
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa
File: b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa (raw, json)
Hash identifier: leVdNbFbKJaoM+OFxqx1Nuy6smypE6xs54HScQ+iYIw=
Subject key identifier: 10:A0:3F:F9:03:23:99:35:C8:98:32:50:9B:2E:0F:33:A0:2E:4C:7D
Certificate issuer: /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial: 010D0C9F4328584E94EA5271FDE8E148388D38A0
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa
Signing time: Wed 22 Jul 2026 09:00:11 +0000
ROA not before: Wed 22 Jul 2026 09:00:11 +0000
ROA not after: Tue 20 Oct 2026 09:00:11 +0000
asID: 20055
IP address blocks: 204.11.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:94:ea:52:71:fd:e8:e1:48:38:8d:38:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Validity
Not Before: Jul 22 09:00:11 2026 GMT
Not After : Oct 20 09:00:11 2026 GMT
Subject: CN=b0776be3-1f2d-4845-9e81-b95d9e9949b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:6e:c2:7b:61:fe:70:dd:c8:e6:27:45:c1:
21:d1:a9:be:d0:a4:02:29:7c:d6:5b:ed:4a:db:35:
3f:4f:54:ba:16:cc:ef:cb:c9:a1:f9:be:e2:7c:16:
00:e2:a0:95:cb:59:c4:b2:35:7f:1a:a5:a2:2b:36:
2f:da:96:bf:e2:9b:32:c2:8b:e5:16:0a:ba:d6:39:
75:14:94:3f:e0:12:ca:e8:76:18:d6:ba:c1:67:ae:
99:48:07:be:7b:ce:ea:b9:80:d3:a4:0a:03:7a:f6:
9c:d5:e3:85:33:0d:4b:bf:9e:27:13:a9:92:17:92:
93:7c:03:16:28:75:43:e2:f3:ff:93:c2:cd:06:48:
7b:46:ff:b0:05:2f:3b:1a:b2:a5:d2:bf:ac:4d:da:
49:b7:3a:87:b9:0f:4e:22:56:d3:e0:9c:d0:28:05:
6f:ec:26:96:ef:06:5f:81:15:c7:62:87:32:35:55:
a1:44:78:03:6f:3e:96:05:ed:14:fe:e1:81:01:8c:
0f:65:6b:ea:34:dc:a9:98:a6:ab:0a:96:67:b9:b2:
f2:3e:5e:5a:bc:42:37:33:90:da:6e:98:b1:1d:37:
1e:23:04:3b:e0:2c:94:b7:24:c5:83:c6:47:e6:b0:
c7:cf:b0:cf:51:21:10:a1:41:88:20:98:28:d7:c4:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A0:3F:F9:03:23:99:35:C8:98:32:50:9B:2E:0F:33:A0:2E:4C:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
X509v3 Authority Key Identifier:
keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
sbgp-ipAddrBlock: critical
IPv4:
204.11.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:34:b8:76:f4:c1:77:fe:ba:26:ce:54:e4:bb:20:e7:62:41:
14:87:60:b6:0a:50:72:0e:22:e2:b4:bc:c1:43:35:eb:d8:23:
8b:3a:ce:ad:93:9c:8f:9c:88:25:56:f9:64:5e:1c:99:3d:2b:
07:39:bd:ae:f8:d4:94:d2:42:66:35:62:d9:c7:66:cc:3d:13:
95:89:14:4d:f5:23:38:9d:bf:28:2f:2c:03:17:7b:13:ff:d7:
01:9e:7c:f7:17:ec:71:21:93:2a:48:6b:2c:ca:40:bc:7b:ce:
34:b8:cb:98:73:0a:83:98:9e:94:06:cc:15:e5:25:38:83:40:
3d:1d:3f:fe:00:3c:81:9b:61:f7:06:77:1e:76:82:f9:e9:a4:
71:f7:bf:4b:2f:f7:d6:c7:35:fd:f8:99:32:48:d8:95:b5:0b:
7e:ea:a0:66:71:d8:7a:e6:7b:7b:11:5d:cc:89:f2:f6:bc:52:
5b:b4:73:f1:af:6d:9b:7c:bd:9a:1b:b9:59:ba:80:9e:b9:21:
a4:74:4c:47:58:6a:0d:a7:3c:f4:fe:73:ee:ec:85:c9:dd:91:
dc:02:89:7b:fd:0e:43:23:f6:44:7b:0d:6a:84:45:d1:09:d3:
bf:a3:84:cf:72:f3:7a:36:8a:02:02:d4:9e:0e:66:5c:81:a9:
bc:45:9e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:11:50 2026 by rpki-client