701-2485-4643-ba40-3ea23fa41085
Validity
Not Before: Jul 1 09:00:12 2026 GMT
Not After : Sep 29 09:00:12 2026 GMT
Subject: CN=83338563-5533-4f4e-ae5e-3d44eec6f5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:32:cd:4a:13:a7:4a:c0:73:d7:f8:db:ad:
22:28:a1:cd:5b:d9:c0:56:6b:47:fb:f5:c5:90:5c:
0f:7b:45:3c:56:df:87:dc:36:a3:86:f2:8f:c6:b0:
75:a7:83:90:ea:f0:30:b6:86:89:c8:b7:8c:3a:74:
c7:6a:09:b8:f0:73:52:39:74:d0:68:9f:18:97:8c:
b3:70:d8:e0:5d:85:bd:0b:21:54:b5:38:d2:53:e7:
14:5f:f6:c7:d3:d4:a5:89:8b:4b:7a:bf:54:bb:e4:
f0:af:94:1c:12:5d:56:11:2e:20:de:48:59:ca:cd:
6d:38:42:56:a8:2c:f5:b0:3e:3a:c7:a3:40:b9:83:
b4:2a:f6:57:83:eb:e8:e8:ae:43:52:4f:fa:c8:2e:
79:47:53:9c:7c:ca:b3:ab:06:87:01:27:9c:cf:5a:
42:06:1f:46:6d:f5:5d:90:7f:ee:67:b5:69:b0:fe:
3c:7d:1d:06:33:e6:f0:f0:c9:78:1c:d8:d8:79:b8:
f7:de:1b:fd:95:11:27:cd:a3:b6:a5:71:d4:56:d9:
f9:d3:c4:ca:1d:69:90:35:d3:18:44:78:dc:69:e3:
c2:50:bd:7e:28:86:87:8e:fc:d0:95:9d:f3:23:c8:
f7:26:ed:53:7e:be:35:48:dd:96:f7:49:38:3f:20:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1B:4B:2E:12:24:D5:B9:45:6F:14:E2:D7:55:8F:72:C7:14:F2:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl
X509v3 Authority Key Identifier:
keyid:89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:02:e3:86:a5:4c:2b:4c:70:a7:45:1e:b8:49:ef:59:ad:25:
8d:45:bc:eb:4d:f6:d5:c0:d9:23:5d:e4:4c:a1:3c:9c:53:93:
c0:36:a1:80:9b:6f:5b:7c:13:ff:14:97:80:e4:cb:f7:11:6e:
9a:16:b0:b5:4c:f0:82:4b:54:b1:df:cd:96:bd:4a:1b:c0:f3:
4a:4d:50:ac:77:09:29:e1:0d:06:45:5d:2f:bc:95:b0:2d:4d:
d8:ae:c9:eb:30:db:24:93:3e:87:f2:ac:e2:47:04:3e:45:07:
28:02:4c:49:b0:27:2f:6b:b5:00:ba:37:ea:03:d1:9b:7e:7f:
6d:f1:34:fa:b1:7d:b9:95:31:d5:97:09:00:18:84:0a:97:46:
a1:85:81:bb:2e:a7:e3:c9:b0:ee:2d:4f:7e:19:6c:3c:47:d3:
31:9a:24:3e:f7:14:79:87:92:52:8d:af:02:11:0e:62:f6:df:
15:b8:b6:17:9c:65:3a:f8:56:c5:11:be:2c:40:5f:48:3a:3a:
25:51:35:c6:45:6a:d4:49:57:ad:b3:36:68:f2:6d:47:23:15:
1e:3a:b2:82:f0:d3:5e:70:cd:f7:d4:b1:51:3e:8b:b1:e9:36:
0d:d8:e7:42:96:21:95:46:7b:bb:1c:9c:3a:3c:13:d7:d0:74:
ba:f2:68:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:32 2026 by rpki-client