
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/09a34158-cbb7-3dd2-a369-3225f666e763.roa
File: 09a34158-cbb7-3dd2-a369-3225f666e763.roa (raw, json)
Hash identifier: ufmNR6IxmPAvPyCMvYrCAEo88f7T9CVU5Rnu0sOnnYo=
Subject key identifier: BA:0B:A5:03:1D:C1:69:12:C1:4B:4F:96:FB:5A:9C:42:9C:42:8B:57
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584E561A13915D4264A660444900
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/09a34158-cbb7-3dd2-a369-3225f666e763.roa
Signing time: Mon 29 Jun 2026 21:00:12 +0000
ROA not before: Mon 29 Jun 2026 21:00:12 +0000
ROA not after: Sun 27 Sep 2026 21:00:12 +0000
asID: 1403
IP address blocks: 66.158.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:56:1a:13:91:5d:42:64:a6:60:44:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Jun 29 21:00:12 2026 GMT
Not After : Sep 27 21:00:12 2026 GMT
Subject: CN=79e8a41c-0612-4103-b336-6f2fe29bdae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:40:6c:c1:9b:46:84:f9:31:e0:05:d7:fc:6b:
b9:47:6d:fb:9d:86:46:dc:d5:39:99:21:09:f5:c6:
98:13:ce:6c:7d:39:26:20:4d:06:42:9d:57:19:84:
a0:8a:a2:4c:b6:76:d3:56:8a:43:e3:d3:49:23:d7:
01:1c:e2:19:12:e9:11:bb:27:9a:fa:02:aa:f9:3a:
1e:e8:e2:93:f9:15:dc:74:af:c8:d9:6a:76:43:36:
5b:61:d0:86:16:40:a7:09:1c:61:8e:63:5a:43:76:
54:eb:ad:0a:c2:c1:67:88:1f:e3:76:be:d9:03:2a:
f0:58:60:95:17:a3:6a:74:9d:1b:c0:cb:d8:77:34:
d7:ac:b8:24:2e:18:c0:e4:cd:09:6c:de:02:d4:62:
03:27:df:b0:22:cf:40:1d:8c:48:22:7e:31:db:fa:
5c:50:2b:d6:ac:23:74:4e:b3:a7:0d:86:f8:30:5c:
5e:17:f5:bd:e2:e5:08:af:ab:c0:16:b7:60:8b:d6:
14:45:24:99:a1:14:80:cc:26:85:d9:7e:7b:09:b5:
48:ed:4e:f0:c7:df:7f:f3:ca:b7:d1:d9:6c:32:2b:
77:73:72:32:86:40:4e:40:36:08:c3:0f:1d:76:17:
42:d3:b5:0c:fe:f9:f9:3d:b3:87:84:0d:6a:6d:65:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0B:A5:03:1D:C1:69:12:C1:4B:4F:96:FB:5A:9C:42:9C:42:8B:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/09a34158-cbb7-3dd2-a369-3225f666e763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
66.158.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:23:a0:ab:35:59:bb:5b:b4:4c:15:64:ab:46:ac:3d:fd:03:
73:d4:56:01:c3:5b:4f:e1:78:65:16:f9:c6:fb:d3:2f:23:80:
f0:cf:9a:7d:8a:c6:ef:0d:09:44:50:48:53:03:d5:e7:85:33:
56:dd:44:81:ec:d5:6f:cd:88:8f:4a:3d:72:51:1f:c8:90:d2:
2a:88:6e:74:32:39:76:f2:e9:b1:3b:4b:ec:33:ba:58:bf:8a:
98:10:f4:75:b8:f7:1d:09:a0:0d:98:a1:50:63:12:69:6a:eb:
4f:7c:6d:d3:f6:d6:7b:d5:dd:ae:65:fb:41:6c:0b:6f:17:a5:
ff:f9:5e:2e:83:74:79:5c:d0:29:da:45:42:c5:69:b9:9a:2e:
c9:51:9e:5b:bd:f7:fe:ac:71:9c:13:a9:b8:a1:6e:13:1b:1e:
b5:c0:45:32:12:0a:13:19:83:1b:32:ff:f6:7a:f2:e1:cd:cb:
84:e8:d9:8e:26:be:54:af:f9:08:d5:f9:13:d8:74:23:25:e0:
7b:9a:d5:f1:22:31:8e:fa:11:8a:f3:39:c6:06:57:3d:c4:86:
1e:6f:01:c7:c4:20:f6:2d:bc:89:08:b0:b4:59:52:d0:ea:26:
7f:6b:eb:51:e2:8e:0d:97:43:c7:cf:e1:32:0e:16:8c:1e:36:
d2:33:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:31 2026 by rpki-client