
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa
File: ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa (raw, json)
Hash identifier: mBDAz91ID652i9DJfQ6pPs/K5Pj+u5etqnVuDYt/oYc=
Subject key identifier: 0C:8A:A7:2D:09:9D:72:5F:48:86:37:1A:F5:2D:15:01:EB:6D:E1:3B
Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Certificate serial: 010D0C9F4328584DB1DAD388116C71D9EAFC3730
Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa
Signing time: Sat 02 May 2026 01:00:24 +0000
ROA not before: Sat 02 May 2026 01:00:24 +0000
ROA not after: Fri 31 Jul 2026 01:00:24 +0000
asID: 14618
IP address blocks: 208.88.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b1:da:d3:88:11:6c:71:d9:ea:fc:37:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Validity
Not Before: May 2 01:00:24 2026 GMT
Not After : Jul 31 01:00:24 2026 GMT
Subject: CN=21b59842-5687-4ed6-ba3e-58b3411e8fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:2f:7b:1c:42:8c:83:71:0b:34:a0:57:b7:
da:15:ad:9a:eb:02:04:1b:68:ce:de:94:72:a0:81:
67:fd:1a:64:42:9a:61:39:1f:a8:8a:fc:e4:77:ff:
38:d6:0b:2e:20:38:53:5a:ab:6b:c5:07:86:ac:95:
7b:97:4c:ce:ce:38:1a:8f:5a:56:9c:4a:22:b1:a7:
ad:2e:c9:25:84:01:c4:06:da:d6:2a:7e:83:7f:80:
81:2c:82:ab:ad:d4:9e:c9:18:dd:ac:ea:6d:2e:d3:
e4:b0:54:f7:a6:00:2b:08:da:40:20:71:e6:3a:e7:
d7:45:bd:c4:16:26:37:1c:20:2d:69:ee:26:31:e1:
bd:96:0e:dc:43:14:c5:a9:52:64:b9:87:0d:80:01:
db:00:b9:32:04:90:3c:d4:8a:97:cd:c6:16:d2:39:
a9:60:8f:b1:d7:ee:81:28:e6:68:de:a8:92:bf:7f:
5b:6b:14:96:0f:88:5c:d0:07:5a:63:a4:b1:df:0c:
64:06:39:46:3c:12:3f:ec:70:4f:a4:2e:d5:c7:79:
59:1d:d5:11:14:2b:81:b5:2f:f8:1c:87:56:1e:60:
68:1d:aa:dd:62:93:c2:f9:e3:cf:c2:df:c2:86:2a:
0a:e4:38:dc:7b:8f:3d:6a:12:e7:b5:38:76:f7:e7:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8A:A7:2D:09:9D:72:5F:48:86:37:1A:F5:2D:15:01:EB:6D:E1:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl
X509v3 Authority Key Identifier:
keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:b7:d6:75:f4:b1:52:43:02:9e:07:07:59:bd:37:a0:c5:b8:
22:bd:ee:d5:78:9a:45:0f:0b:b8:29:1b:8b:64:59:bb:94:d1:
93:79:60:e5:81:f3:09:b3:17:36:cd:63:2a:a9:75:79:4f:96:
f0:86:4f:a3:ed:4a:05:72:0b:b3:f1:bf:54:56:be:30:6b:4b:
84:7a:9c:ca:24:4c:e4:7f:41:ae:38:25:a9:0a:f3:91:df:ae:
5c:06:54:d6:6a:b5:b7:03:16:0a:44:72:ec:05:b5:db:39:05:
8e:4a:aa:75:b6:0c:b1:25:d4:eb:fc:8e:5c:62:f2:08:2f:fb:
fe:c6:e2:90:2d:8b:47:58:c8:b7:f7:6f:70:c9:8c:94:c1:cc:
68:25:fa:01:21:d1:62:71:4a:bf:a7:4c:a1:76:44:f0:d5:9c:
88:02:5a:ec:0f:5a:03:3f:79:09:2a:3e:0f:7e:5e:f5:e6:2f:
fc:1c:37:88:3f:c1:8c:94:b7:13:52:96:04:e1:81:7c:99:89:
2b:75:58:4d:b6:78:4f:ef:27:a4:35:4e:eb:d5:20:56:46:47:
c4:8c:28:b3:f6:c7:cd:75:dd:81:cd:7c:a0:3a:29:cc:09:f4:
cd:f4:84:7e:b1:1c:07:26:99:48:78:a0:d4:95:3e:df:b5:07:
59:38:4c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:10 2026 by rpki-client