
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/0a4f85f8-d007-3b6c-b72a-222b64951050.roa
File: 0a4f85f8-d007-3b6c-b72a-222b64951050.roa (raw, json)
Hash identifier: SkZu7cnB71onXUsJcjRevzy5eD+sjKk34R6RNto8uu4=
Subject key identifier: C6:A4:FD:8A:9F:F4:D4:34:9C:CF:82:33:AC:03:6A:4D:70:BB:D1:92
Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial: 010D0C9F4328584F4973D9ECCF1157969AD37640
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/0a4f85f8-d007-3b6c-b72a-222b64951050.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 88
IP address blocks: 66.180.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:d9:ec:cf:11:57:96:9a:d3:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=85a903ed-1869-4a7f-88a2-6116b287508a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:66:14:8f:a4:b9:b8:9e:3e:b9:47:97:f1:
5d:b0:b5:eb:47:da:5e:99:5c:3f:85:64:ff:76:2f:
99:ae:b3:41:79:8f:6e:08:13:db:ea:8c:32:50:27:
c6:75:ab:ac:10:49:b2:df:7e:44:72:98:d7:e8:02:
82:1b:71:ab:6f:51:ff:17:77:65:e7:09:e5:b1:a7:
ab:1c:11:0a:e6:d9:9e:5a:d3:18:e9:76:4d:25:68:
ff:0b:52:37:51:8d:88:cc:ef:59:2a:19:66:08:8d:
27:17:d2:76:f2:ee:df:4a:b1:d1:80:59:b5:84:b4:
4f:c9:1a:57:6e:c8:4f:9f:69:cf:08:66:bd:7b:63:
09:b9:c7:9a:1e:69:9f:8a:bb:34:43:65:c3:b8:8b:
ae:b4:9f:54:be:dd:74:04:e5:7c:d5:dc:1c:2e:e4:
f5:51:bb:41:c5:6a:2d:8f:65:99:7a:f3:ce:96:6f:
f1:ad:1a:50:29:df:47:b2:b3:60:28:97:4f:9f:37:
09:f1:de:fe:6a:90:0c:de:e5:1e:e8:a8:c9:b6:32:
33:2e:65:a1:c6:b0:87:e2:b8:01:75:e1:22:59:23:
73:9c:0f:7e:7b:38:da:dc:47:dc:df:d2:e2:f3:7b:
18:1e:8d:61:e4:23:af:17:69:79:da:9d:64:b2:49:
c3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A4:FD:8A:9F:F4:D4:34:9C:CF:82:33:AC:03:6A:4D:70:BB:D1:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/0a4f85f8-d007-3b6c-b72a-222b64951050.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
X509v3 Authority Key Identifier:
keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
sbgp-ipAddrBlock: critical
IPv4:
66.180.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:97:54:ea:06:33:c2:26:e6:81:88:68:27:96:1c:bc:f4:8b:
50:41:7b:16:34:e0:e4:29:18:8d:ee:c3:f5:88:81:a1:8a:75:
8c:86:15:d0:12:82:16:70:38:ce:a9:10:23:77:60:d8:38:08:
b6:6d:e0:79:d9:dd:c0:1e:0e:20:0e:fe:6f:c9:6b:83:25:e5:
d1:61:a0:59:96:6d:68:fa:f2:67:b4:87:e6:21:1e:e4:f7:95:
f1:09:64:32:16:30:1e:62:c3:29:dd:ce:c4:68:e3:9e:04:ed:
69:43:62:a5:18:47:de:5d:6a:c9:ce:b9:4d:53:65:d6:0d:2a:
ca:f8:d9:4a:bd:9d:5d:fe:96:d0:5f:df:39:67:5a:af:16:34:
52:6a:e4:69:a8:76:60:e3:9e:29:97:f4:b7:4c:2f:d3:9b:52:
a7:40:0a:d6:35:0e:87:6e:f6:6a:93:62:4b:dd:c4:6e:46:3f:
8c:ca:47:39:e8:55:c9:62:46:54:7c:db:2a:2b:c8:65:54:23:
bf:11:71:6c:5c:61:45:b4:9b:22:94:19:07:ee:51:c7:a0:8d:
e9:51:d6:73:c1:23:bf:9e:de:a7:42:4f:e1:da:4e:36:41:52:
41:74:fc:20:c0:c3:52:09:ec:de:84:45:00:58:57:86:4b:6e:
0d:6a:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:47:25 2026 by rpki-client