
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa
File: 8b3890fd-1aa0-3cae-827e-1384e95466a3.roa (raw, json)
Hash identifier: tL5WBclPwganFjImoF4Mprsr0YgRh2rssETOJcaTmz8=
Subject key identifier: 23:F6:3B:28:D1:CF:8D:30:68:08:DF:BA:B5:AA:4B:72:50:38:69:C2
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584DA815876DC20E45DEA5424360
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa
Signing time: Tue 28 Apr 2026 13:00:30 +0000
ROA not before: Tue 28 Apr 2026 13:00:30 +0000
ROA not after: Mon 27 Jul 2026 13:00:30 +0000
asID: 203
IP address blocks: 168.87.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a8:15:87:6d:c2:0e:45:de:a5:42:43:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Apr 28 13:00:30 2026 GMT
Not After : Jul 27 13:00:30 2026 GMT
Subject: CN=27b1fdfd-958b-4e52-913a-bed08ae8023c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e5:3d:8e:64:e0:f0:97:cf:e7:0c:e7:14:85:
fc:6c:b1:4a:95:92:8a:bf:f2:7d:1e:43:2b:e5:ec:
ab:2d:35:98:53:d7:27:cd:4e:8c:62:63:54:66:41:
67:83:28:aa:a7:35:46:4a:09:36:54:75:7d:33:11:
05:f4:16:31:35:1c:52:a8:b5:51:70:9a:1c:1d:58:
c9:6c:82:19:68:7b:49:b7:1b:76:b8:90:d1:3c:c7:
b0:54:ef:6a:47:6f:af:0e:11:f8:14:d8:a4:00:1b:
16:fd:d7:f1:39:e1:ab:cf:ed:7b:50:87:37:ed:06:
33:71:16:3f:1e:a5:fd:4e:45:6b:b6:b0:29:31:ca:
c7:8b:eb:92:11:fb:55:cb:38:b2:02:7f:0d:09:e1:
6f:8a:1f:21:00:d1:d7:fe:2c:ea:9d:ac:a7:53:a2:
f6:53:62:a7:f2:5f:4b:9d:a9:bd:f6:f7:7e:6c:c0:
24:c8:a9:cc:a2:12:42:b7:f3:9c:77:f5:0d:a7:7b:
ed:8b:87:85:f9:20:8d:e1:d8:8a:d0:5d:41:e0:22:
9b:71:8d:79:12:4a:df:fd:26:0f:29:aa:74:21:db:
8a:2e:f7:8e:53:07:1e:ea:90:f3:49:46:3f:4e:8e:
bd:82:0d:74:e5:ba:b9:15:95:2c:8a:79:a3:b0:d2:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F6:3B:28:D1:CF:8D:30:68:08:DF:BA:B5:AA:4B:72:50:38:69:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:ac:a0:5f:43:69:1d:46:43:21:34:45:93:c5:b5:3f:8e:9b:
56:d9:95:99:b0:24:8e:24:57:53:de:cc:d8:78:2e:68:5b:ff:
00:c3:e6:40:33:fe:e2:7c:de:3d:64:35:4e:d4:08:f7:7d:54:
95:37:a7:c0:15:4c:e9:c7:71:c5:a2:b8:47:a5:ed:18:27:e1:
6f:d8:e0:42:33:3d:7a:40:fc:8d:81:ae:0c:96:15:2c:13:19:
76:05:cd:0c:2b:c1:77:cb:c8:90:bb:43:08:92:a9:f0:db:33:
69:3e:12:7b:15:f5:c6:6c:a3:ca:97:f8:b0:13:9a:36:78:b2:
cf:c2:9b:3b:60:3e:6c:4a:39:36:4f:48:72:41:81:c3:cb:b7:
68:ec:7c:b3:49:7b:76:e8:9d:b4:b9:35:46:ee:b6:05:1f:95:
8c:64:db:91:5f:6b:0a:00:13:4c:d2:3b:d2:5b:0d:a8:dd:cc:
52:00:11:33:88:02:56:95:b5:3c:af:b4:70:e3:51:d0:66:78:
11:dd:29:6d:e2:78:27:a8:1c:02:bf:3d:ce:cd:9b:cf:4d:91:
43:37:fa:e8:0f:7a:e7:42:c2:b7:96:8f:78:84:f5:62:29:83:
83:ab:89:0e:87:00:36:16:08:b4:f4:39:d1:ac:09:ec:28:82:
0d:28:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:18:25 2026 by rpki-client